Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
File:                     5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft (raw, json)
Hash identifier:          dGt4VUDmv05Kb4EYeBoeXVI0oZ3vYSUGddAAc6KSVSk=
Subject key identifier:   11:DE:D5:62:DE:4E:78:32:2D:6D:F2:DA:E5:5F:2A:6E:8F:35:D5:37
Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
Certificate issuer:       /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Certificate serial:       0196764331D7C2E7B87E7239CF466A7AEAB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
Manifest number:          1510
Signing time:             Sun 27 Apr 2025 08:00:37 +0000
Manifest this update:     Sun 27 Apr 2025 08:00:37 +0000
Manifest next update:     Mon 28 Apr 2025 08:00:37 +0000
Files and hashes:         1: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl (hash: CTr12wOybt4fImRIu3EpCCn3/pg90D8zGPc8dC3MOcQ=)
                          2: TmGH7yXkMz-v6gHvCr9qE37nKcA.roa (hash: n1u54C/BtvIrlKmaScJ2jkmbHT4HONn1UuTucKaDW6g=)
                          3: k7UwqFFBmprxDA56kDwgmZFvA3g.roa (hash: oLwFA32V9FgAocZGOyNmCc1klUCv8GcjZUVDNdla0Jo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:43:31:d7:c2:e7:b8:7e:72:39:cf:46:6a:7a:ea:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
        Validity
            Not Before: Apr 27 08:00:37 2025 GMT
            Not After : Apr 28 08:00:37 2025 GMT
        Subject: CN=11ded562de4e78322d6df2dae55f2a6e8f35d537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:54:ab:93:f8:17:d2:1d:12:fa:12:4e:91:a8:
                    93:f4:0e:84:ae:91:12:3f:16:52:fd:4a:67:db:44:
                    c6:a0:dc:03:1a:5f:53:cc:f3:90:de:ce:03:22:eb:
                    a2:6c:e2:69:54:e6:5e:65:3b:2c:00:7b:8a:4a:97:
                    98:e3:ed:7f:4c:45:7b:22:56:b6:d1:ee:86:12:d7:
                    6b:d4:6e:34:16:70:c2:e4:40:da:a3:7e:66:e7:27:
                    93:0d:e4:68:38:f3:63:0b:bf:0d:11:29:cc:b8:e1:
                    9c:6f:12:95:f4:35:31:6a:e5:a4:35:74:f6:c3:c8:
                    4d:54:1b:18:a9:40:1b:73:f1:ba:24:cf:bb:27:b3:
                    27:ea:e5:46:a7:be:21:f5:2c:46:54:3b:89:8f:b1:
                    f4:b9:0e:9b:5c:99:d9:4b:fc:ea:24:92:f2:64:21:
                    e2:0e:e1:fd:91:bc:de:30:c4:77:18:77:83:e2:eb:
                    f0:1b:27:5e:de:f0:7a:44:42:15:cf:de:61:f9:b9:
                    a3:7a:ec:90:8c:08:20:7c:e8:e7:92:17:71:19:c6:
                    bd:18:c2:b9:6f:df:1b:2f:4d:51:70:b1:99:8b:45:
                    aa:cc:bc:4b:e8:76:7e:03:2a:9b:b2:69:a8:e7:aa:
                    9d:9a:5b:a9:1b:f0:bf:16:03:c6:8b:32:80:4a:8b:
                    64:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DE:D5:62:DE:4E:78:32:2D:6D:F2:DA:E5:5F:2A:6E:8F:35:D5:37
            X509v3 Authority Key Identifier:
                keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:3b:4f:ea:3e:05:52:6b:27:f3:9a:ee:72:bd:bb:41:f4:3a:
         30:f0:17:2f:a0:b4:b7:62:e4:a7:eb:bc:c9:58:ab:78:00:1b:
         c6:e0:eb:50:1e:d5:39:71:eb:58:4e:7c:fc:98:ed:36:a8:8b:
         5e:ac:08:2c:d4:15:3c:2d:f1:48:51:bb:db:23:91:0c:e4:3e:
         33:1c:c7:24:f1:9c:28:0e:06:18:1d:db:30:eb:d2:91:94:ab:
         ec:b7:39:33:39:5d:75:9a:cc:ec:4d:64:2a:66:04:1c:4c:46:
         df:cd:5d:ab:dc:2b:01:59:f7:5a:69:88:d5:63:dc:15:d8:47:
         47:30:d9:c7:af:e5:98:b6:d0:a1:e9:75:6f:5a:07:bd:1f:91:
         63:34:a4:f8:5b:c0:d2:25:23:93:02:93:a5:9b:a6:c1:c0:10:
         14:69:92:d9:77:84:0e:33:45:a5:d3:68:c8:12:0f:d7:f4:f5:
         3e:6b:2f:ad:cd:32:21:30:9c:5b:fc:85:14:c5:17:8f:74:d7:
         ca:ee:f8:fd:23:89:8a:e6:9d:42:68:2a:52:90:b3:e2:e1:74:
         47:95:3f:a4:92:7b:62:a6:56:c8:46:d3:a9:5f:ee:b5:d8:be:
         5f:b7:e5:64:bc:17:43:d3:5f:10:f5:37:b0:82:7b:c8:1f:f2:
         72:48:a2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:17:29 2025 by rpki-client