Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
File:                     5vqg0vXewCAfVeQJecGQm223fDs.mft (raw, json)
Hash identifier:          2eaGSzKnaMDw0m6n6gghDf8gSBLE3/UqNtMXjHwcW08=
Subject key identifier:   C4:4C:B4:79:FC:CB:29:86:75:D4:65:F2:EB:D2:2B:76:CF:38:91:11
Authority key identifier: E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
Certificate issuer:       /CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Certificate serial:       0196802252AB7687E4796D40116CC7DE3D18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
Manifest number:          151B
Signing time:             Tue 29 Apr 2025 06:00:55 +0000
Manifest this update:     Tue 29 Apr 2025 06:00:55 +0000
Manifest next update:     Wed 30 Apr 2025 06:00:55 +0000
Files and hashes:         1: 5vqg0vXewCAfVeQJecGQm223fDs.crl (hash: w0D63n8JeQcWZFwpTMt3gPXCaTUTXnlY2WZ/H3iffU4=)
                          2: 6DW1a6m05hh-gzCp-p2Th_jROrQ.roa (hash: DVwz9dCE2VA6PR9eWz/ZL0YuKXs4l+SQG40TAFfVI+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:22:52:ab:76:87:e4:79:6d:40:11:6c:c7:de:3d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
        Validity
            Not Before: Apr 29 06:00:55 2025 GMT
            Not After : Apr 30 06:00:55 2025 GMT
        Subject: CN=c44cb479fccb298675d465f2ebd22b76cf389111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:82:5b:75:7b:9f:4c:59:71:e2:97:46:64:
                    1a:d1:2e:97:f8:d4:a0:f0:4d:f2:4d:91:a7:b4:b5:
                    b1:42:9c:81:91:21:4e:27:86:e2:7e:73:4c:a4:c6:
                    3f:4b:d8:c5:67:ef:a5:b9:55:13:43:44:32:02:9c:
                    d1:50:34:ed:15:63:45:41:83:02:a6:23:91:c0:cb:
                    12:58:1b:77:1e:c4:00:81:6c:ed:cd:e6:95:68:84:
                    a0:13:98:a4:d0:7a:15:f9:5f:82:59:6f:66:78:22:
                    8e:7a:67:9c:af:aa:c5:8d:2e:c4:33:b5:db:f3:97:
                    fa:18:46:29:b1:52:d7:f9:b9:c1:17:79:34:ad:17:
                    f3:96:fb:1e:f6:b7:23:bb:2b:d0:f1:f4:c1:08:4c:
                    3a:56:23:ca:d1:61:c4:41:0e:8a:52:13:af:47:82:
                    84:aa:f7:06:41:3d:d4:2f:57:09:cd:68:7b:c0:d8:
                    d9:77:ab:41:d1:9c:71:63:9f:44:29:f4:82:62:7e:
                    82:f4:8f:47:d2:6d:ae:b7:11:b4:30:40:d7:25:46:
                    8a:8b:95:80:da:6a:9f:a3:11:db:b5:66:7b:3c:b9:
                    78:8a:86:da:1b:81:91:ca:a3:9d:8b:19:5d:3e:15:
                    8f:c1:51:f9:8f:67:c2:48:db:51:75:20:da:80:47:
                    43:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4C:B4:79:FC:CB:29:86:75:D4:65:F2:EB:D2:2B:76:CF:38:91:11
            X509v3 Authority Key Identifier:
                keyid:E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:0a:a1:fb:50:8e:39:fe:3f:e6:7e:79:71:96:a3:a6:55:29:
         40:03:03:53:7b:41:c7:85:78:05:d1:a8:9b:d2:16:0b:09:5d:
         a5:d5:41:b2:39:63:a6:a1:e2:64:2f:86:36:98:6f:b7:53:53:
         38:35:f7:5f:c6:c0:d0:32:fb:de:8d:ea:de:1b:fc:3c:e6:32:
         41:e6:2f:7f:80:15:80:7d:66:8c:c2:e1:22:47:3a:1c:ff:d5:
         10:96:6c:6c:76:c3:e1:6a:52:3e:55:eb:f6:a6:9d:8c:d5:69:
         af:e2:1d:44:73:a2:73:b8:b8:01:c2:2c:0a:a8:a2:a6:54:ed:
         c8:78:59:a2:b4:28:e4:a6:75:18:6c:31:c8:23:d0:41:58:20:
         ac:f9:8f:7b:53:41:17:48:b1:b0:70:b9:93:72:82:28:21:6b:
         d6:bc:b9:2c:94:4a:d3:11:8f:e4:1d:4f:36:85:d6:66:14:de:
         90:42:ab:5e:2a:6e:15:1d:e6:e5:a7:b6:31:3c:60:1b:c5:d4:
         4f:74:2d:44:76:65:42:78:fe:10:9c:cb:37:82:48:bf:8f:d3:
         3f:08:f1:b1:70:ec:3c:a7:c4:c5:9b:e7:3e:01:18:34:39:08:
         84:0f:4d:ea:6a:25:95:51:e6:d0:70:65:41:71:5f:2a:29:a9:
         3a:4d:1b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:27:23 2025 by rpki-client