Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
File:                     5eewNLTnyobXFrEUD8pbWQ8-eMA.mft (raw, json)
Hash identifier:          Me6O/O0K/nnAAiEZo7pAFOFE6LtqRFRtIDg09nKWVp4=
Subject key identifier:   45:83:4A:A6:11:EE:AD:55:63:AB:59:E4:A9:87:93:09:CA:E0:42:FC
Authority key identifier: E5:E7:B0:34:B4:E7:CA:86:D7:16:B1:14:0F:CA:5B:59:0F:3E:78:C0
Certificate issuer:       /CN=e5e7b034b4e7ca86d716b1140fca5b590f3e78c0
Certificate serial:       0196764334C5BB3723D90C91CBC86F5782B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
Manifest number:          149F
Signing time:             Sun 27 Apr 2025 08:00:38 +0000
Manifest this update:     Sun 27 Apr 2025 08:00:38 +0000
Manifest next update:     Mon 28 Apr 2025 08:00:38 +0000
Files and hashes:         1: 5eewNLTnyobXFrEUD8pbWQ8-eMA.crl (hash: +MoyKAdG6rX8IGcY/SQNcHq/HlxYvNxzGXvQUpwdUBQ=)
                          2: keGJNieidYL1r09rKvuVYvj1tVg.roa (hash: WKE9as92KP/uovsO0JAFz/5JHXNOjH33Qe02BBSBG6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:43:34:c5:bb:37:23:d9:0c:91:cb:c8:6f:57:82:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e7b034b4e7ca86d716b1140fca5b590f3e78c0
        Validity
            Not Before: Apr 27 08:00:38 2025 GMT
            Not After : Apr 28 08:00:38 2025 GMT
        Subject: CN=45834aa611eead5563ab59e4a9879309cae042fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9a:c9:d7:47:df:b2:d5:3d:71:b2:cf:58:e1:
                    35:0c:65:3f:f2:4d:6a:d9:ac:5c:cd:b9:39:33:82:
                    89:3c:56:3f:18:87:d7:d0:8e:86:1f:f2:3b:13:c9:
                    b2:9b:2a:5f:99:f6:6d:48:16:32:ea:14:64:da:c6:
                    3b:dc:19:05:d0:4e:3d:3a:20:f5:20:47:6c:79:1c:
                    b5:fd:1e:66:b3:8f:bf:6b:c6:d0:56:7e:e6:78:70:
                    0a:fc:36:a0:06:a3:c0:43:f6:69:67:1f:dd:dc:88:
                    14:91:85:66:f4:d5:13:57:b5:19:28:12:c9:7b:67:
                    62:3a:15:0c:4d:a1:f0:5b:7d:40:37:cc:c8:73:bb:
                    8a:61:04:39:16:54:a9:11:f0:8c:50:fd:8b:9a:30:
                    43:b1:43:e2:0b:0e:50:04:82:28:a9:1e:bb:d8:57:
                    92:c9:e6:73:b9:c9:3e:34:e3:52:8d:f6:97:36:86:
                    38:7a:d5:ef:b0:b8:bf:e5:83:0f:e3:f9:61:bf:2f:
                    75:40:cd:f5:0d:4f:d7:47:6a:cc:f3:94:c5:8a:30:
                    6c:9e:b6:e2:82:1e:d6:ad:c0:52:37:d7:29:e7:1a:
                    3d:d5:42:f1:66:82:71:c3:55:53:a8:2c:63:5c:4d:
                    93:d1:c1:0c:85:f3:7f:05:0a:84:11:b5:6e:5d:a2:
                    c0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:83:4A:A6:11:EE:AD:55:63:AB:59:E4:A9:87:93:09:CA:E0:42:FC
            X509v3 Authority Key Identifier:
                keyid:E5:E7:B0:34:B4:E7:CA:86:D7:16:B1:14:0F:CA:5B:59:0F:3E:78:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f3:ff:06:cf:ff:29:99:ca:b9:81:15:92:75:7c:d1:fb:51:
         dd:49:ed:22:62:a4:4f:c9:c5:31:cf:5e:c4:2c:fe:51:45:b4:
         a1:b6:af:cf:3f:95:57:46:ea:7f:73:cb:36:bf:ae:6e:f8:cc:
         d1:2a:55:b0:58:9d:b4:a7:07:2b:f3:54:41:a9:97:85:12:53:
         46:40:06:45:9b:70:53:c4:76:64:98:bd:85:b7:55:73:aa:84:
         2e:e9:04:f8:27:a1:1b:6e:78:bf:3f:19:24:23:1c:f9:ed:03:
         4c:18:96:80:1c:da:99:2d:fd:dd:53:b4:5b:d4:70:7d:78:8e:
         d8:94:10:6d:af:40:6f:4d:b3:48:e4:23:ec:e4:fa:5f:08:0a:
         dc:9c:fb:b2:6b:be:7b:32:6e:24:17:b3:96:5a:d8:1b:b8:e6:
         7b:00:57:16:9c:57:93:b5:67:ec:e8:78:67:37:74:5f:16:af:
         ae:80:16:31:2d:d3:f4:0e:c9:8c:17:d3:00:36:a7:16:73:a5:
         85:fa:eb:95:05:56:68:b3:5c:43:55:b1:dd:2f:7c:4c:d2:6f:
         98:92:6f:b5:cd:2c:58:0b:32:97:46:86:cf:a3:18:96:e4:51:
         ae:e2:ae:c3:d0:44:5c:b4:dc:72:4d:8d:ff:2a:13:c8:10:02:
         d3:5a:af:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2QzTFuzcj2QyRy8hvV4KwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZTdiMDM0YjRlN2NhODZkNzE2YjExNDBmY2E1YjU5MGYz
ZTc4YzAwHhcNMjUwNDI3MDgwMDM4WhcNMjUwNDI4MDgwMDM4WjAzMTEwLwYDVQQD
Eyg0NTgzNGFhNjExZWVhZDU1NjNhYjU5ZTRhOTg3OTMwOWNhZTA0MmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZrJ10ffstU9cbLPWOE1DGU/8k1q
2axczbk5M4KJPFY/GIfX0I6GH/I7E8mymypfmfZtSBYy6hRk2sY73BkF0E49OiD1
IEdseRy1/R5ms4+/a8bQVn7meHAK/DagBqPAQ/ZpZx/d3IgUkYVm9NUTV7UZKBLJ
e2diOhUMTaHwW31AN8zIc7uKYQQ5FlSpEfCMUP2LmjBDsUPiCw5QBIIoqR672FeS
yeZzuck+NONSjfaXNoY4etXvsLi/5YMP4/lhvy91QM31DU/XR2rM85TFijBsnrbi
gh7WrcBSN9cp5xo91ULxZoJxw1VTqCxjXE2T0cEMhfN/BQqEEbVuXaLAGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWDSqYR7q1VY6tZ5KmHkwnK4EL8MB8GA1UdIwQY
MBaAFOXnsDS058qG1xaxFA/KW1kPPnjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVld05MVG55b2JYRnJFVUQ4cGJXUTgtZU1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS82ZjRiZjQtZjFhYS00N2U3LTlkZjEt
ODAwNzBhZjBlYjVlLzEvNWVld05MVG55b2JYRnJFVUQ4cGJXUTgtZU1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS82ZjRiZjQtZjFhYS00N2U3LTlkZjEtODAwNzBhZjBlYjVl
LzEvNWVld05MVG55b2JYRnJFVUQ4cGJXUTgtZU1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPP/Bs//
KZnKuYEVknV80ftR3UntImKkT8nFMc9exCz+UUW0obavzz+VV0bqf3PLNr+ubvjM
0SpVsFidtKcHK/NUQamXhRJTRkAGRZtwU8R2ZJi9hbdVc6qELukE+CehG254vz8Z
JCMc+e0DTBiWgBzamS393VO0W9RwfXiO2JQQba9Ab02zSOQj7OT6XwgK3Jz7smu+
ezJuJBezllrYG7jmewBXFpxXk7Vn7Oh4Zzd0XxavroAWMS3T9A7JjBfTADanFnOl
hfrrlQVWaLNcQ1Wx3S98TNJvmJJvtc0sWAsyl0aGz6MYluRRruKuw9BEXLTcck2N
/yoTyBAC01qvPQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:19:56 2025 by rpki-client