Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
File:                     E5cPuUba-bnv47YJ8onK4Bn8YYw.mft (raw, json)
Hash identifier:          bvApgcjGnuvISE/hBr46J4NdOCcumB+a9kEP3VMWBqc=
Subject key identifier:   7C:57:D7:FF:81:D9:2B:C8:DB:F7:40:49:57:83:9D:EF:04:F5:EF:93
Authority key identifier: 13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C
Certificate issuer:       /CN=13970fb946daf9b9efe3b609f289cae019fc618c
Certificate serial:       01968C947EC8ABF91A42B9C2709B0E57DB91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
Manifest number:          0F76
Signing time:             Thu 01 May 2025 16:01:04 +0000
Manifest this update:     Thu 01 May 2025 16:01:04 +0000
Manifest next update:     Fri 02 May 2025 16:01:04 +0000
Files and hashes:         1: E5cPuUba-bnv47YJ8onK4Bn8YYw.crl (hash: hdczP2TbRHfbHc/aYNB/s/0F2ZSyuLowloyTy6VvSBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 14:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8c:94:7e:c8:ab:f9:1a:42:b9:c2:70:9b:0e:57:db:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13970fb946daf9b9efe3b609f289cae019fc618c
        Validity
            Not Before: May  1 16:01:04 2025 GMT
            Not After : May  2 16:01:04 2025 GMT
        Subject: CN=7c57d7ff81d92bc8dbf7404957839def04f5ef93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:38:57:cb:bd:8e:33:4d:85:2d:5f:46:95:74:
                    97:f8:55:3e:31:b2:74:ec:25:cf:66:3f:d5:d1:b5:
                    b8:2c:f1:53:e8:d0:f4:39:a4:cd:5e:5b:2d:9b:80:
                    3d:9c:2b:e5:5c:68:9b:4e:82:0a:91:a6:a4:38:19:
                    d9:2e:71:e9:b0:21:34:7f:0e:28:36:ce:0b:af:b7:
                    64:7b:ae:82:1b:cd:ef:8e:ca:f5:11:46:c5:2d:ed:
                    16:dc:a9:c3:a6:38:79:56:e7:10:c9:f4:ff:31:b3:
                    a6:4f:33:0e:f0:23:08:a1:e5:28:88:3e:39:51:d9:
                    5d:24:e4:8d:65:bd:66:29:f3:34:92:ba:fc:cf:fd:
                    fb:64:f7:df:de:3c:c3:9f:0c:2e:55:9a:3e:32:29:
                    90:e0:3b:4d:51:ef:d8:70:f1:ca:28:87:1e:12:e3:
                    ef:b0:b7:f6:74:47:4a:b6:1d:0d:3c:ac:08:b2:80:
                    72:e7:46:4c:9c:67:82:ab:45:08:fb:bf:3a:cf:97:
                    c5:eb:d1:63:4e:2a:28:16:82:ab:bc:64:af:dd:3d:
                    cf:d2:97:ae:2b:fd:8a:e9:89:f6:51:98:b0:4d:01:
                    73:ee:b7:10:7c:74:f4:34:59:0b:e4:49:30:80:4a:
                    83:9c:e2:59:14:5e:f6:16:25:85:52:04:0b:57:3d:
                    69:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:57:D7:FF:81:D9:2B:C8:DB:F7:40:49:57:83:9D:EF:04:F5:EF:93
            X509v3 Authority Key Identifier:
                keyid:13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:50:79:bb:70:5c:1f:ac:2a:fc:90:02:e6:6b:c5:d5:10:51:
         58:de:f9:d7:b0:2c:5d:b1:db:1c:b0:81:12:e7:74:f6:2d:42:
         c0:81:de:73:ba:a9:a9:d2:33:c3:d5:d6:08:b2:8e:a2:a0:dc:
         f7:a3:fd:39:80:cf:c2:9c:60:10:83:5c:02:70:27:fa:1e:9c:
         b7:76:b1:99:f4:b7:d0:51:2e:08:66:67:22:2c:7b:1f:9e:ad:
         64:fe:f4:af:6f:5b:d5:91:e5:f6:7e:c0:57:49:2d:30:61:22:
         53:bf:15:fc:13:2f:26:bf:68:3b:51:35:13:8c:d4:ed:b0:41:
         f7:32:70:2f:8f:ef:30:c0:41:80:07:f8:d3:32:b9:f1:b6:29:
         af:59:1f:86:a7:3c:bb:ca:85:56:59:c3:55:44:e8:64:e6:8c:
         cd:a6:73:d9:4c:30:0a:b7:82:c3:09:bb:c1:87:ea:de:5d:cd:
         51:1b:4c:24:60:ce:73:0e:ba:ce:9a:77:3a:59:50:de:da:a0:
         10:56:f9:d2:8b:09:ae:dd:1c:01:7e:d6:d5:84:29:76:1c:63:
         9b:c1:ee:db:fb:d4:bf:e0:19:e8:55:aa:b7:df:aa:07:0e:86:
         77:fe:02:45:fa:46:3c:1b:21:d3:88:70:e5:6f:ce:76:eb:e7:
         c1:89:cc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:44:05 2025 by rpki-client