Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
File:                     5bHedEPq8YzrBoiNfvk6VjWkrh4.mft (raw, json)
Hash identifier:          INpKW1XRr/62KJxuiwOe608H7PCX0ykRXjGFX+JyBYA=
Subject key identifier:   D3:39:9E:5A:11:4A:84:91:D3:35:50:3D:39:A3:AA:6D:38:44:75:07
Authority key identifier: E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
Certificate issuer:       /CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Certificate serial:       0196A31C1D912B2B0554DAEA5B84116368F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
Manifest number:          0BE5
Signing time:             Tue 06 May 2025 01:00:50 +0000
Manifest this update:     Tue 06 May 2025 01:00:50 +0000
Manifest next update:     Wed 07 May 2025 01:00:50 +0000
Files and hashes:         1: 5bHedEPq8YzrBoiNfvk6VjWkrh4.crl (hash: m6Tz/PX5pplVPvAxPkK7Rm8jzLiY7u9uwIhBhilLXSU=)
                          2: LPt_zehQ6PKVzp0MjfSZ8bhI3FI.roa (hash: 2Of6PA2/JSgV0uL+6WcJ1JnLHaSmd2yrbwOuprAZdu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:1c:1d:91:2b:2b:05:54:da:ea:5b:84:11:63:68:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
        Validity
            Not Before: May  6 01:00:50 2025 GMT
            Not After : May  7 01:00:50 2025 GMT
        Subject: CN=d3399e5a114a8491d335503d39a3aa6d38447507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:13:f8:8a:d5:92:3e:0a:91:bb:97:51:8c:9e:
                    52:65:82:f6:25:62:f6:98:ef:f9:03:6c:e6:79:7b:
                    1e:7c:70:f1:23:92:f7:35:45:ee:51:68:52:27:3a:
                    1f:49:a5:5d:db:60:76:1d:c7:73:1c:61:eb:bd:23:
                    2d:bf:f1:0e:82:23:e1:33:e8:2c:a5:f2:be:32:e8:
                    a3:a0:db:78:dd:e4:3c:a4:f0:81:cf:2f:b9:60:9c:
                    db:bd:af:43:3a:d9:aa:26:55:ac:99:af:18:68:21:
                    73:76:a7:a0:0a:88:be:a7:19:52:3e:cc:91:3e:a2:
                    c0:f0:f9:85:cd:0d:80:9e:b3:60:17:74:0e:53:da:
                    36:81:90:13:1e:6e:3b:e8:bd:a3:e1:db:1b:bf:69:
                    9d:10:d0:03:16:95:2f:58:c8:5c:b0:33:da:95:08:
                    8a:86:63:d1:ea:52:5a:13:31:05:4b:da:fc:df:ba:
                    a1:99:a0:d4:21:2e:c1:36:71:f1:fa:0a:36:09:50:
                    7f:02:3a:27:36:75:94:21:8c:12:ef:52:72:11:73:
                    1f:14:07:d0:aa:b7:8a:6f:8b:12:1a:f8:8b:24:b9:
                    a0:57:f1:7b:58:00:ae:5f:f0:02:c0:f1:bb:a0:c3:
                    88:d3:44:fc:51:db:17:7c:2e:a4:0b:a2:0b:37:1d:
                    e5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:39:9E:5A:11:4A:84:91:D3:35:50:3D:39:A3:AA:6D:38:44:75:07
            X509v3 Authority Key Identifier:
                keyid:E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:55:c3:d4:4a:3c:f0:5a:c2:3e:ab:af:14:c9:d5:14:dd:5d:
         17:e2:be:fc:b8:0f:21:8d:15:ee:84:be:34:9a:20:b5:4f:51:
         5a:61:6b:b5:e5:50:0f:ec:15:70:c5:a3:05:83:42:f8:33:6a:
         9e:77:1d:83:ad:9d:58:3b:a1:73:80:b3:6c:d6:42:9b:67:bb:
         c7:07:c2:e9:50:48:e5:e5:c6:32:ad:13:ea:c4:82:b1:dd:c9:
         7c:b0:45:6a:25:45:8b:58:68:e4:46:1a:05:84:73:aa:16:7e:
         3c:5b:bc:54:56:09:6f:1f:68:f4:51:1e:5c:72:b1:b4:03:12:
         62:6d:f0:be:80:a0:d4:51:bb:13:b2:24:ed:1e:4d:23:1d:83:
         07:17:85:a6:ab:6a:8a:4c:fd:44:7b:ec:ad:91:03:b8:55:ae:
         fd:f9:89:c5:66:ab:a0:c5:e6:01:0c:cd:16:a2:63:42:57:91:
         d6:4e:c8:fc:09:ff:bd:38:7a:6f:20:34:7c:30:4a:5d:c2:1b:
         24:ae:32:0b:97:d8:97:d1:56:0f:ba:34:54:15:52:57:48:0f:
         a9:e4:1c:d4:2c:79:16:2f:0f:68:4b:dd:a5:c2:b3:00:88:c6:
         f8:45:cb:0d:b0:50:a9:7e:03:b3:54:c0:94:74:88:95:c5:07:
         68:a7:59:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:42:14 2025 by rpki-client