Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft
File:                     eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft (raw, json)
Hash identifier:          pzwJ12If6JjSgOrt/sw23qh7KHwVE6jZIvabCi4mM1g=
Subject key identifier:   D9:B9:1D:DD:8D:5B:06:37:B4:A9:1E:79:D4:B6:AC:21:BF:B5:51:E3
Authority key identifier: 78:C5:80:76:9D:52:1C:89:CC:79:7F:F6:99:CA:CF:0B:A4:3D:A9:BF
Certificate issuer:       /CN=78c580769d521c89cc797ff699cacf0ba43da9bf
Certificate serial:       01967FEAD08552F1DF2D21C21AC77C844CC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft
Manifest number:          05D8
Signing time:             Tue 29 Apr 2025 05:00:17 +0000
Manifest this update:     Tue 29 Apr 2025 05:00:17 +0000
Manifest next update:     Wed 30 Apr 2025 05:00:17 +0000
Files and hashes:         1: eMWAdp1SHInMeX_2mcrPC6Q9qb8.crl (hash: lYD/KpdPcpAe8nI0+f0WkXhwp4h5SMbH1uZFYA1rbPA=)
                          2: q-rEMrzcCLKSVC0BBkFH6PEOzdU.roa (hash: Gog+17gwzclnNwGlh4/AMdyY5c+5OZ3UEQLglik+gVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:ea:d0:85:52:f1:df:2d:21:c2:1a:c7:7c:84:4c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c580769d521c89cc797ff699cacf0ba43da9bf
        Validity
            Not Before: Apr 29 05:00:17 2025 GMT
            Not After : Apr 30 05:00:17 2025 GMT
        Subject: CN=d9b91ddd8d5b0637b4a91e79d4b6ac21bfb551e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ca:f1:c5:16:46:80:81:f3:85:c9:ba:0b:5c:
                    f6:76:87:fa:e0:04:20:a1:b5:78:e2:91:8c:b3:d2:
                    1f:49:62:1f:e0:ff:09:43:95:34:59:bb:e9:7a:7a:
                    8b:d8:eb:ba:67:a0:1a:77:65:f5:21:df:e6:86:7a:
                    76:7d:93:d5:05:bd:91:f2:30:82:15:b5:7e:cc:2d:
                    1e:bf:3f:e0:c1:43:1c:77:ef:2a:17:72:98:b7:d2:
                    22:19:71:e0:6a:7f:03:58:ed:ba:e9:79:3c:47:5e:
                    e0:cf:ea:49:65:6e:8f:b8:08:73:84:e2:01:6a:d8:
                    14:10:2d:bd:94:4c:73:41:3b:c5:e7:c6:a0:9b:fd:
                    93:07:e4:09:07:19:95:65:44:32:d5:20:d7:e7:69:
                    10:1f:be:9a:bf:a5:f2:c0:de:3f:ed:22:cd:ba:dd:
                    df:2b:af:4e:fc:71:0d:9e:41:89:84:a9:1d:8b:c6:
                    06:4b:50:26:c4:9b:25:e3:20:e3:03:cf:fa:c3:eb:
                    de:17:ee:96:00:ff:c6:1d:7b:34:75:c8:69:ac:88:
                    2f:9a:af:cc:29:4f:cc:e1:e7:a2:21:36:ff:0d:94:
                    4b:c9:93:6c:8f:8f:8f:33:79:7f:c1:4c:bf:d3:72:
                    e4:e8:f1:3a:62:87:14:63:89:9a:f6:73:48:81:9d:
                    f2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B9:1D:DD:8D:5B:06:37:B4:A9:1E:79:D4:B6:AC:21:BF:B5:51:E3
            X509v3 Authority Key Identifier:
                keyid:78:C5:80:76:9D:52:1C:89:CC:79:7F:F6:99:CA:CF:0B:A4:3D:A9:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:60:0a:91:66:8c:97:ff:87:12:c9:dc:fe:32:0e:51:53:4d:
         73:5f:f3:ac:27:1e:81:6f:d0:a0:9d:3a:6d:91:a1:08:59:f8:
         02:74:65:78:b6:90:6b:7b:bf:54:cb:9a:b3:b2:a4:af:69:11:
         72:3e:58:7f:5f:c9:5e:4f:10:45:84:ac:39:da:ed:62:92:46:
         11:86:6e:8b:be:2e:16:1e:37:47:95:d7:03:5d:83:d3:08:e5:
         f4:b0:5a:4e:06:8f:25:5f:ff:3c:04:82:a5:74:ad:af:05:3a:
         2b:a9:e4:50:4c:01:aa:fb:59:e1:ca:14:a2:a4:31:61:0d:b2:
         04:7f:d8:a9:27:3b:f6:a8:cf:5c:b7:4b:fd:13:cc:0e:00:3d:
         f0:73:d0:b5:66:b9:7a:eb:89:68:bf:87:28:32:bc:7e:df:83:
         2d:6c:cd:14:6b:d8:d1:2f:3e:b7:a4:1b:98:63:9e:fe:19:a2:
         19:c7:27:ab:a8:4f:8f:e9:28:56:2c:aa:7f:3b:49:cd:12:c8:
         5c:b5:5c:b7:50:a4:05:44:98:ba:a6:74:32:ad:a7:fe:96:4e:
         95:45:c6:40:da:01:5b:fe:6c:17:84:64:7b:c1:82:a3:a2:fe:
         f8:8c:15:de:08:7a:09:0c:60:42:9d:44:5e:cd:f6:6e:ce:d7:
         3c:6b:33:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:14:36 2025 by rpki-client