Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
File:                     5cveddU26RsoojRpNJ0c8ouISjs.mft (raw, json)
Hash identifier:          3JEY/VZG4rJ7OepGxomGElLNJxZjIcdigx3LthV5/H8=
Subject key identifier:   AE:F9:CA:CD:2F:42:55:22:B9:5E:8B:94:9A:BC:E5:29:E8:02:1B:B8
Authority key identifier: E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
Certificate issuer:       /CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Certificate serial:       019675D54496EB63036863257F2A393FFA1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
Manifest number:          1438
Signing time:             Sun 27 Apr 2025 06:00:33 +0000
Manifest this update:     Sun 27 Apr 2025 06:00:33 +0000
Manifest next update:     Mon 28 Apr 2025 06:00:33 +0000
Files and hashes:         1: 5cveddU26RsoojRpNJ0c8ouISjs.crl (hash: 5XL+zvJcSK9E26Ff9BeDWOWznzSYhK+la3imsW13ITw=)
                          2: 8vBjC53BVW8zj4fBkE3UHTZwiNk.roa (hash: 1PeNucpAjZUP2ujHYN11UYlssoeYcm9jeCslEET3UiI=)
                          3: 9SKc1OPZn-eLWfpLDmHLKp6N8Ss.roa (hash: aMPoo7LYnaS7eWYIaQDX/Es2RSQYrk3CqkkwnLvbGQ8=)
                          4: UwHwc4Sk_hCRAHef6n3CUGRPGkk.roa (hash: KrGL3wXFY6k1GlYSZENHPy6IRLA8cwbf0xkJCypiFE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:d5:44:96:eb:63:03:68:63:25:7f:2a:39:3f:fa:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
        Validity
            Not Before: Apr 27 06:00:33 2025 GMT
            Not After : Apr 28 06:00:33 2025 GMT
        Subject: CN=aef9cacd2f425522b95e8b949abce529e8021bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:81:b5:68:c3:57:f7:60:df:30:21:ab:e3:97:
                    f0:b7:9d:24:cf:0b:41:38:eb:de:7a:a1:d8:26:9d:
                    25:63:8b:2e:93:bf:b8:c4:93:4b:9c:af:e6:c1:f4:
                    65:d0:cc:97:a5:40:a7:8b:22:2e:2b:64:9e:e3:dc:
                    57:70:9b:27:ea:37:1f:a4:08:a7:9a:98:c2:75:72:
                    61:ba:3b:91:72:86:d0:9f:c4:3e:f3:25:7c:04:db:
                    1e:fa:cc:fe:e3:ce:4a:77:52:76:91:89:e4:3f:af:
                    47:91:41:16:a3:ff:28:87:7c:00:29:28:d7:53:b1:
                    2b:09:fe:e9:21:70:b5:44:e3:3b:56:82:d9:79:0e:
                    66:06:13:09:41:3e:1b:77:fb:3d:27:69:83:cc:e6:
                    5f:28:4c:c3:9f:a2:0b:fa:90:72:4f:fe:90:85:ab:
                    ae:10:cc:19:7d:a4:e8:aa:1f:60:37:b6:12:7f:49:
                    18:e9:72:07:b4:7c:6a:3b:fa:5c:34:1d:a2:e8:47:
                    9e:f3:11:58:58:bc:4a:a7:2f:94:e3:9a:33:fe:dd:
                    94:21:2a:c3:f3:56:86:35:29:b6:55:be:e7:79:23:
                    18:03:59:0e:e7:22:eb:cf:65:24:bc:53:55:6b:5c:
                    d8:ce:3a:30:c3:a3:93:2a:7b:22:54:e8:31:26:68:
                    c8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F9:CA:CD:2F:42:55:22:B9:5E:8B:94:9A:BC:E5:29:E8:02:1B:B8
            X509v3 Authority Key Identifier:
                keyid:E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:83:d9:40:af:ae:98:fd:51:a9:7a:91:93:06:4b:3c:1b:4c:
         95:38:1d:64:84:a1:c4:de:ca:07:ef:bb:b7:11:bc:e6:be:98:
         95:a3:30:b0:98:5e:a8:eb:a3:ee:92:b4:b5:e2:4e:93:b0:09:
         25:2d:45:c7:1a:f0:97:b7:5b:3d:bd:a6:b0:d4:89:bc:c3:d2:
         cb:79:b3:bc:27:d2:a3:62:ce:ae:22:c2:f4:4a:51:01:b7:a0:
         c7:87:d3:a0:fe:f4:dd:79:b6:ef:98:9d:46:8d:0c:0c:5e:92:
         6c:ad:c0:2f:43:a2:72:3e:4c:d4:c6:86:96:c7:10:3a:c6:38:
         74:7c:d7:0a:c8:7f:a2:12:65:17:a8:06:51:61:e4:6d:4e:5e:
         75:5e:06:ab:2e:1d:7e:a6:8c:a0:c9:34:fa:cb:a9:8d:fc:29:
         ec:70:a6:ba:07:5e:15:1f:f1:33:8c:16:a8:b1:6a:91:3a:ed:
         f6:6e:e2:1b:94:3e:5b:fa:0a:56:ff:e1:ad:28:e6:22:02:86:
         6c:2d:50:e6:ad:c0:4b:ad:29:bf:b3:03:34:40:7b:60:10:ab:
         4a:e4:a2:ce:a0:46:9b:ea:13:2d:3f:ec:69:4c:e9:ad:24:7a:
         74:0e:e8:37:37:e5:02:ca:c5:b5:67:81:cb:9f:91:53:36:47:
         12:80:21:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:27 2025 by rpki-client