Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
File:                     RciwwWM2uTM7RE_x4YzHjXanw_Y.mft (raw, json)
Hash identifier:          h+n5RujC91SuCQoJv9XW80Ne3ePHa+x6PzaSrqdfwoE=
Subject key identifier:   73:17:35:9E:2E:EE:C2:16:DB:2D:4A:48:91:F4:D7:26:BB:AB:58:6B
Authority key identifier: 45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6
Certificate issuer:       /CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
Certificate serial:       019683C7F5F8E8577BF1B06EE1B016F14323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
Manifest number:          015E
Signing time:             Tue 29 Apr 2025 23:00:41 +0000
Manifest this update:     Tue 29 Apr 2025 23:00:41 +0000
Manifest next update:     Wed 30 Apr 2025 23:00:41 +0000
Files and hashes:         1: NP3I33PqiM24AyrvrXcXkrcATEY.roa (hash: suQmPgK0ZMnJeCcPsZiWpQadlCgzQA44K74kBySWlDw=)
                          2: RciwwWM2uTM7RE_x4YzHjXanw_Y.crl (hash: 4lJPZiVAGWhNtZfTGOdlkI6wZzHAsVZQ65nKKQ9MZkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 23:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:c7:f5:f8:e8:57:7b:f1:b0:6e:e1:b0:16:f1:43:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
        Validity
            Not Before: Apr 29 23:00:41 2025 GMT
            Not After : Apr 30 23:00:41 2025 GMT
        Subject: CN=7317359e2eeec216db2d4a4891f4d726bbab586b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d1:e5:cf:0f:2c:ee:8b:75:3a:71:19:44:ca:
                    ef:d4:61:c7:ad:3d:2c:e3:d3:13:7e:bd:68:e0:5f:
                    f2:21:7c:ae:d4:76:0c:6d:74:62:1a:6c:60:75:e8:
                    cb:87:e9:6d:85:96:df:71:2e:dd:4a:78:bd:ee:20:
                    30:f6:0c:26:8c:1b:e0:9b:88:c9:dc:fb:79:2b:7b:
                    1e:89:c4:3e:b9:59:95:1c:17:19:79:93:52:90:af:
                    42:ce:32:b4:69:86:f4:4a:df:d3:c4:e7:9f:63:c8:
                    20:7e:b0:80:3b:11:5b:57:11:0e:1a:44:7f:3b:db:
                    bd:c0:ed:d6:31:43:63:e5:09:ba:c9:46:a3:42:a1:
                    8b:53:8b:f5:09:14:04:2a:8d:ef:de:6d:aa:42:9b:
                    8b:8f:c7:f4:c3:00:e7:20:7e:e4:c2:af:a3:7a:86:
                    fc:08:a9:df:85:a8:64:08:8e:16:ad:c2:9d:6c:75:
                    2d:d4:1b:56:b2:5b:1b:02:31:f7:eb:63:23:54:65:
                    1e:70:89:ed:a3:e6:a6:c3:a0:32:2d:b7:97:ae:2a:
                    c8:97:e9:44:e6:9b:81:6f:57:d4:2a:1e:b6:63:89:
                    4a:39:0d:59:39:07:2d:8f:b9:09:29:fa:96:14:a7:
                    5c:8d:19:de:31:c3:f8:57:d5:78:85:58:ac:b0:a5:
                    88:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:17:35:9E:2E:EE:C2:16:DB:2D:4A:48:91:F4:D7:26:BB:AB:58:6B
            X509v3 Authority Key Identifier:
                keyid:45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:03:86:72:d2:fc:47:3f:c5:62:46:79:53:13:51:cb:3a:0e:
         f9:e5:4c:e8:30:b1:17:18:45:7a:ac:58:1b:8a:72:1f:5d:b8:
         42:c1:3a:2d:e8:f7:0c:e6:95:83:05:d5:ba:2f:c4:71:06:9f:
         1c:39:4c:85:f9:f9:17:89:a3:83:67:7d:6c:2f:ef:8f:93:b4:
         87:17:e6:01:9c:e8:a2:9a:36:e2:6d:06:c9:62:92:0b:c4:a3:
         ae:22:d2:a4:5f:a5:09:48:77:d7:43:18:1f:b9:2c:34:e9:71:
         11:3b:e6:e1:f5:7f:84:70:d1:e8:96:54:d4:95:ba:48:8b:c9:
         d9:ae:9f:5f:86:62:8d:a1:c8:dc:f0:b7:cd:1c:a2:50:6e:29:
         9d:b4:88:8d:03:05:62:93:8b:fb:2a:a8:7e:2a:22:1a:20:32:
         3f:36:3d:6e:4a:9b:81:6c:0f:6a:e8:bc:97:dd:23:6b:6d:5b:
         53:9c:fe:92:75:78:1f:8e:d5:99:a5:fc:9b:09:e1:12:1b:b9:
         5b:d5:8b:6c:8f:44:c2:49:c1:14:4f:82:3c:32:7f:ac:8a:9e:
         f8:be:0e:bd:d9:57:2a:06:6b:d4:c8:f1:4d:d3:e7:d1:23:13:
         62:a6:3b:a7:cf:b4:9e:22:f2:6f:1f:50:fa:96:27:bf:dc:e9:
         59:ad:87:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:32:47 2025 by rpki-client