Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
File:                     EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json)
Hash identifier:          j9KFDvoXuyCxcJ/vrV7oOstpRejplJJBrdNvaioEDSA=
Subject key identifier:   29:54:EB:BB:4D:6D:E6:5D:D6:26:A0:69:6C:11:A5:DA:90:80:C9:C7
Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
Certificate issuer:       /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Certificate serial:       0196A2ADCF5DF2861F81551F0E031807D69B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
Manifest number:          108C
Signing time:             Mon 05 May 2025 23:00:21 +0000
Manifest this update:     Mon 05 May 2025 23:00:21 +0000
Manifest next update:     Tue 06 May 2025 23:00:21 +0000
Files and hashes:         1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: ThO8oTw9vuoeeyOUCwwFhrtWconM7VJSV1lPZSGH96c=)
                          2: oKyfOldZLGuN5BcDb6Q-5dX2Wxw.roa (hash: k6gLX9MPlPqi07ed6OW+GaDRLIAiAFCmAJRimOBrPk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 23:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:ad:cf:5d:f2:86:1f:81:55:1f:0e:03:18:07:d6:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
        Validity
            Not Before: May  5 23:00:21 2025 GMT
            Not After : May  6 23:00:21 2025 GMT
        Subject: CN=2954ebbb4d6de65dd626a0696c11a5da9080c9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:82:5a:43:2e:6c:48:2d:0d:ea:21:69:4e:01:
                    2d:0c:75:52:c4:f0:3b:b6:62:f7:fe:29:92:0c:2d:
                    73:37:10:73:bc:f7:9b:9b:94:9d:11:1d:dd:2b:f2:
                    4a:23:ef:f0:37:c2:dc:19:46:b8:28:31:d7:74:67:
                    9a:85:56:0b:a9:e9:aa:82:f9:f0:1f:81:f6:0f:40:
                    e4:27:f6:4b:c8:fa:41:00:fa:e5:b7:cc:75:94:a6:
                    36:ad:c6:01:57:8e:ff:8b:48:2c:01:d0:c9:ca:8d:
                    15:f5:cd:bf:f4:69:6f:a0:d0:9b:75:31:77:5a:d5:
                    38:e7:6e:7e:09:0a:ce:d3:40:d6:0a:48:09:65:24:
                    b8:21:7f:25:20:39:39:40:97:6e:30:2b:36:e1:b6:
                    61:5c:a7:ca:5a:dd:68:fb:51:92:37:b2:08:5c:20:
                    99:f9:50:f4:ee:7d:13:0d:50:89:db:a1:b0:0a:1c:
                    71:3b:66:76:e5:00:66:0c:5b:b5:92:4b:12:e8:38:
                    d8:a8:c6:c2:44:8c:df:fa:80:b8:9c:b9:7d:49:54:
                    7d:7a:9d:5c:cb:6f:99:c7:ee:8b:25:08:83:77:17:
                    80:ec:05:85:ad:f9:4e:67:8b:a2:77:af:a0:f4:d0:
                    e5:23:bf:81:0a:8c:67:7e:0d:3f:c6:93:70:de:21:
                    eb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:54:EB:BB:4D:6D:E6:5D:D6:26:A0:69:6C:11:A5:DA:90:80:C9:C7
            X509v3 Authority Key Identifier:
                keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:22:29:fc:33:64:c9:cc:5b:49:4a:1e:bc:5b:c2:4f:83:b7:
         ff:00:f2:5b:1e:61:8a:69:f9:69:6c:8b:08:cf:83:57:42:f3:
         b1:07:15:82:de:c9:01:91:ef:5e:28:7d:32:8a:0e:2c:80:50:
         e5:34:46:22:39:fd:f8:8c:88:9e:19:f2:ec:37:a0:ee:bd:a4:
         27:7d:3d:ce:b9:9d:6a:ba:52:bd:96:88:35:5c:51:93:80:de:
         ed:cb:5b:96:31:90:6c:51:d0:b2:db:7a:d1:96:41:77:78:ad:
         d9:39:0d:2b:76:ac:0a:75:8b:23:6c:9a:89:f1:85:8e:c7:17:
         74:f6:f6:d7:3c:f7:18:b5:ed:80:08:3a:2e:00:7f:75:18:76:
         2e:cc:d1:3f:86:1e:19:0d:30:9e:1f:be:31:3e:d7:ca:be:5d:
         92:e7:12:94:b7:11:29:8f:5f:02:85:d5:e8:06:8e:4b:34:5b:
         69:0a:7d:ce:65:3b:9a:c2:6b:39:3b:63:44:71:19:b4:3a:d4:
         06:f7:00:58:d0:bd:b2:5b:c7:18:ee:21:f6:07:f0:52:63:7a:
         d5:41:a9:af:bf:5a:da:08:5f:e4:00:ec:2c:09:cc:91:0a:68:
         7d:02:97:3c:74:17:6e:5e:a2:03:bf:03:cd:66:af:c5:3d:2d:
         b0:58:7a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 08:06:59 2025 by rpki-client