Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
File:                     xeP39AwQDf_bGBIccmGZ6FgExYU.mft (raw, json)
Hash identifier:          mv3CO0qR1mI36Yen+pXGhYOts1mVukwk7KyAiS8UROw=
Subject key identifier:   D5:9C:7A:80:C6:AE:9D:E9:25:FA:85:9E:66:20:02:EE:E9:8D:0F:B7
Authority key identifier: C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85
Certificate issuer:       /CN=c5e3f7f40c100dffdb18121c726199e85804c585
Certificate serial:       019674FA52EFE7D5A041C98BCDA3D2A3F4A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
Manifest number:          150D
Signing time:             Sun 27 Apr 2025 02:01:24 +0000
Manifest this update:     Sun 27 Apr 2025 02:01:24 +0000
Manifest next update:     Mon 28 Apr 2025 02:01:24 +0000
Files and hashes:         1: pziQk_Jpqg7RVSwxW0kshn-FxgM.roa (hash: 3IfnTIQK5ln+c+ATiKdOHRNEXtXgflbchwoY1RIrNJU=)
                          2: xeP39AwQDf_bGBIccmGZ6FgExYU.crl (hash: NJjmHcx4KmhCE1oU4fS/oLhLP9Wnn91khMZ7724L5lE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:fa:52:ef:e7:d5:a0:41:c9:8b:cd:a3:d2:a3:f4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5e3f7f40c100dffdb18121c726199e85804c585
        Validity
            Not Before: Apr 27 02:01:24 2025 GMT
            Not After : Apr 28 02:01:24 2025 GMT
        Subject: CN=d59c7a80c6ae9de925fa859e662002eee98d0fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a8:24:16:82:f9:d7:10:8e:df:1b:3c:29:a7:
                    53:2f:31:a7:59:7e:04:ec:83:28:7b:af:be:94:d4:
                    39:b5:7b:14:f3:32:95:e8:b2:00:b2:6d:8a:94:33:
                    5e:1a:61:93:28:f6:a0:a0:92:58:c5:8e:67:ce:21:
                    3e:c6:98:32:66:95:e0:0e:54:e5:5d:b7:2f:1d:83:
                    24:c6:6d:d4:ae:e6:11:7b:87:1c:9c:6c:51:f8:5e:
                    cd:66:b1:89:a2:3d:72:1f:df:b3:e5:e7:33:ae:cd:
                    da:20:20:33:d4:2f:2f:e9:49:08:df:1d:e7:e7:48:
                    eb:de:6f:8d:b5:37:a3:b2:37:a9:f6:e4:31:5f:d3:
                    27:f0:4f:61:f0:e0:d4:8e:b7:77:54:d7:c9:20:89:
                    38:42:2d:6d:e4:58:e0:e1:e2:78:2b:a8:7c:b4:d8:
                    d3:fe:52:e3:01:ca:af:14:82:e0:b1:af:f9:4c:f6:
                    f5:52:e2:05:f0:86:44:f4:e5:25:8e:57:b9:43:49:
                    ac:9a:d5:fa:e7:d7:5d:cf:a5:99:ee:16:fd:93:e1:
                    78:07:e7:b5:20:bd:3a:99:bc:a3:b3:4a:6b:99:27:
                    6b:49:0b:bd:ef:bc:a7:c7:20:32:d3:dc:f3:84:6f:
                    16:f1:fc:4c:57:7d:84:c5:e6:f9:83:db:4e:08:04:
                    96:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9C:7A:80:C6:AE:9D:E9:25:FA:85:9E:66:20:02:EE:E9:8D:0F:B7
            X509v3 Authority Key Identifier:
                keyid:C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f0:54:34:ad:ae:b2:00:c1:f8:17:dc:7e:eb:40:75:49:08:
         84:65:2c:90:85:7d:f2:84:39:29:34:a3:af:68:47:2f:45:2a:
         8d:b4:7f:70:30:c6:93:54:a3:67:38:cb:06:6b:fd:5c:af:ea:
         a0:c6:59:d6:1a:10:8c:8f:10:5c:5a:73:01:5a:38:bf:7b:0c:
         98:b9:ba:a9:f5:24:7c:f2:23:de:05:ee:fb:a9:b9:8e:4d:aa:
         ff:a7:86:06:f6:fb:c5:2c:b8:cf:d3:10:ed:e0:93:59:b9:d2:
         9b:85:3a:2b:6b:04:d9:d6:57:ce:f4:f7:11:a9:78:da:b7:7b:
         3a:bf:ff:74:fe:32:ad:e6:97:95:46:85:ee:f6:cc:f6:d3:0c:
         5d:11:a6:dd:da:a4:bf:b3:d7:0a:a6:cb:3c:29:33:50:2f:56:
         84:25:9d:83:b8:57:bf:03:b9:eb:eb:ce:46:46:04:a4:8c:2f:
         cf:24:e6:14:80:96:25:1d:b6:54:81:e0:cd:aa:3f:29:6f:e3:
         4b:4e:aa:4b:13:73:da:ae:a8:d9:ec:b2:c3:6b:e2:9a:b2:d7:
         ab:de:92:d7:a8:f2:46:f9:4d:20:c4:69:db:9e:99:46:77:36:
         81:73:cd:cd:d7:df:aa:95:d9:a6:73:56:c0:d3:7d:53:68:8e:
         34:3f:bd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:40 2025 by rpki-client