Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
File:                     ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft (raw, json)
Hash identifier:          qeYIP+FjkXmoQJtv4aWZLa9b1xn1LUJwftdWCdZyRAs=
Subject key identifier:   50:EB:14:78:D1:C4:5E:F2:B0:36:3D:9D:CD:66:03:E9:D0:4F:45:7A
Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
Certificate issuer:       /CN=7a17259a863c3d637d457e119b750df95e003fd6
Certificate serial:       0196764324B05455F1E062502B59EA454CC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
Manifest number:          150E
Signing time:             Sun 27 Apr 2025 08:00:33 +0000
Manifest this update:     Sun 27 Apr 2025 08:00:33 +0000
Manifest next update:     Mon 28 Apr 2025 08:00:33 +0000
Files and hashes:         1: dUBDyI3Y08c8mTiyeoJMlAL0nl0.roa (hash: J6i7zBjAUQN6Z3eRo+/Gx26n+pN6OCH/O5XrMxGVkXk=)
                          2: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl (hash: QoMAR49AZlAnI8K6yBJMels4Fq1LkHxI+jrj3NhJdhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:43:24:b0:54:55:f1:e0:62:50:2b:59:ea:45:4c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6
        Validity
            Not Before: Apr 27 08:00:33 2025 GMT
            Not After : Apr 28 08:00:33 2025 GMT
        Subject: CN=50eb1478d1c45ef2b0363d9dcd6603e9d04f457a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:48:17:7d:f7:58:3e:57:1a:48:a3:fe:d7:
                    7a:d8:4f:cc:bb:c0:c8:b4:ef:2c:f5:b2:91:b3:74:
                    ae:5c:c3:71:50:c6:f6:76:7a:46:e9:a5:c0:b3:62:
                    ae:33:51:59:3d:97:92:0b:52:8a:a4:05:a1:b2:3e:
                    5f:ac:5a:8f:a1:00:fe:df:c6:39:2a:c3:7a:fb:15:
                    09:50:b4:97:2f:2b:07:d3:5f:8c:55:2c:99:cb:11:
                    52:4e:fe:a1:33:05:37:11:b2:18:aa:66:82:60:78:
                    80:d1:24:39:df:76:ad:20:da:e8:11:81:fb:e2:f1:
                    49:c7:f7:d5:f0:a5:23:ff:c5:0a:58:2f:f9:44:9d:
                    c6:f0:95:5c:81:6a:be:01:46:9f:92:3b:ee:7b:8e:
                    1c:66:c2:0e:42:94:11:85:6b:1a:fa:81:1c:82:c2:
                    70:b6:f4:0e:61:ae:0f:8e:2f:95:fa:87:34:e5:0e:
                    49:ac:53:25:01:1a:f2:96:ab:61:c9:bb:eb:26:24:
                    a3:80:0e:a2:4a:b1:8c:ed:09:c0:ac:94:1d:38:22:
                    e1:58:89:c0:15:bd:d0:3f:87:72:17:df:47:37:e6:
                    8c:19:21:92:a2:a7:8d:b9:25:19:53:d6:f2:6b:d1:
                    d6:06:a0:b3:a3:56:f0:e1:0d:9a:17:55:94:a0:5e:
                    e0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EB:14:78:D1:C4:5E:F2:B0:36:3D:9D:CD:66:03:E9:D0:4F:45:7A
            X509v3 Authority Key Identifier:
                keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f3:cf:0c:cc:05:f8:08:29:7d:43:6f:25:dd:9a:52:7a:23:
         ef:11:8e:e8:ff:66:b3:b6:61:f0:44:35:79:7d:32:9a:42:33:
         d3:e1:bd:2b:4d:ba:b3:d0:78:96:6e:33:92:29:2d:12:d5:a0:
         55:15:98:ad:15:97:b1:d2:96:66:50:35:8a:1a:05:16:c7:20:
         62:27:cf:ce:52:81:fc:f8:ee:a6:dd:d2:34:d1:b9:87:47:d7:
         13:e9:73:4e:dc:f3:6d:38:9e:37:d8:3c:f1:dc:36:55:5e:88:
         17:00:5b:87:05:24:39:14:a9:ad:14:24:c0:bd:86:72:7a:13:
         db:c6:05:ee:c8:1c:ee:72:cf:20:13:07:f9:cc:4e:ff:b7:c7:
         16:a5:30:f6:3e:29:fe:b9:3a:1f:e6:0f:86:41:2f:e1:0b:e2:
         af:d8:70:7c:f1:44:71:d0:fc:f2:36:ff:f6:a1:2d:85:4b:1b:
         a1:c5:aa:2b:86:dc:5f:ac:f9:ba:86:cc:69:d1:61:4b:28:98:
         e4:60:bf:a0:b6:25:4a:ce:ab:e4:7c:d6:1e:aa:87:e2:6e:00:
         c6:80:ac:38:39:0f:80:43:f4:00:c4:28:3a:d4:5a:0b:bf:fd:
         fb:d2:7b:3d:68:80:87:6c:e8:eb:c3:6d:c0:da:76:e2:b9:ef:
         a7:64:b7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:13:27 2025 by rpki-client