Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
File:                     9JdnPHjvrl9r2AolrOPTw3GT54k.mft (raw, json)
Hash identifier:          wuzGybt3N+0p7Izq+vcqlWwnlyjtzdTjFyzVsBdSitQ=
Subject key identifier:   2A:B4:C3:A9:A3:D5:F0:6F:50:64:E3:E8:A4:56:66:7C:E7:95:00:4F
Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
Certificate issuer:       /CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Certificate serial:       0196B032BAFBC23F8A9BDC5549BA24C1A0E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
Manifest number:          152C
Signing time:             Thu 08 May 2025 14:00:36 +0000
Manifest this update:     Thu 08 May 2025 14:00:36 +0000
Manifest next update:     Fri 09 May 2025 14:00:36 +0000
Files and hashes:         1: 9JdnPHjvrl9r2AolrOPTw3GT54k.crl (hash: Ao1LODTewbNq/qVBP1HPQRt7Afpd3m5wELGQc7rI6rI=)
                          2: EtJkvePPPWppk5nFnry3B6dGLBk.roa (hash: 7c42tElOeuBdoKmi4aSTV9LcX+EZc0MFBsv/1Jeuh8k=)
                          3: KYw5Kj_weN6Qm3KwiIVIrurQ0bc.roa (hash: EGFVxLdkIPiRC9X72BBMFwRMiHt1kYN13kO+xHp1ecQ=)
                          4: LttXh5eMv2jde6QYSngEubF_oow.roa (hash: Yan1EozpbgDCzFrwbK/bTYuqkgAj1nMSodRgwp+TLbk=)
                          5: d-0FuXxrgivXV_LPUKq93b_p0rk.roa (hash: IyU9YdBTUk2hBlGdTATB3ZTrCwmx/c6jIoibeyre6pQ=)
                          6: jlPcCTRsHvziUq2lkqlj4JDAVB4.roa (hash: WbQ2Xq5XOzyGj/4mNA7e9pYuBIwnNuiU8FsqrdgzPqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b0:32:ba:fb:c2:3f:8a:9b:dc:55:49:ba:24:c1:a0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789
        Validity
            Not Before: May  8 14:00:36 2025 GMT
            Not After : May  9 14:00:36 2025 GMT
        Subject: CN=2ab4c3a9a3d5f06f5064e3e8a456667ce795004f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ec:49:06:13:a9:d6:95:37:fc:47:00:63:ff:
                    ff:dc:10:58:20:6c:df:62:36:7e:b1:67:21:5f:5c:
                    4e:b0:f8:bb:e4:55:09:35:88:2b:68:a2:95:cd:bf:
                    08:3c:c3:93:50:85:b1:b7:bd:43:b0:bc:b3:7b:22:
                    15:2a:00:ab:59:77:5a:7b:5d:6b:a2:17:d6:9f:10:
                    9f:a6:d5:a9:2c:45:47:13:eb:67:37:3b:ba:32:e3:
                    99:98:79:c1:4f:ec:09:8c:81:92:46:89:9e:5d:f4:
                    ff:5c:1c:ca:27:d9:88:d0:90:36:05:cc:5b:a0:f3:
                    4f:c3:87:3a:25:79:a8:50:22:83:d4:86:35:0d:fd:
                    27:bd:a8:82:48:e8:b8:f2:ca:a6:38:23:ee:77:ab:
                    6b:14:97:24:cd:7c:07:c9:0b:01:80:05:08:cb:9d:
                    ad:c9:6f:94:72:52:7f:32:7b:50:06:54:97:94:f5:
                    22:46:ca:23:99:e7:9a:2a:32:91:3a:9b:9f:31:ff:
                    0b:fa:ef:6b:28:cb:44:aa:68:df:89:d9:44:0b:94:
                    38:f9:2d:a1:c5:7f:a2:37:42:13:89:1b:2e:af:fd:
                    00:4c:75:58:9b:2f:a3:1b:b9:3a:12:be:61:7c:fa:
                    61:6f:4b:23:fb:ad:d2:3a:e2:84:a7:a1:bb:7a:a5:
                    4d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B4:C3:A9:A3:D5:F0:6F:50:64:E3:E8:A4:56:66:7C:E7:95:00:4F
            X509v3 Authority Key Identifier:
                keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:1d:e5:3e:3c:89:f1:e1:f5:7d:8c:3b:4c:03:d2:2b:1c:28:
         8b:cb:80:9d:4f:f2:8e:77:16:87:23:f9:56:fd:78:70:ab:68:
         c0:b1:1e:bb:a8:9e:d9:f9:8e:74:4e:ff:68:50:b1:d0:35:05:
         1c:61:97:89:52:a0:14:75:c6:dc:a5:6d:a8:35:d2:ec:94:b8:
         df:3b:f5:02:09:3a:3c:77:07:8a:f8:ba:a5:33:be:27:40:9b:
         d9:f4:ba:ea:71:63:01:ea:a6:ea:05:24:4e:27:31:f3:b4:23:
         d1:fa:49:12:bd:dc:5a:53:0a:f6:3e:82:25:f9:ad:b9:4b:51:
         a5:81:0e:c0:02:85:79:df:a8:04:50:c3:83:90:eb:dc:58:04:
         4a:3c:0f:cf:07:12:62:a7:f5:8d:ab:54:83:96:68:9b:ad:12:
         73:e2:8a:a1:21:05:27:77:55:a8:98:77:1d:ca:72:e5:36:e5:
         68:a0:c4:a3:ee:f6:d9:8b:54:98:81:6c:42:23:97:4b:9d:a8:
         c7:6b:56:9e:fd:ea:e9:bc:99:6d:7a:23:9b:3e:76:60:6b:48:
         48:41:1e:a5:54:e4:1e:96:ea:51:c6:ba:bb:95:2b:93:e4:b9:
         3d:68:ca:00:ee:13:f6:ca:49:39:5f:de:ca:01:a3:2b:fc:4a:
         3d:64:ef:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:07:44 2025 by rpki-client