Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
File:                     RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft (raw, json)
Hash identifier:          ZMXszzXTVkFv2zAz2zNmypavFQAqJFSKaFCGVgThnRk=
Subject key identifier:   2F:9A:4A:2B:E4:0D:93:B8:01:2B:AB:61:52:EA:AD:8A:0E:8C:81:83
Authority key identifier: 46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93
Certificate issuer:       /CN=46224dc9396e580ff7120f257353a70c72379c93
Certificate serial:       0196C728DC4EDE138BD505E45D0E254C8BEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
Manifest number:          150F
Signing time:             Tue 13 May 2025 01:01:05 +0000
Manifest this update:     Tue 13 May 2025 01:01:05 +0000
Manifest next update:     Wed 14 May 2025 01:01:05 +0000
Files and hashes:         1: 237nnYKB7i2VaJ7m52nEdfcb0Ac.roa (hash: dLnbAiBZCTSW/Pqjq4dBaGgbhjyCcK3BPz7BIZYga/k=)
                          2: RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl (hash: qQSKHYnnxwgxipw8Hox31ZhbkGFp0qxbTIthjY/G+rY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:28:dc:4e:de:13:8b:d5:05:e4:5d:0e:25:4c:8b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46224dc9396e580ff7120f257353a70c72379c93
        Validity
            Not Before: May 13 01:01:05 2025 GMT
            Not After : May 14 01:01:05 2025 GMT
        Subject: CN=2f9a4a2be40d93b8012bab6152eaad8a0e8c8183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:75:b6:4e:35:6a:2e:99:68:c4:7d:7f:9f:ba:
                    89:03:df:57:77:26:2e:40:95:40:dd:ea:0c:33:84:
                    dd:60:12:a4:bd:dd:ed:08:19:5c:c8:bf:83:4f:24:
                    d6:23:26:47:c6:d7:24:f1:a3:db:a8:2c:6b:bf:45:
                    ee:42:a7:43:30:bf:92:98:17:ee:7c:22:ac:f7:e2:
                    1d:2f:b9:78:2e:02:89:50:93:b0:8e:79:cb:d3:5c:
                    94:80:2c:45:1b:1e:8f:6d:50:54:f9:ae:5d:dc:e8:
                    37:26:6d:d8:66:94:7f:c1:08:52:fd:6f:ac:f3:1e:
                    e3:96:20:03:5b:b4:70:dc:11:dc:d8:39:f0:da:d9:
                    bf:11:a5:d8:02:f9:72:55:84:2a:55:4c:c3:46:dd:
                    63:28:0d:c6:16:99:d6:57:40:3d:0b:78:a8:45:47:
                    66:bd:8e:e2:ee:a9:65:18:5b:7b:2f:f2:41:1b:d7:
                    e1:51:8d:a6:79:b0:20:82:bf:df:42:a7:13:3c:1c:
                    92:a2:99:6e:40:ca:90:6f:c7:b6:7b:af:4a:9e:33:
                    ad:db:26:99:a5:ef:4f:c9:da:17:ef:ea:ec:5b:61:
                    82:76:b8:ca:19:3c:46:e2:94:08:63:57:da:89:c6:
                    45:36:a4:24:61:3f:f0:4a:bd:fd:a5:86:db:90:ef:
                    7a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9A:4A:2B:E4:0D:93:B8:01:2B:AB:61:52:EA:AD:8A:0E:8C:81:83
            X509v3 Authority Key Identifier:
                keyid:46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:13:92:73:e5:58:68:96:df:e3:71:a3:36:23:d5:fe:dd:d4:
         ed:bf:02:41:24:40:c7:08:bd:16:55:9c:2f:39:29:53:37:d0:
         08:05:0e:cc:50:21:a8:83:0c:95:1c:7b:69:12:1d:02:af:94:
         62:06:bd:5a:6d:2b:d8:4f:75:1f:8d:24:e5:3f:08:33:bf:50:
         27:c6:a8:55:a0:91:4b:bb:b8:63:f6:1c:d6:1a:e2:84:e1:5c:
         41:a9:14:21:b2:0b:47:ae:29:a8:10:02:95:2c:61:49:11:9c:
         42:70:d3:f1:1d:34:b9:90:de:45:e0:94:89:11:d2:10:a0:58:
         4b:25:53:68:dd:eb:22:4c:fd:a7:ca:93:78:96:ef:e0:56:29:
         68:12:c8:44:af:a8:e0:b5:4b:16:71:49:e2:e2:0d:64:16:d1:
         8a:7f:7f:70:62:3d:97:8b:8c:eb:5b:10:4e:bf:11:f1:8c:5a:
         20:22:67:c3:34:ad:ff:54:30:8c:d7:69:8b:0a:59:a3:3a:58:
         de:58:70:7e:b1:99:79:43:ea:c9:ce:56:ba:c9:4d:fb:52:74:
         20:d4:66:d8:de:8c:a8:4c:76:1c:1d:5f:9e:ca:6a:4d:67:0d:
         54:1a:a5:af:00:7a:5e:20:95:b1:dd:af:f1:37:60:e6:d4:bc:
         c4:41:82:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:38:31 2025 by rpki-client