Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
File:                     2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json)
Hash identifier:          gmvVjhvglrZH5qY22/jVMOFF0DtDTou93NyK3iEXIbA=
Subject key identifier:   8E:8C:DA:8C:6A:69:A4:9F:66:71:3F:E9:92:29:E9:A6:66:23:B1:97
Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
Certificate issuer:       /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Certificate serial:       0196A80B343CEE0DFE81B89F1BAB8205789B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
Manifest number:          1005
Signing time:             Wed 07 May 2025 00:00:28 +0000
Manifest this update:     Wed 07 May 2025 00:00:28 +0000
Manifest next update:     Thu 08 May 2025 00:00:28 +0000
Files and hashes:         1: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: bmNOf5tzp2LfBs/0anEfBJwzZnzEHoCBqzhgvOeLBLg=)
                          2: jaff7ENxhbDetLmkrM4Rn1poSLI.roa (hash: ui5KqDG5NX3RDDGGQyaqVgy4VTQxAtFMr0iFGN/ACUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 16:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a8:0b:34:3c:ee:0d:fe:81:b8:9f:1b:ab:82:05:78:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
        Validity
            Not Before: May  7 00:00:28 2025 GMT
            Not After : May  8 00:00:28 2025 GMT
        Subject: CN=8e8cda8c6a69a49f66713fe99229e9a66623b197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9c:62:dd:ca:cd:dc:81:19:f2:b6:66:16:12:
                    be:99:51:3e:e7:1c:75:32:b8:03:d8:d0:b0:a5:59:
                    30:6e:73:db:40:1f:5f:f3:57:e3:f3:97:1a:a7:23:
                    47:7c:81:99:ae:91:0a:13:33:e2:9e:1e:9b:86:31:
                    57:70:e7:4a:71:10:fc:cf:a2:ff:d6:31:a3:4e:37:
                    ff:ac:9a:a4:99:6c:4a:dc:12:9a:a5:cb:85:4f:b4:
                    ba:78:f0:ea:31:d9:47:fc:c0:86:b7:d5:bd:b5:c3:
                    ad:5d:a8:e8:80:b7:1b:57:a3:bf:d6:c1:52:36:81:
                    49:53:17:e1:88:bb:0f:0f:ef:a1:5c:b1:b5:9a:6d:
                    13:75:1c:04:d7:07:18:ce:f9:ab:3b:4f:49:ad:cd:
                    19:ba:5a:fa:87:4e:3b:61:97:64:c1:51:35:98:0b:
                    b8:f3:97:4c:30:c6:f6:92:f4:71:cd:93:78:87:b1:
                    c2:d4:89:01:de:75:34:29:52:bc:39:b4:7e:9c:1a:
                    33:bc:69:43:4a:5a:49:48:27:09:fa:40:67:8a:48:
                    e2:5c:f1:d1:c3:9d:35:db:56:a9:be:90:c6:a5:da:
                    fd:55:1a:b4:68:b7:78:d2:ac:15:a4:a8:f2:92:c1:
                    99:ce:1a:f4:ac:b2:f7:9b:ab:c4:98:a9:78:4a:b6:
                    5c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8C:DA:8C:6A:69:A4:9F:66:71:3F:E9:92:29:E9:A6:66:23:B1:97
            X509v3 Authority Key Identifier:
                keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:d9:e6:d9:f0:4c:0a:a0:2b:53:95:8b:39:3e:a6:d0:18:6b:
         1b:91:ec:60:b8:a9:5f:c3:31:e3:68:e0:d5:56:12:4c:42:47:
         41:44:7b:b4:9e:37:1a:02:8f:32:7f:b6:35:fa:4f:15:1a:72:
         3f:99:ca:c5:bd:f3:82:4e:bc:73:34:bc:0d:32:43:76:da:b3:
         f1:78:b9:8f:36:6b:3c:d7:ae:a5:76:1d:ed:10:ff:3b:67:40:
         c5:79:d6:b3:35:b3:74:0c:82:a4:8b:b3:0f:47:ee:7a:ca:34:
         5d:53:f1:45:db:bc:b4:35:0b:5a:88:50:b5:bf:5b:40:6d:a2:
         7a:24:aa:57:fd:f0:0a:b2:52:14:97:2e:61:b2:2c:f0:e7:c3:
         ba:54:90:05:37:bb:6d:b2:ed:0e:48:e4:73:d0:55:36:e2:4a:
         40:7d:32:2a:f8:0e:10:7b:0d:5b:47:f0:fa:c7:a7:39:a7:8c:
         b9:aa:d4:1c:90:f5:94:4b:a8:c0:19:53:7d:0a:6d:12:3c:03:
         67:d8:64:68:16:d9:98:a2:ea:43:a1:e4:27:85:24:a9:a6:a8:
         cb:e9:fb:1a:68:2a:dd:0c:5f:1c:d6:53:1a:de:63:f7:f3:02:
         c3:69:5f:fd:f8:ad:cf:20:d0:32:e3:27:52:e8:e2:e5:62:ea:
         a1:35:5f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:58:39 2025 by rpki-client