Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
File:                     zCFfWBWexXaiAid26mT2HFuwAZQ.mft (raw, json)
Hash identifier:          G5xFGflWWhyO0WThH7295LXgS37nH4VJ672Dmv8dNC8=
Subject key identifier:   AB:2F:B8:C1:C4:23:4C:A3:0F:E6:FE:87:3A:95:E8:5E:A6:64:90:CB
Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
Certificate issuer:       /CN=cc215f58159ec576a2022776ea64f61c5bb00194
Certificate serial:       0196C871E4991FA976244C37931A15680A32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
Manifest number:          153A
Signing time:             Tue 13 May 2025 07:00:29 +0000
Manifest this update:     Tue 13 May 2025 07:00:29 +0000
Manifest next update:     Wed 14 May 2025 07:00:29 +0000
Files and hashes:         1: 0UPggsXGkTuuC9Xh-r7ucS0s3D4.roa (hash: BaiSknaLrtrRfkG8QbIqZETexkpP/4Cmqojn/rd3s0g=)
                          2: HSDe33dztyDbbAh5edeiMrBstpw.roa (hash: hMHbKz19ucgy7N1gbQNpI/GP1wKSKMSFktFakjiCIw4=)
                          3: jjYT0ual1nIv5rmaeDjlNg2jdtU.roa (hash: OjHVmf3z6fImr8f0+RF/L2hzt0WZmr2JT7HoyHilItc=)
                          4: w5y2MTSdQypOX17VhFunAbCXy80.roa (hash: 7ukuMQG16arqv6mqEmEuPo+qhaVPdgY1vF5Kh03tYMg=)
                          5: zCFfWBWexXaiAid26mT2HFuwAZQ.crl (hash: nJeGEtxWvWBXpjXlAMIz78chmDZM2+hts1+VEjozDJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:71:e4:99:1f:a9:76:24:4c:37:93:1a:15:68:0a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194
        Validity
            Not Before: May 13 07:00:29 2025 GMT
            Not After : May 14 07:00:29 2025 GMT
        Subject: CN=ab2fb8c1c4234ca30fe6fe873a95e85ea66490cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:00:bf:ac:13:fe:d5:e7:6c:cc:cc:0f:b9:0e:
                    d6:bc:5e:67:55:c7:91:67:1e:c6:84:5e:a9:70:8f:
                    f8:dc:ed:81:2a:8f:0c:45:23:b3:e1:a8:12:d1:43:
                    a0:ca:5b:bd:58:e9:dd:d9:0a:6b:29:51:c4:52:e0:
                    94:dc:94:a8:4e:aa:dc:0a:ad:c7:f0:e6:67:85:90:
                    38:51:35:16:5c:c5:c2:19:93:0a:4d:fa:a6:7d:81:
                    4b:87:00:e9:b6:d1:e6:3b:6c:6a:47:34:45:46:48:
                    6a:b9:7e:63:98:3f:a4:7f:79:40:4e:ca:b4:8c:ac:
                    ff:88:62:98:d9:ee:de:5e:e0:3a:58:69:b2:6e:e2:
                    8a:a4:23:62:a5:7c:dc:3f:97:1f:35:2a:c9:c3:aa:
                    63:52:a8:94:4e:fe:a7:83:63:bd:bd:3a:61:db:9f:
                    aa:2e:91:be:36:e9:f4:fc:1c:b2:3d:62:73:23:26:
                    d6:9d:c3:c0:b9:e7:39:70:8a:ae:54:39:ce:00:ca:
                    89:88:23:1c:25:ff:3f:8b:07:95:c0:fe:e2:ae:42:
                    af:3a:98:d8:8b:26:cb:32:a1:70:8e:86:58:c8:46:
                    11:00:23:1e:56:0c:31:0e:66:47:95:f6:91:de:ed:
                    91:ac:69:26:cc:c9:da:86:68:ba:9d:ba:f6:71:0f:
                    7c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2F:B8:C1:C4:23:4C:A3:0F:E6:FE:87:3A:95:E8:5E:A6:64:90:CB
            X509v3 Authority Key Identifier:
                keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:21:b0:3a:4e:92:aa:f0:e3:62:77:33:34:30:e5:e7:c3:54:
         2c:15:78:3b:2b:9f:31:7c:58:31:9f:65:cd:fa:d7:b2:87:8f:
         ee:c8:42:11:64:fc:26:96:b5:45:16:6b:14:a2:17:7a:cf:12:
         ce:72:6f:85:25:a3:88:c4:ca:12:5f:f9:e4:1b:ab:f2:5b:9b:
         3c:27:52:0e:86:48:ca:27:66:45:bf:56:34:8e:ff:2a:f8:a6:
         6a:da:c1:57:e7:d5:5a:62:bf:58:b0:ce:8e:91:74:50:31:08:
         c3:66:21:6a:8c:a8:ab:72:35:d9:b8:13:75:2d:e3:6c:cb:11:
         53:bb:6c:81:7b:6d:62:45:c1:0e:43:51:1f:ab:98:05:7f:ef:
         6a:f6:83:29:ec:65:1b:46:8e:7e:0a:54:68:36:79:86:80:36:
         5b:d1:bf:cd:86:c2:6b:63:34:57:92:2d:8b:49:1c:7a:84:c0:
         cf:ab:05:ca:ee:92:fc:52:cf:18:6b:fd:69:e1:42:a6:84:d9:
         af:c0:ce:18:e4:d0:7e:a6:d2:c8:ce:0d:2a:7b:b5:9b:2c:60:
         7b:27:cf:4e:3b:af:81:36:f0:51:fb:41:b1:86:7c:a0:2c:6e:
         5b:0b:7c:e2:d8:81:29:cf:75:8d:f1:0e:aa:15:97:0e:29:00:
         9d:cf:d9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:17:01 2025 by rpki-client