Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
File:                     mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft (raw, json)
Hash identifier:          Bt1RIGvyDn0vueojBXN/Dou0dU1VGwOITUOR/cyyW/Q=
Subject key identifier:   23:DF:A0:EE:19:30:30:BF:13:02:71:6B:2C:06:E5:F8:6C:02:03:F4
Authority key identifier: 98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B
Certificate issuer:       /CN=98845584ac8094c1806b73a6f53e46b9a28e812b
Certificate serial:       0196B85A2BE81674CA4BC85D5FDA8E6EFEF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
Manifest number:          1531
Signing time:             Sat 10 May 2025 04:00:39 +0000
Manifest this update:     Sat 10 May 2025 04:00:39 +0000
Manifest next update:     Sun 11 May 2025 04:00:39 +0000
Files and hashes:         1: 1-2hqQTW3ul_bD8JHqn2arc4SQt4.roa (hash: 7Jb+agyXKOWc8cNwhtr84wIX4Xn98h0+c+7K9P4oPMA=)
                          2: mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl (hash: BLVfcBoh+Pj7dtafByxmgAuElb4fnsf8vD910vNzU5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:5a:2b:e8:16:74:ca:4b:c8:5d:5f:da:8e:6e:fe:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98845584ac8094c1806b73a6f53e46b9a28e812b
        Validity
            Not Before: May 10 04:00:39 2025 GMT
            Not After : May 11 04:00:39 2025 GMT
        Subject: CN=23dfa0ee193030bf1302716b2c06e5f86c0203f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:68:3b:c1:eb:8e:e9:c3:9a:66:ca:b6:ec:e0:
                    44:4d:c7:1c:6f:37:28:c0:52:16:f8:a7:98:ea:0a:
                    12:68:f2:2a:63:9d:af:5e:c4:9c:8b:f7:fc:75:cd:
                    7f:8a:0e:a8:2b:21:09:87:fe:8c:f9:ea:9f:41:98:
                    24:97:c0:99:b1:2b:5e:d5:4c:58:c7:f2:24:ab:58:
                    13:8a:b5:2e:7c:0f:31:c8:a7:06:9d:b5:f5:8c:ea:
                    5f:61:01:d5:f4:64:48:03:16:c5:07:f0:54:c5:57:
                    dd:44:06:d4:73:6f:c7:88:66:34:2f:1b:ba:4e:54:
                    b5:7c:06:49:e3:6b:5c:b8:c9:1a:d0:cf:92:b9:06:
                    13:de:7d:11:ff:84:25:f9:10:f9:aa:1d:f3:fb:ba:
                    56:31:a7:98:2c:e8:6b:76:b4:7d:60:e0:02:0c:67:
                    ef:54:35:90:72:f2:e3:da:7c:c7:99:a3:48:22:06:
                    77:4f:62:a8:4c:54:b4:31:0d:e2:f7:ca:fc:8f:86:
                    81:2d:2d:48:01:68:77:8b:cf:6a:70:3e:29:43:f6:
                    a9:55:03:bb:8e:2f:5f:50:c2:a4:0a:e3:7c:28:fa:
                    a0:1a:63:18:33:ab:72:d0:60:54:a0:ad:01:6e:e9:
                    ab:63:e0:44:f5:17:d3:ef:a2:78:7e:46:b6:24:ab:
                    33:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DF:A0:EE:19:30:30:BF:13:02:71:6B:2C:06:E5:F8:6C:02:03:F4
            X509v3 Authority Key Identifier:
                keyid:98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:5b:f8:44:81:b6:18:e1:83:4b:96:7a:59:0b:0b:f2:3c:aa:
         72:bd:88:22:43:ef:89:42:fa:cd:7e:a1:ad:cc:26:20:a0:ec:
         b9:77:c0:b5:66:b5:fa:47:ad:f0:17:f3:4d:32:00:74:4f:52:
         9e:85:bd:43:0d:04:9f:76:d1:64:8d:ee:e6:fa:ee:2e:74:ae:
         fd:de:91:09:18:fb:d8:8a:69:24:72:5b:25:a8:56:11:99:70:
         ea:2e:de:ad:76:57:26:35:33:26:6f:c6:b9:64:dd:66:fd:0d:
         fc:3e:df:03:1e:2d:10:ff:02:b0:0b:0a:01:65:09:93:55:47:
         62:8c:04:0d:5d:7c:63:03:28:2e:88:02:8d:c8:c5:3c:8a:f7:
         e5:7c:e8:2e:da:6e:67:cc:0a:bc:d7:a5:33:92:55:e6:52:d2:
         35:22:37:0f:a0:78:12:7f:4b:91:d8:de:fc:71:5d:3d:9e:e7:
         df:9c:69:de:18:c0:f0:58:f6:0c:bf:12:02:2c:de:65:04:79:
         60:cd:70:0e:e7:f0:9a:12:a5:9f:8e:dd:76:10:4a:d6:32:4d:
         67:9b:6b:68:3a:c3:57:d4:10:61:54:1f:c5:ce:fa:ba:64:b8:
         06:63:b8:cb:ae:6d:f8:0f:79:3f:a0:99:59:a4:b6:6b:e9:7f:
         2a:ab:32:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:51:33 2025 by rpki-client