Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File:                     U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier:          Y2cSKJ85qPUNTAVZAxZzS4MMwceRCFbnuqSZmH3HShc=
Subject key identifier:   74:DE:22:32:E8:78:64:4B:58:E7:13:97:25:6B:4C:AC:38:6E:40:5A
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer:       /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial:       0196B6D99CD8535F93FBC97112C0A9213A40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number:          1537
Signing time:             Fri 09 May 2025 21:00:36 +0000
Manifest this update:     Fri 09 May 2025 21:00:36 +0000
Manifest next update:     Sat 10 May 2025 21:00:36 +0000
Files and hashes:         1: 4bEGcfHd_w1hv-Zgrf8mtzNQOF8.roa (hash: Yz5lhUK8jG4fxty/HMD7XY7daqUIEiCINpgWbEB+eSk=)
                          2: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: 4k2ATPAyBG/z6EnpSM3CB5iEawCfdVu8PRDlUiUjbh8=)
                          3: V2UHD8Ezb4do1e1amF_9bhIjwm0.roa (hash: y2BL9g++y9jPkFQqtQIhZUhynDTSuho7DqIRo/6vN6o=)
                          4: Xx5AoKMFPro34EMu91UFlynTj2s.roa (hash: NlxbkxLq2MDyD2nlPITsFETHKzu5cELRgwcKIcBnH7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:d9:9c:d8:53:5f:93:fb:c9:71:12:c0:a9:21:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
        Validity
            Not Before: May  9 21:00:36 2025 GMT
            Not After : May 10 21:00:36 2025 GMT
        Subject: CN=74de2232e878644b58e71397256b4cac386e405a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1a:73:c0:40:fb:1d:b1:fe:13:57:8b:6e:aa:
                    c4:56:49:83:54:77:ca:c9:1f:d5:da:c2:b1:72:f3:
                    dd:a3:c7:bc:af:6a:34:88:93:a5:6a:0e:00:6c:80:
                    2d:d4:fa:8e:a3:52:02:e7:77:6e:a6:80:0f:77:78:
                    41:f9:5e:9a:b0:de:7c:ec:0d:aa:b7:cf:5c:e9:22:
                    61:14:51:d1:50:fd:c7:51:15:58:7c:65:62:4e:c2:
                    16:7d:8f:81:54:20:b5:37:25:2e:02:9c:34:ad:05:
                    47:c0:ac:f0:ff:25:80:bb:2e:35:00:fa:7e:01:61:
                    fc:a2:07:a6:a7:ea:e2:38:3d:62:13:12:80:9f:af:
                    70:9f:12:8f:1c:91:4f:2e:70:ca:df:43:bb:62:ac:
                    30:fd:45:2d:d7:4f:39:1b:c6:69:a0:91:20:e0:9e:
                    e5:aa:7e:c8:81:07:c2:31:bd:86:16:b2:ad:93:33:
                    d9:b6:fe:ef:d2:83:93:bf:80:68:46:c7:5d:4d:69:
                    37:cd:6b:4b:7d:48:96:99:be:04:cb:ae:5f:04:41:
                    6b:15:c0:1f:e7:cb:65:1f:4f:b1:a3:16:d6:61:c5:
                    ac:ab:47:4b:f4:7b:78:25:5c:3e:15:aa:bb:58:39:
                    e8:08:02:ef:f9:ae:e9:5f:83:a0:83:97:8a:ab:54:
                    57:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DE:22:32:E8:78:64:4B:58:E7:13:97:25:6B:4C:AC:38:6E:40:5A
            X509v3 Authority Key Identifier:
                keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:11:b8:46:79:1a:9b:f2:06:6b:9c:ea:8a:3c:51:2b:ad:cf:
         15:fc:63:b2:bc:ed:28:6e:ac:3d:78:ee:54:52:3f:d2:3b:13:
         2c:22:75:8d:d0:23:e2:0c:62:2f:65:fa:3e:8d:76:0c:32:ba:
         7c:cf:dd:ad:56:8f:2d:8e:3f:12:9f:e3:e6:9e:4a:e2:32:17:
         62:b6:91:6d:5a:ab:d1:59:79:af:9e:02:8d:02:b1:24:df:41:
         d9:ec:85:46:70:a1:b1:67:87:ed:4d:4c:ac:b8:8b:7b:32:a3:
         55:1c:d7:25:1f:cb:85:ce:ad:76:af:4f:d1:e9:33:df:9a:ce:
         56:ea:df:45:21:a2:e7:f3:3f:a3:5b:d8:0c:89:ca:0d:7d:0d:
         76:41:80:22:0c:c1:ef:71:8a:42:b5:30:1f:8f:a3:80:20:54:
         8d:dd:60:f2:25:79:c1:b9:a2:61:a4:bc:32:d7:87:ce:b8:5c:
         05:1a:0c:97:ba:d1:e3:0d:e8:2b:13:f9:46:b9:f2:3e:86:75:
         95:72:a8:41:ba:5a:9c:1e:b0:a2:6b:92:f0:8c:09:e1:5d:08:
         30:6a:9b:5f:38:35:40:a8:dc:bd:6b:dc:27:1d:06:9d:86:ad:
         fe:04:16:49:a0:31:c0:7d:4a:3b:54:7f:b0:42:e5:18:1b:f1:
         ec:58:02:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:58:11 2025 by rpki-client