Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
File:                     dWyevH_4dZ2KEG__rzNeo0b66lc.mft (raw, json)
Hash identifier:          8F7YK209Eynh2LzP8FfATTIJsAw9LTaew7sluyST5EU=
Subject key identifier:   19:05:A0:6E:2B:91:8F:0C:21:0B:79:D4:E7:BD:30:23:B1:8C:6B:F2
Authority key identifier: 75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57
Certificate issuer:       /CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
Certificate serial:       0196BCDBFB22DA17A0D52588B6894672BADF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
Manifest number:          1533
Signing time:             Sun 11 May 2025 01:00:55 +0000
Manifest this update:     Sun 11 May 2025 01:00:55 +0000
Manifest next update:     Mon 12 May 2025 01:00:55 +0000
Files and hashes:         1: dWyevH_4dZ2KEG__rzNeo0b66lc.crl (hash: PiBQPNw8lQ9ksycfA53xeqNx7nRe4LaBAwDLZU4dVDY=)
                          2: hx2ek40oJmiSl7Xgir3mC5VHBV0.roa (hash: cCp67/8pyoc4Gg/vx5QrjhBwzCVOnjb7FAHH3PazwOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:db:fb:22:da:17:a0:d5:25:88:b6:89:46:72:ba:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
        Validity
            Not Before: May 11 01:00:55 2025 GMT
            Not After : May 12 01:00:55 2025 GMT
        Subject: CN=1905a06e2b918f0c210b79d4e7bd3023b18c6bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a3:ba:d5:5e:87:4a:0f:5d:c8:f6:33:1a:9f:
                    4d:39:ea:68:54:fa:b8:a4:74:ac:1b:f4:33:46:ef:
                    b8:56:81:2f:2f:0b:f8:57:20:29:97:79:a2:a0:cb:
                    13:12:d0:39:05:fc:e5:2e:c2:13:f8:ce:4a:14:ef:
                    8a:90:93:b6:1e:c9:88:5d:78:18:11:50:3b:83:7e:
                    fd:38:92:b7:dd:f4:38:31:93:46:e3:bf:bd:4c:69:
                    5d:1c:06:dd:00:80:8f:3c:30:14:4e:a4:5b:d2:2c:
                    40:0a:be:0b:9a:a6:b7:66:3d:cc:9d:0f:b9:7c:df:
                    c1:14:6a:58:23:fd:34:f3:e2:e3:bc:70:1d:38:6b:
                    e0:cd:42:07:3e:d0:49:c9:c3:96:38:3f:a4:73:55:
                    23:ad:36:53:04:66:6c:81:16:31:e2:33:62:5d:b1:
                    64:1d:00:6b:4b:12:a1:bc:a0:5b:17:8a:19:8f:44:
                    f3:87:da:f0:92:19:7b:f9:d0:36:2a:17:46:d1:e4:
                    99:a4:07:e6:3a:29:8b:6b:16:9b:ef:b6:db:62:bb:
                    49:a6:ba:2c:a5:96:bb:eb:33:49:a6:bf:96:40:7d:
                    42:00:37:c9:19:08:09:38:ab:b9:10:83:27:4b:89:
                    a6:1a:26:49:f1:70:40:bc:af:90:d7:d6:a7:c1:73:
                    f0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:05:A0:6E:2B:91:8F:0C:21:0B:79:D4:E7:BD:30:23:B1:8C:6B:F2
            X509v3 Authority Key Identifier:
                keyid:75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:3f:56:e0:8c:13:a5:dc:f5:2b:b0:74:9a:59:85:d5:43:ae:
         37:3e:a2:38:91:a1:a0:15:55:a7:4a:2e:ea:3d:72:78:e5:be:
         65:a1:ca:a9:db:eb:94:4e:a2:5a:5c:d8:56:d4:20:51:7e:12:
         41:04:18:eb:bb:f5:64:87:d8:df:94:35:50:3b:9b:58:da:32:
         7a:d9:2f:48:ab:3d:7d:29:98:f3:7d:ec:52:66:06:8f:7c:44:
         2f:d1:6a:0b:32:a5:1b:af:bb:3c:77:1e:ee:40:2f:fe:98:23:
         e7:a9:99:e3:89:b6:ae:59:48:ee:cb:1d:00:74:7e:2a:06:43:
         4d:98:6a:7d:c1:8b:fc:3a:19:e3:51:1d:e6:9d:10:9c:51:00:
         5a:91:ad:be:35:7d:43:c0:93:c5:a2:1c:b1:78:99:17:b8:49:
         d3:c4:22:d5:35:e5:65:e1:64:64:e7:2d:68:2c:6b:80:26:49:
         9f:ee:40:df:16:ca:11:25:39:35:8b:01:28:eb:e6:7b:18:b1:
         38:3d:b8:d3:fe:73:01:28:23:83:21:91:8a:a3:18:a7:7c:2e:
         56:b7:27:9c:6c:1f:83:65:fa:e3:d4:91:34:05:7b:47:1b:80:
         58:03:a6:3a:b7:73:ff:7a:da:38:e0:f4:e2:15:ee:21:9c:bd:
         25:f6:16:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:54:29 2025 by rpki-client