Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
File:                     ezhehhZ9XMwi_YWJJWCudgtfKJg.mft (raw, json)
Hash identifier:          rgTQwRgqLN96WRUk0OT0QZfqzy6M6Y1Pq0abA5wTqFQ=
Subject key identifier:   FF:A9:27:38:F6:CE:1D:89:1B:43:C5:B3:52:BA:BE:1F:BB:25:1A:C6
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Certificate issuer:       /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial:       0196B44666F58D2692E0633B45960497150F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
Manifest number:          1530
Signing time:             Fri 09 May 2025 09:00:34 +0000
Manifest this update:     Fri 09 May 2025 09:00:34 +0000
Manifest next update:     Sat 10 May 2025 09:00:34 +0000
Files and hashes:         1: 1-15VXX8nVt-lY3LiGzv1Jr6OcwM.roa (hash: SlkmWz0jcL6xUXUhTFQpLdotJEVgcyVB/xztx7GovmM=)
                          2: ezhehhZ9XMwi_YWJJWCudgtfKJg.crl (hash: wWM6lFzzo2PC1CakhmlhgFijFwh4Gn7iRyCzYTossEM=)
                          3: gp4Lcl-XthpiQz3Pgjj2aofu5Eg.roa (hash: +WQhnu3iWgtDqgj16Fdo45N/RQNl/1eQLYZcURm+NBk=)
                          4: tMCKKQ7T7_7JMjdc5UvMftnS0Sc.roa (hash: kzZ53feDoHQUM5QIs7aC6l1igadYhsq3pYnx3tG/SUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b4:46:66:f5:8d:26:92:e0:63:3b:45:96:04:97:15:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
        Validity
            Not Before: May  9 09:00:34 2025 GMT
            Not After : May 10 09:00:34 2025 GMT
        Subject: CN=ffa92738f6ce1d891b43c5b352babe1fbb251ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:83:21:35:e4:ed:25:15:13:4f:69:e9:e8:6e:
                    99:b4:40:cb:09:a0:48:da:94:b2:a1:dc:22:ea:41:
                    04:d0:51:fc:ab:40:2c:41:e4:87:14:b9:d1:67:82:
                    2d:9b:29:2c:98:e5:80:fb:55:b1:3a:f8:40:ac:3c:
                    6c:f0:23:6d:90:fb:d1:2b:90:de:1e:85:f1:f4:c6:
                    71:a1:32:96:fd:58:55:86:b1:4a:f5:c4:d8:dd:bc:
                    00:ad:86:9f:60:83:83:7d:3c:f0:77:9f:f4:b6:54:
                    ad:24:f6:22:57:1d:cf:61:af:e1:76:23:04:fe:42:
                    c5:74:49:20:b0:1f:23:d3:b7:21:67:8c:1c:53:45:
                    3b:e9:3e:ae:30:80:b5:17:49:bd:16:99:e2:7f:4b:
                    50:cd:6a:54:a6:1d:1f:93:95:c3:25:8e:03:32:70:
                    27:b6:3b:30:a3:2a:55:12:40:cc:51:88:f4:62:80:
                    6e:04:3c:42:9f:1f:a1:8f:07:12:de:74:85:08:51:
                    67:f1:39:a8:d6:cf:09:49:56:18:ec:45:1e:26:9d:
                    0a:4f:de:9c:31:f5:c5:6a:17:a5:57:7f:86:c2:5c:
                    3e:2a:71:2a:b3:ad:52:f8:2b:5a:ce:84:2b:b7:dc:
                    76:7b:a4:73:e7:0d:30:b4:fe:c6:71:51:aa:97:42:
                    94:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A9:27:38:F6:CE:1D:89:1B:43:C5:B3:52:BA:BE:1F:BB:25:1A:C6
            X509v3 Authority Key Identifier:
                keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:84:2e:0a:c2:38:ea:9b:d2:e4:3f:e2:65:d7:aa:e6:53:23:
         e7:bf:92:14:3d:ee:69:70:12:67:03:4b:c0:4f:ba:cc:4a:f7:
         24:ac:5b:45:70:ff:4c:de:91:bd:e0:66:37:c9:e8:82:56:e5:
         65:d7:da:9a:55:ff:60:ac:97:f7:84:a1:9d:79:5c:2c:d9:a2:
         55:69:5b:fe:0f:40:c5:fc:18:18:bb:87:93:89:7c:9f:43:b1:
         91:57:61:c9:8b:3a:de:8f:b1:29:55:63:7e:f0:b8:d0:2b:a3:
         1d:d2:12:53:84:28:84:1c:56:41:bf:ec:e5:52:97:77:d3:63:
         11:50:dd:92:34:42:b3:76:d1:06:9c:c6:1f:ae:30:4e:53:6a:
         13:5f:3a:9f:2b:87:be:da:45:da:db:c5:a9:d0:a7:7e:b4:e8:
         61:ef:6d:f5:e3:81:0b:a2:df:28:33:2c:4b:2c:ba:85:e2:53:
         98:8c:e0:48:ca:3a:26:dc:9e:1b:a7:d1:67:c1:2d:32:d5:96:
         3e:4a:dd:00:36:d1:4c:e5:5e:aa:08:f9:4b:5e:4e:99:a3:77:
         74:cf:9d:68:fd:e8:69:3f:32:bd:4d:33:b1:18:66:4b:d3:c9:
         10:57:34:4b:df:47:57:e3:ce:e9:83:be:11:64:90:d9:c0:92:
         18:14:df:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:57:09 2025 by rpki-client