Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
File:                     imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft (raw, json)
Hash identifier:          DqYbeSeSxE/JQjRgTN5NqB2YzTlHbOHWIiS0E+YP8X0=
Subject key identifier:   6F:F7:08:D0:F7:9D:D6:BE:8D:9E:B2:8B:E2:AD:DB:4E:97:25:0F:05
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Certificate issuer:       /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial:       0196B7B5D91CA68CD78279A64685EAD767A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
Manifest number:          154E
Signing time:             Sat 10 May 2025 01:01:10 +0000
Manifest this update:     Sat 10 May 2025 01:01:10 +0000
Manifest next update:     Sun 11 May 2025 01:01:10 +0000
Files and hashes:         1: AmbhHmgyu8yrBMkbzGnkI8tsxAo.roa (hash: uwxXW79FBxLkGN+Si8BRtGUDQUqQKGnxx/ByuHQICRk=)
                          2: L7o25i0_zd5XbD6twWAjOTkNfJQ.roa (hash: OWaSwhTa58J7U8msuLQTRf8W3It8BfHs+JPwCOU3dCk=)
                          3: ODrsbMjG9qdaweSVu2hQiAWib_4.roa (hash: dfEGlvo51D/Az6e2gNlFUybGMrG7MrWpkapNXLlycXI=)
                          4: XfGWZo7cWfWs0AeA21V-Q-Ft8as.roa (hash: wdeLE3gHNM1FBTeMpoIo0xzT6JjYdbIh/aFzX+q2qOI=)
                          5: dCemgIpCn07_XsHUzXYnZQTdBNg.roa (hash: A3gFC3cqW4zoFCzmtlWqOCnSU3P9bNN8azP8hjLiAqQ=)
                          6: djclzzPckUbxpiPz0aT2KIeq3vg.roa (hash: qMAON/McMcYGiRAj8ZSkjcUFapaBDpY0uWQQ678R//0=)
                          7: f3t_UNJWKVLbbqTSRagtMmmMKZw.roa (hash: ovleolAf657e+Xkh7kQLw0Pswx9FL3alnCQ2UDw7zkQ=)
                          8: imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl (hash: PZC54xfmqiv0QcdlsML7uGd99TP+QaXOvXIdNa+qUUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 01:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:b5:d9:1c:a6:8c:d7:82:79:a6:46:85:ea:d7:67:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
        Validity
            Not Before: May 10 01:01:10 2025 GMT
            Not After : May 11 01:01:10 2025 GMT
        Subject: CN=6ff708d0f79dd6be8d9eb28be2addb4e97250f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:13:64:97:36:bb:e4:a6:f9:e8:fb:f2:c2:c8:
                    30:40:81:13:f7:7e:4b:51:62:e5:cb:8a:a6:7a:e8:
                    84:7d:ee:23:fe:71:53:0f:61:63:de:af:58:69:97:
                    65:64:ca:d1:73:30:50:cf:e7:53:3b:d8:d5:21:d5:
                    cc:58:f9:d0:e4:9f:15:69:85:9c:44:41:71:ce:f1:
                    0e:0e:50:59:d5:ca:e5:1f:30:c6:14:e9:bd:92:3e:
                    e0:f5:73:20:fe:b4:64:f1:cc:a1:c5:da:db:bc:8c:
                    58:d0:a1:fa:ff:10:9f:6e:b8:9d:b6:86:c2:74:dd:
                    bf:b1:1d:9f:f2:8c:3c:20:44:84:2b:4e:e5:ef:09:
                    10:96:66:89:e3:f7:9a:4f:08:1d:43:eb:95:90:75:
                    da:9e:20:26:2d:4a:72:db:76:8a:40:3d:a0:b7:d9:
                    1c:5f:6d:bc:a7:a0:06:de:6c:2d:a1:db:e0:19:11:
                    86:25:b2:af:ed:4a:26:68:a9:fa:ef:98:fd:b3:3e:
                    38:ba:1f:5e:66:dc:7f:cf:62:86:0b:e0:bb:37:b2:
                    99:a0:5e:91:94:5f:44:2c:99:49:50:38:55:7a:f9:
                    14:a1:10:2c:28:f3:19:0b:3a:69:18:10:ea:03:7a:
                    be:80:10:5b:62:fc:c1:24:a2:a5:a7:ea:f4:1b:b8:
                    0c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F7:08:D0:F7:9D:D6:BE:8D:9E:B2:8B:E2:AD:DB:4E:97:25:0F:05
            X509v3 Authority Key Identifier:
                keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e0:0b:88:23:ed:15:e5:1e:4b:7f:28:cd:31:90:47:37:14:
         18:59:21:b7:c8:95:64:22:83:83:b7:6c:a8:af:1d:7b:86:a2:
         1f:f1:d7:8a:53:e1:24:9a:74:2d:65:99:ae:6a:e3:32:e2:6d:
         ff:8b:3b:1d:60:4c:a4:38:7c:44:ee:61:25:25:7c:7b:e6:7c:
         66:42:8e:0f:cb:16:0b:5c:50:a9:9f:68:7e:10:79:4c:70:b6:
         11:5f:c8:87:7f:48:e9:63:ea:29:c9:1e:1c:fb:02:c2:5f:42:
         67:17:1f:5a:6b:47:8d:ef:7e:8c:2c:6a:04:d6:60:da:55:20:
         7c:a6:14:5e:41:06:d1:da:f2:e5:33:12:60:84:23:7e:8b:76:
         8a:24:55:ee:10:f7:8c:82:8b:6c:11:cc:bd:7b:f5:7e:14:a3:
         79:a0:d7:18:25:8d:0c:9a:6a:fd:ff:c1:91:17:0a:5b:ce:0a:
         74:12:0e:13:ff:fe:cd:37:16:c8:94:bf:cc:b9:55:78:88:38:
         c8:06:25:8e:55:68:2e:91:15:06:f1:95:e0:5e:c1:ce:89:96:
         ef:e5:7a:37:bb:03:92:07:05:e6:df:95:c3:f3:70:db:bd:e5:
         a3:76:0a:77:dd:ce:06:1c:4d:14:9c:30:b1:65:ad:11:77:c3:
         da:78:a1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:17:06 2025 by rpki-client