Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
File:                     sG9AQEkaZW_3Um0vF2EbDWisvQw.mft (raw, json)
Hash identifier:          rfgBRIMqrD/HUilAbwWeLTzQ3bKva5LoiXnC/5jxQzs=
Subject key identifier:   E3:51:C1:3E:95:C4:CE:D6:2D:E3:46:1C:B7:1F:81:1E:AC:C1:39:8B
Authority key identifier: B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
Certificate issuer:       /CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Certificate serial:       0196B220BD9081F87F5178DD6D408BF29D54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
Manifest number:          152F
Signing time:             Thu 08 May 2025 23:00:12 +0000
Manifest this update:     Thu 08 May 2025 23:00:12 +0000
Manifest next update:     Fri 09 May 2025 23:00:12 +0000
Files and hashes:         1: 3oQgBF8b0SlPmJhLRByZqFye4Kg.roa (hash: kYRYhVl9nNIlfjRJmfhpqtBDhLtp2pSGg+NrF/eLIP0=)
                          2: sG9AQEkaZW_3Um0vF2EbDWisvQw.crl (hash: c0jiWZTb5z391u+fz2f5tQVAJpUiaJEi52VWxJmgZTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b2:20:bd:90:81:f8:7f:51:78:dd:6d:40:8b:f2:9d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
        Validity
            Not Before: May  8 23:00:12 2025 GMT
            Not After : May  9 23:00:12 2025 GMT
        Subject: CN=e351c13e95c4ced62de3461cb71f811eacc1398b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3d:5d:38:98:8d:f7:48:e0:fc:a5:ab:ff:81:
                    1c:a0:e5:90:79:ef:cb:ca:6d:26:a4:f8:c7:a6:15:
                    d0:1c:ab:9a:61:7f:dd:f9:36:56:b0:54:ed:8e:49:
                    a7:45:60:21:0a:fb:b9:f2:08:a4:28:fd:13:d5:c3:
                    b6:2d:31:d9:39:a7:bd:60:9e:60:05:db:e7:75:7d:
                    35:fe:c3:7d:07:43:c2:bc:e6:9e:28:fa:61:b3:4c:
                    19:ca:ae:8e:7d:70:29:1e:ab:e5:90:86:fa:1c:7a:
                    48:98:98:e1:4e:94:55:40:32:51:cc:0f:75:3c:e1:
                    5d:98:f0:44:9e:bd:51:af:f1:5d:77:d1:b0:09:30:
                    a0:7a:e6:49:f4:74:af:e0:5f:57:05:7c:80:08:2c:
                    ca:3b:2b:0c:0d:3f:56:ad:ed:e0:58:25:9c:87:d9:
                    3c:c0:a7:4c:ef:12:4c:33:0f:87:6c:2c:81:4a:90:
                    05:49:3b:cf:3c:dc:b5:8b:d5:39:1d:b4:df:c0:4e:
                    00:f9:2a:3a:3e:df:5b:b7:47:38:b7:b8:6c:77:6c:
                    4d:66:33:e3:71:ed:12:13:ce:b4:e0:e3:1e:61:c2:
                    7e:eb:6e:9d:2c:d5:66:fd:8f:ae:f3:be:78:b6:57:
                    c5:ce:d7:04:c3:b0:7e:c8:00:47:36:33:06:9e:fc:
                    d0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:51:C1:3E:95:C4:CE:D6:2D:E3:46:1C:B7:1F:81:1E:AC:C1:39:8B
            X509v3 Authority Key Identifier:
                keyid:B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d0:60:09:7e:6e:bc:2d:50:72:ff:c5:38:a5:07:84:71:ab:
         bc:42:3d:50:38:ce:1d:d9:77:07:0d:27:e5:9c:d1:a5:bf:66:
         90:57:4a:ac:29:72:00:dc:8a:b1:0e:61:72:db:f2:5e:0e:0f:
         5e:29:b1:4b:d8:02:e9:d3:6f:4f:43:99:9d:5f:4d:13:a3:e7:
         9a:ed:90:1a:7c:04:f9:5e:1c:c8:08:7a:2b:e9:22:9c:89:1d:
         d4:7e:a2:2b:db:79:b7:dd:d7:15:14:db:f4:df:97:93:b7:21:
         a3:4a:a9:e0:28:64:13:2e:c7:a8:55:f4:4b:25:6a:44:bb:4a:
         9f:d8:ef:20:cd:a9:dd:a9:ce:a8:ca:e2:b3:89:2e:7e:78:00:
         dc:52:4a:8b:36:ba:49:bd:ca:31:80:ac:a7:c8:b6:4f:03:a0:
         99:e3:68:9c:b6:ec:59:b3:77:76:2b:14:f6:00:c0:66:78:57:
         f6:e8:ba:82:1f:83:09:dd:63:72:cf:b8:a7:8f:5c:af:21:fe:
         66:c9:e9:44:ea:41:dc:a9:4a:83:7f:f0:50:1a:4c:f4:a6:e1:
         83:a6:79:ef:50:1d:83:70:09:dd:55:fe:d1:f1:33:01:e5:e0:
         39:fc:f3:79:49:5f:cb:83:d3:18:3f:62:cd:60:e5:74:82:2a:
         fb:b2:b8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:38:28 2025 by rpki-client