Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
File:                     dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft (raw, json)
Hash identifier:          8Kd/SIQyLeTnBlhQ6jksn7f49DUsorsUf7jbrQueVYM=
Subject key identifier:   21:7E:88:85:D1:B1:BE:D9:7A:2C:05:65:A2:FC:B4:E2:F3:44:EC:EB
Authority key identifier: 77:03:FD:03:A5:F3:4D:8D:56:E9:94:C2:B7:F1:0C:A4:9A:0E:01:54
Certificate issuer:       /CN=7703fd03a5f34d8d56e994c2b7f10ca49a0e0154
Certificate serial:       0196AAD5A809EAFD7CB9A0F1050D892D48B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
Manifest number:          152A
Signing time:             Wed 07 May 2025 13:00:50 +0000
Manifest this update:     Wed 07 May 2025 13:00:50 +0000
Manifest next update:     Thu 08 May 2025 13:00:50 +0000
Files and hashes:         1: WpMT8suijybaT-axFHyfyzyaTBs.roa (hash: I0+iXOVNpy84NiUe0arMh2Z225OGAdH9+ziecARxFHA=)
                          2: dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl (hash: J+qIfOct8OtMpRkkbBS4U9QY4rRYwV/TYDZHuvXdcCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:aa:d5:a8:09:ea:fd:7c:b9:a0:f1:05:0d:89:2d:48:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7703fd03a5f34d8d56e994c2b7f10ca49a0e0154
        Validity
            Not Before: May  7 13:00:50 2025 GMT
            Not After : May  8 13:00:50 2025 GMT
        Subject: CN=217e8885d1b1bed97a2c0565a2fcb4e2f344eceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:13:13:29:44:d2:4e:30:94:fe:ab:e1:3d:9e:
                    e3:94:6e:c7:2f:bc:2a:7c:ca:09:b0:83:5c:68:4d:
                    8c:78:87:b1:5e:3b:dd:62:f3:65:39:33:a0:01:f2:
                    0c:4a:7c:26:a2:a8:92:93:cf:20:c9:6e:ca:43:92:
                    85:23:10:ca:ba:bc:eb:46:7c:35:74:d3:3a:a6:74:
                    21:ca:45:47:4c:a0:16:e6:46:f4:4a:0a:b1:89:d9:
                    fc:27:92:7a:16:62:b9:ba:73:74:b6:e2:ce:a6:71:
                    f6:40:0f:95:b4:18:c1:52:08:76:eb:66:66:1f:20:
                    b2:e9:a0:fa:a3:e1:13:c5:8e:69:93:6c:47:1f:52:
                    53:12:74:12:03:93:15:37:7e:14:4b:ed:e5:53:ad:
                    9b:6a:d7:76:a5:7e:a7:66:ec:54:bf:48:da:61:04:
                    6c:0d:b3:08:c6:b2:d5:53:13:5c:c1:31:36:e3:0c:
                    de:f9:ab:98:33:f2:34:e8:29:62:74:50:2e:b2:e1:
                    da:e9:83:d2:94:5e:96:71:6f:e0:a0:4b:1b:fc:96:
                    cc:8a:09:c3:ab:b1:0a:e5:76:c3:91:16:32:02:99:
                    ea:95:81:fe:e6:b6:7f:3f:c7:46:e8:1e:ef:ea:65:
                    f3:89:da:97:85:6a:c7:aa:73:99:09:d0:21:c7:3b:
                    49:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7E:88:85:D1:B1:BE:D9:7A:2C:05:65:A2:FC:B4:E2:F3:44:EC:EB
            X509v3 Authority Key Identifier:
                keyid:77:03:FD:03:A5:F3:4D:8D:56:E9:94:C2:B7:F1:0C:A4:9A:0E:01:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:58:c6:55:71:54:6a:e5:9f:b8:63:ee:5d:49:0a:1a:90:ac:
         ef:88:1e:74:1d:d2:c4:b1:d9:00:61:61:66:6f:ad:e0:80:81:
         c0:4c:c1:62:4f:83:f2:3e:4a:e7:cd:9b:f8:e3:26:dc:33:5d:
         69:9c:5c:2f:a1:76:39:d4:60:5c:7b:d2:d8:89:41:5c:12:fb:
         8a:51:08:a0:37:ec:99:5c:49:65:7d:6d:4a:90:17:31:fd:fc:
         ee:ce:87:99:31:0a:6b:26:3a:82:ee:b9:84:ca:cf:cf:10:14:
         e3:08:3a:ea:f3:70:fd:af:89:91:1b:28:b9:42:2d:1b:89:50:
         26:26:ff:86:98:e8:bf:0b:63:29:34:12:07:5a:16:93:c2:30:
         4b:79:af:d5:f4:62:8a:ef:9f:fb:e3:b3:f8:fb:cd:3c:99:b6:
         bc:44:2e:bb:77:a9:c3:ed:a6:78:7b:48:0b:37:17:db:8f:cb:
         9a:7b:0a:54:d9:c2:6b:b6:f6:59:b2:b8:48:78:97:56:b5:65:
         6f:5b:54:4c:8a:2b:0c:6c:ce:67:f5:a4:41:2b:55:cd:7b:ac:
         c9:4e:9a:82:62:16:5f:04:5d:2a:db:04:c4:93:48:d7:e2:74:
         59:b3:9d:c6:66:a4:75:7b:97:dc:8d:99:f7:bf:26:0e:b2:b8:
         fe:5e:68:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:51:42 2025 by rpki-client