Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft
File:                     ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft (raw, json)
Hash identifier:          Im3OKZRzGHTr0GAAYGRcKISmF8yLcaoupd8EM3LD6XA=
Subject key identifier:   31:10:CB:83:C7:A3:D7:F1:5B:23:6A:A2:FF:D2:97:68:B0:6A:63:3F
Authority key identifier: 79:DF:50:E2:68:94:BB:0E:81:35:96:06:D8:2B:71:90:C1:75:98:CC
Certificate issuer:       /CN=79df50e26894bb0e81359606d82b7190c17598cc
Certificate serial:       0196C239591DD5AA2F4CD5B7907F7BD1ABD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft
Manifest number:          1538
Signing time:             Mon 12 May 2025 02:01:00 +0000
Manifest this update:     Mon 12 May 2025 02:01:00 +0000
Manifest next update:     Tue 13 May 2025 02:01:00 +0000
Files and hashes:         1: CmtSe5W47sEvu4dqUbsE8AFHRfo.roa (hash: IMShtZENk7lbdDo/N1aCJsixVqWpjgjzDkLqSHXXRLg=)
                          2: ed9Q4miUuw6BNZYG2CtxkMF1mMw.crl (hash: Ke+I1TFHdAwkjSXLz/C0Kxu5t0v6OmZd5za8GOdAVF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:39:59:1d:d5:aa:2f:4c:d5:b7:90:7f:7b:d1:ab:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79df50e26894bb0e81359606d82b7190c17598cc
        Validity
            Not Before: May 12 02:01:00 2025 GMT
            Not After : May 13 02:01:00 2025 GMT
        Subject: CN=3110cb83c7a3d7f15b236aa2ffd29768b06a633f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:24:05:41:52:7b:b5:15:ad:0b:fe:cc:95:35:
                    a4:2d:6a:b2:b6:52:e0:1e:ac:31:d2:d6:a9:4b:ba:
                    97:f3:1d:ac:de:ce:fa:2f:78:59:dc:af:84:0e:44:
                    60:83:f1:dc:8b:59:4e:da:ec:63:16:53:d8:b3:1f:
                    a7:e1:33:a1:20:e3:67:a1:b6:fd:e9:54:e9:6c:2e:
                    55:c5:ce:8e:45:fd:81:84:d3:cb:ff:71:3a:ad:07:
                    fd:8c:e4:4e:ee:83:80:d5:34:38:48:d0:80:1d:88:
                    05:52:75:74:ec:e2:9c:05:fb:9f:62:dd:b7:89:47:
                    eb:c9:c7:b6:75:1a:4e:6a:04:7e:5b:c0:a8:3f:8e:
                    33:62:60:26:f1:5d:d3:bc:d2:e3:85:fd:7a:b8:26:
                    ed:49:7c:cc:af:08:a5:b0:5d:f1:8b:fd:13:e0:f5:
                    b7:bd:ef:69:db:34:7c:6a:98:28:d9:f0:83:b6:d1:
                    51:0c:a1:99:d5:21:3a:2d:63:28:aa:52:82:31:cb:
                    85:ec:11:0b:19:36:f7:90:41:3e:36:74:6a:a4:31:
                    e9:20:8a:2c:68:49:eb:37:b9:10:d1:4c:cd:38:99:
                    98:fc:6b:55:2b:5a:8f:6c:09:f6:c4:4e:ed:4f:08:
                    ed:a2:35:96:a6:34:51:8c:4a:31:ea:a2:8e:f4:23:
                    b1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:10:CB:83:C7:A3:D7:F1:5B:23:6A:A2:FF:D2:97:68:B0:6A:63:3F
            X509v3 Authority Key Identifier:
                keyid:79:DF:50:E2:68:94:BB:0E:81:35:96:06:D8:2B:71:90:C1:75:98:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2d:b0:40:69:f7:20:1f:30:0e:00:86:22:ae:41:0a:12:b6:
         ac:d6:47:e0:77:cc:ee:0f:dd:51:2a:a7:73:f6:bd:93:68:d6:
         50:48:1a:70:db:30:90:ef:be:4d:b9:9b:d0:e1:92:92:f8:58:
         ef:11:31:e4:dd:77:bc:8b:3d:9d:45:c4:a7:92:a6:66:b0:c9:
         68:bd:8c:37:1f:fb:0a:26:4a:4c:93:0f:be:1b:0a:49:64:32:
         7b:fa:f4:f2:f3:89:0d:e2:dd:46:d8:54:ac:76:90:80:30:9f:
         3b:77:f9:93:2a:b9:5c:db:db:ed:80:6a:8d:b9:fb:87:f6:6b:
         ea:b4:de:12:dc:d9:e2:47:97:0f:bf:d0:70:92:e9:35:a3:6a:
         6e:02:3c:7d:e7:59:14:ce:33:5d:00:3f:01:4f:62:6d:90:2f:
         8d:72:6a:cc:28:39:bc:97:c9:08:48:b7:2a:97:3c:f9:77:ff:
         99:75:ba:56:dc:11:c6:ce:16:a0:c0:4b:4b:4c:7a:58:a7:4b:
         f6:66:21:ba:9b:38:69:5e:b8:1f:d5:58:e9:0f:19:78:e1:e2:
         a1:85:7f:00:10:f5:fe:17:c0:2b:a7:ac:40:58:f1:26:b2:31:
         d5:01:97:de:9e:02:42:55:05:9f:be:90:80:0b:45:37:7a:78:
         fb:b4:62:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:20:53 2025 by rpki-client