Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
File:                     vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft (raw, json)
Hash identifier:          HuslzB8r00QltbWURGPUHtPFuximKVqRHKHdL+1OKkU=
Subject key identifier:   AC:8D:E3:93:82:B0:80:65:3C:1B:C9:F9:0B:2F:63:AA:5F:67:67:B7
Authority key identifier: BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1
Certificate issuer:       /CN=bc3a4697447d190308644a58bceaa124c074b7e1
Certificate serial:       0196D02B6C5746F015A30F500F514D8E8FCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
Manifest number:          153E
Signing time:             Wed 14 May 2025 19:00:28 +0000
Manifest this update:     Wed 14 May 2025 19:00:28 +0000
Manifest next update:     Thu 15 May 2025 19:00:28 +0000
Files and hashes:         1: qTBKuXrMd7XLtQiqUfmYTbV0cXw.roa (hash: AGYgB26zdYDExNCMKB1Sk+TLZC3itvMITHqWkeGpeU4=)
                          2: vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl (hash: njohZKrECjT1ApAaWrPRz5CuAduMZQwoFmFttMxcvNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 17:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d0:2b:6c:57:46:f0:15:a3:0f:50:0f:51:4d:8e:8f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3a4697447d190308644a58bceaa124c074b7e1
        Validity
            Not Before: May 14 19:00:28 2025 GMT
            Not After : May 15 19:00:28 2025 GMT
        Subject: CN=ac8de39382b080653c1bc9f90b2f63aa5f6767b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9d:9e:27:0a:02:af:ed:80:99:7d:73:05:03:
                    f6:c9:89:11:17:c7:6f:06:cd:af:20:10:fd:b1:a5:
                    11:a5:4d:7c:86:81:c6:ed:0d:52:a1:43:4d:e2:4e:
                    3c:d7:77:3f:21:46:3f:9c:1c:2d:95:53:0e:83:c9:
                    f8:0b:1d:40:bf:0b:b8:cd:60:10:47:09:54:4e:8c:
                    45:92:e9:b8:bc:c4:e8:12:87:e8:54:04:2f:cd:c9:
                    0e:eb:32:cb:cd:58:cd:80:b5:79:6f:4f:98:17:29:
                    be:cb:0c:90:57:ca:b8:86:37:a6:10:0c:d3:44:c4:
                    e7:50:52:89:41:56:18:77:88:f6:69:1a:f8:13:7c:
                    aa:d1:58:3f:e6:c0:9b:8b:85:46:be:5f:00:7a:66:
                    33:3e:22:3a:0e:80:57:d6:d6:aa:c3:9e:d1:a9:da:
                    b7:88:f2:26:fa:61:20:a8:3e:e4:ff:a1:bc:74:03:
                    01:f8:6a:2a:83:5d:f8:36:87:1b:e0:b9:6f:55:e4:
                    2d:4b:fc:0e:81:dd:47:d4:74:54:fd:ae:12:13:f0:
                    81:18:24:2a:bc:b3:b6:70:57:9a:98:30:19:36:bf:
                    93:fa:d6:8c:57:41:db:67:0a:c9:b6:ec:e7:76:0b:
                    36:38:6d:9f:ec:e6:4d:d1:e1:35:26:a4:4e:55:cc:
                    68:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8D:E3:93:82:B0:80:65:3C:1B:C9:F9:0B:2F:63:AA:5F:67:67:B7
            X509v3 Authority Key Identifier:
                keyid:BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f1:78:51:dc:91:4f:52:46:6d:ce:5f:20:c3:dd:4d:5b:18:
         46:6c:dc:66:48:5d:aa:de:c2:c7:57:b7:7a:12:1f:dc:78:62:
         52:54:e2:71:b0:e6:b4:b2:be:72:d0:7e:ee:86:f1:b9:61:6f:
         3a:4b:95:7a:eb:40:e9:e6:e4:88:71:73:67:77:e6:c2:46:85:
         fb:ba:5b:d1:cc:4c:6e:a6:0d:81:83:43:88:11:2f:d3:67:02:
         87:19:2c:0a:bd:22:19:29:67:89:ea:19:fb:0f:10:1c:14:d8:
         95:86:87:7a:fc:9c:4d:9d:6c:92:73:4e:9c:ca:71:81:82:47:
         c4:08:32:7c:2c:04:e6:ea:92:31:1d:a6:86:ec:5d:2b:7c:72:
         5a:09:c6:e5:60:08:cd:fe:cc:fb:24:83:20:97:9a:b2:20:70:
         1b:94:ec:4f:17:e1:e8:58:e1:15:f0:12:c1:cb:9e:e3:b2:e5:
         6e:95:cf:22:81:c1:d5:7b:be:69:49:f3:26:1a:65:95:0b:1d:
         da:f2:aa:cb:f2:61:71:78:2e:d4:fc:1d:59:9f:f8:cb:f8:f6:
         5f:c1:c5:cd:7b:56:8d:99:22:e9:4c:10:5a:e3:a1:d3:49:2f:
         92:ed:11:95:d3:0a:db:8f:3a:15:6c:13:78:d8:01:52:17:17:
         64:9f:6f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:07:40 2025 by rpki-client