Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
File:                     AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft (raw, json)
Hash identifier:          OWzKRzya6CrlWB1gxLFSs0WX11DL4ficsKhkMfEsFb8=
Subject key identifier:   26:64:00:A3:D6:1D:EB:A6:39:3E:84:06:0F:F8:6B:71:4D:CD:F3:56
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Certificate issuer:       /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial:       0196BECA2BAC914649327AA2F9BA15BC74F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
Manifest number:          15B2
Signing time:             Sun 11 May 2025 10:00:42 +0000
Manifest this update:     Sun 11 May 2025 10:00:42 +0000
Manifest next update:     Mon 12 May 2025 10:00:42 +0000
Files and hashes:         1: AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl (hash: /VjF+Cu9RvBm/IOwCXaD87+DExAFBqprqJ5h9trVf8s=)
                          2: Qag3TzhF7KhIYH5aibVcZEo78dU.roa (hash: LGNFeenPDMIIHhq8fjkVK3bg4N97KxBcN+ypQDigoxM=)
                          3: YN9vQtRq6H4TpgucIWWeQrh0s2I.roa (hash: twjdgEYxcHrpnl9UnApMiRwmOFwUIxDF5Sg/k+h/7Ng=)
                          4: a2opnLjAdetXY_1JtX6e5k1djAk.roa (hash: JHmWYExOHBSKedqf+sSdese/XJZ0oxQzlwRK0J1GOlU=)
                          5: iUQqy6L6aDZjvtuJxQqMCFgGkBI.roa (hash: 2s0toD9du/uNKvxO9wvANUSYpPI3MyFsTUVNofTuzE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:ca:2b:ac:91:46:49:32:7a:a2:f9:ba:15:bc:74:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
        Validity
            Not Before: May 11 10:00:42 2025 GMT
            Not After : May 12 10:00:42 2025 GMT
        Subject: CN=266400a3d61deba6393e84060ff86b714dcdf356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c6:f5:ca:b2:45:58:c1:31:af:b0:cc:d1:9a:
                    f3:60:ce:03:40:59:ab:06:81:79:6f:6e:e6:cc:2d:
                    34:ab:35:67:f7:e0:b8:0d:8c:9e:12:11:fa:f1:39:
                    0b:aa:5c:98:cb:81:61:8c:f2:1b:9f:a4:12:2e:db:
                    0d:e3:4f:7a:74:55:98:de:a0:78:61:18:a0:d9:f4:
                    20:9d:ca:34:53:a8:76:ee:08:de:ef:33:2c:73:0b:
                    92:8c:dd:b5:46:8c:31:df:6c:a5:2d:88:f6:4d:a4:
                    77:0e:bf:db:d5:a8:01:2a:ea:40:42:19:7e:96:c0:
                    c5:2e:2c:f1:0d:b1:cb:7b:16:43:3b:09:ea:da:43:
                    d7:4c:5a:87:80:99:a1:7d:8a:96:70:e7:f9:1e:0a:
                    79:d7:19:d4:ed:6b:43:84:7d:53:08:fc:d3:6a:d5:
                    e9:fe:55:65:3b:30:1a:5e:6b:6a:54:46:f1:08:8a:
                    4f:08:09:1a:67:e7:f0:71:44:9d:91:24:07:26:84:
                    0e:6f:b2:d0:8e:7a:fd:2e:bb:b8:e6:dd:40:25:42:
                    95:0e:ff:91:a1:02:13:73:6d:47:64:9b:2c:eb:89:
                    72:d4:7a:ee:4b:3f:f2:8a:9d:8b:45:bf:e7:05:a1:
                    7b:b4:b4:24:c8:b3:a7:de:dc:b3:0f:20:6a:05:48:
                    45:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:64:00:A3:D6:1D:EB:A6:39:3E:84:06:0F:F8:6B:71:4D:CD:F3:56
            X509v3 Authority Key Identifier:
                keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:97:eb:df:8f:59:11:6a:f9:c2:57:96:6e:9f:ec:79:55:68:
         65:b9:f8:9f:77:7d:48:e2:53:50:02:d9:bc:2a:ba:80:e8:7f:
         b8:41:08:d5:61:36:b2:20:da:28:35:9d:d3:a5:1e:64:63:5e:
         00:d0:36:b5:8e:03:a9:74:75:48:55:99:19:ea:e2:98:e1:23:
         a9:74:bf:94:5c:10:ef:8b:5e:6a:a3:a7:4b:ad:b3:bf:63:2d:
         a0:f4:45:2c:93:d7:07:c1:69:42:ff:f7:e1:e1:0b:73:26:59:
         48:ee:48:69:b1:6c:c6:c6:ab:04:24:16:8e:43:42:fe:c7:48:
         d6:25:81:6c:d8:64:d3:0c:68:c4:20:fe:fc:c9:8f:be:7a:ad:
         8b:50:c0:f4:1b:0e:df:f2:5d:94:b7:46:6f:ac:1e:de:a1:b1:
         2a:c5:67:89:9c:93:10:17:ae:b7:ac:3a:2e:22:3d:cf:aa:18:
         84:1c:49:da:cf:e3:c9:62:8a:c4:74:df:49:d1:97:70:35:0b:
         39:dd:9d:4b:03:1a:76:95:d2:e3:de:5d:14:0a:74:b5:c2:b5:
         8d:cf:05:16:19:cc:30:a7:ba:1b:00:94:3d:46:3f:f0:ea:2b:
         7c:6a:5b:02:a8:b5:06:f5:b5:7a:c5:93:6b:30:4d:07:23:5d:
         f1:90:bd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:33:51 2025 by rpki-client