Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
File:                     ADssOHEGkAKtCy9CsMv16S475LM.mft (raw, json)
Hash identifier:          J+EVZtBEMY4erHQfCPrMVpoELpsdDOWOWUTHLDlQAvA=
Subject key identifier:   52:8A:59:64:90:A9:55:95:A8:3D:EE:12:5A:FE:AB:F2:C7:9A:2F:DF
Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
Certificate issuer:       /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Certificate serial:       0196B8D29627AC0212489CC4C2505458B49C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
Manifest number:          1538
Signing time:             Sat 10 May 2025 06:12:10 +0000
Manifest this update:     Sat 10 May 2025 06:12:10 +0000
Manifest next update:     Sun 11 May 2025 06:12:10 +0000
Files and hashes:         1: 4vY-bTyKzTJbIG8K1hcmZ2OzV3Y.roa (hash: 94nlldFhiqgmPqtety18s97ySLGHCvNHQ/0uGpBprik=)
                          2: 7cZbkQqr-SEdfr0tEW8C1Pix35Y.roa (hash: xSjPvHmjy6FdGTZKdoGxVAJ1Yq148v83DxivVL7nC44=)
                          3: ADssOHEGkAKtCy9CsMv16S475LM.crl (hash: V3oc3rpXrYbAHcb6MfQkBEA50PtwnFI03wNfQlnjE+M=)
                          4: Vtkp4nVzagTb1teWd63BFZh8RwU.roa (hash: TYSKwA87i0+WxUKYjqVqa3ovHNk1VR5486G73L2E0tU=)
                          5: wnFZO58-2aZ7P18Qw-jIjd1jeXs.roa (hash: vx36cOt+aE+Tw3PFdY9b+UteGXfJmHCFf0+yXWJQTLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:d2:96:27:ac:02:12:48:9c:c4:c2:50:54:58:b4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
        Validity
            Not Before: May 10 06:12:10 2025 GMT
            Not After : May 11 06:12:10 2025 GMT
        Subject: CN=528a596490a95595a83dee125afeabf2c79a2fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2f:00:38:1c:07:17:1e:b8:18:c2:2a:10:b2:
                    de:a7:21:0b:6d:8c:97:58:b8:b6:34:7e:1d:6f:b0:
                    b9:b3:8d:c9:f9:68:24:29:c1:c4:33:ab:9f:f5:f8:
                    c4:ae:b7:32:63:80:3c:a7:26:d5:7b:e2:3c:2a:e2:
                    86:07:a6:27:73:f4:c3:93:7d:da:fb:ea:10:2e:53:
                    d2:19:20:1d:6d:86:1c:90:e5:03:8b:30:d2:b5:91:
                    6c:23:8e:5d:30:ad:2f:62:f5:28:6d:5c:cf:c2:70:
                    21:df:d3:ea:85:32:1f:4b:18:4f:ee:5b:57:b5:d4:
                    93:b9:df:2f:af:df:ea:37:c2:b1:39:c1:d6:5c:b8:
                    d8:83:85:eb:d3:cd:9d:cc:3b:34:71:69:a8:3d:a9:
                    1c:ab:c4:57:e7:92:d2:77:ef:07:e6:e8:78:a8:cd:
                    71:19:65:d7:47:27:d6:86:6c:4c:e8:6f:bd:95:ad:
                    ea:01:75:cf:1f:43:4e:03:59:8f:b3:97:f4:ff:3c:
                    53:2d:7a:16:ad:be:7f:7a:7e:ac:1b:f6:fd:62:f2:
                    4c:ea:cf:14:19:c5:58:91:2d:b1:58:d5:cc:d8:bf:
                    bf:7e:7f:9b:70:e1:8d:16:68:70:1b:3c:4a:fa:da:
                    09:e8:ea:db:2e:d7:f0:32:bd:84:ff:01:2c:9a:a3:
                    69:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8A:59:64:90:A9:55:95:A8:3D:EE:12:5A:FE:AB:F2:C7:9A:2F:DF
            X509v3 Authority Key Identifier:
                keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:b7:68:f3:61:ef:33:78:fa:17:a0:96:83:3c:41:a0:70:ed:
         15:ce:db:1f:05:37:a3:88:32:6e:90:e9:59:ae:15:a8:d8:67:
         32:9a:e3:c1:d8:28:7e:45:6f:a1:fd:d8:3f:b4:e6:34:c6:0f:
         27:4b:aa:26:7e:50:22:1b:33:db:f4:26:4c:7e:39:5c:a3:d1:
         d4:2e:3d:2b:86:cb:0b:75:50:1f:de:0c:f8:2c:2a:bc:5f:3a:
         d2:c7:30:c2:27:2c:ef:81:a3:2d:e5:c8:52:5a:f4:29:55:3f:
         c8:23:c3:a9:b0:6f:88:5e:68:20:e8:01:f3:1a:0c:a5:26:49:
         e7:c1:5d:71:f2:33:5c:f4:c6:19:b3:b3:35:f1:b2:cd:00:85:
         1a:d1:d9:06:e9:53:9c:27:91:61:39:60:99:4e:cc:bc:0b:65:
         61:a1:06:ac:4f:44:89:bf:1e:35:6d:a2:a8:5a:a1:d6:a3:11:
         9a:7f:ea:36:2b:d5:c2:90:72:0d:8c:eb:b7:96:49:c5:60:16:
         35:3b:89:81:0b:d1:de:fd:98:c0:22:05:71:12:66:9d:26:e7:
         77:64:54:de:be:2e:43:fb:86:33:8d:ea:8b:21:94:c4:9a:31:
         80:21:0a:f1:95:48:f1:72:e6:a6:7a:79:c9:ed:a3:12:f4:dd:
         36:86:9b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:15:40 2025 by rpki-client