Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
File:                     _E0Gl4lpqL2rbWNZBi13geA0Sco.mft (raw, json)
Hash identifier:          dgmUBx+HdVUSGdRKgtUK11ddCs9AdyBpLkTMbtjj71U=
Subject key identifier:   99:09:44:A0:D3:92:8D:B5:8D:A6:58:0C:E0:29:0D:C6:7D:DD:C9:68
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Certificate issuer:       /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial:       0196A9F95606828B1916B157CAA5DC548E81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
Manifest number:          1539
Signing time:             Wed 07 May 2025 09:00:11 +0000
Manifest this update:     Wed 07 May 2025 09:00:11 +0000
Manifest next update:     Thu 08 May 2025 09:00:11 +0000
Files and hashes:         1: 02eA2zVN2NGAdF-P2LMeAYVbZ8E.roa (hash: 1lC1lblUpRwTVQ+Ge49BDR+GJQFgOVsafNXG64hb/XY=)
                          2: Fh-g3ybxuQPMBjAboSgyWK2vAoc.roa (hash: 2MxUFjGmuDKUG21lzv5veXhyhTQId3UhJyQ5SEul+IE=)
                          3: RqVcFJZ-UOtFVhYTc8Tvk-2MyWc.roa (hash: EkympbPJChDE++MdHcZn5otezDPhnhwM5HrzDsbo97E=)
                          4: UGBZOZSWywjphqY06-K_M1ZGoT0.roa (hash: RJB+IF1dz0DTQaSONy8F1A13L8REX4DXW9Kvah614y8=)
                          5: VqGI977rLYSlPvPeIqKzU5gAsRQ.roa (hash: lpVLT1GI44DAxERwMidgTiLaLBc+qxFL0OsVYhw1jZs=)
                          6: _E0Gl4lpqL2rbWNZBi13geA0Sco.crl (hash: iFWc8cCT4pbEC2uKGfrzo4H1IvmFMh4Ur6dFpG8UamI=)
                          7: vdV5qL7SpepCbsvsvfAJBAz8FxI.roa (hash: zM4+IpZ2NSkVy8xnsYcs6SKRJCNxX1j91N1iXdAJ3Zs=)
                          8: zQ_mdrGL7iDEweRkAPL6mvm3aRA.roa (hash: ZLxLzKI7oWxHfaoLaLC/qvHYpwJYh49zyjA/TXCZ5qY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:f9:56:06:82:8b:19:16:b1:57:ca:a5:dc:54:8e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
        Validity
            Not Before: May  7 09:00:11 2025 GMT
            Not After : May  8 09:00:11 2025 GMT
        Subject: CN=990944a0d3928db58da6580ce0290dc67dddc968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fd:b4:43:be:7f:bd:4a:a9:31:f7:26:1f:57:
                    33:7f:6f:7d:2e:72:e2:ba:a0:06:ea:76:bb:3d:a5:
                    84:98:29:19:a2:45:db:4c:eb:5b:6c:39:94:f4:3e:
                    c8:3b:a1:23:5a:17:ee:e0:f7:81:16:f4:bf:8b:23:
                    99:4f:ae:a5:1f:d5:95:d5:0b:16:e1:94:59:b7:bd:
                    4e:54:95:5c:05:29:4e:fb:2c:f9:a6:9a:34:2e:88:
                    96:73:2b:00:a3:e1:47:fa:11:eb:78:a5:7a:a1:cb:
                    38:a7:f4:5c:e2:67:3a:de:51:da:39:3d:14:92:83:
                    cc:2b:0c:68:ab:70:7e:d3:82:46:4c:eb:df:57:62:
                    ef:03:25:71:3d:f0:60:81:05:31:70:c0:09:02:ac:
                    01:48:0d:3b:40:99:25:a9:b4:01:e6:37:0b:77:7d:
                    71:69:21:29:64:af:36:bd:5e:96:b4:a2:69:cb:a9:
                    ad:b5:c9:9a:16:d0:8f:d4:da:82:88:1b:a8:54:e8:
                    98:dd:85:c8:72:d8:80:25:34:0d:85:a4:33:4d:f7:
                    ab:fb:51:2e:db:70:27:9f:53:66:68:19:8e:61:42:
                    c2:a9:5a:fa:48:1b:c4:91:f9:6d:16:af:59:a6:9c:
                    6b:bc:ff:21:75:4e:7a:e6:38:23:d4:80:be:b6:bd:
                    55:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:09:44:A0:D3:92:8D:B5:8D:A6:58:0C:E0:29:0D:C6:7D:DD:C9:68
            X509v3 Authority Key Identifier:
                keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:e3:dc:1f:be:f9:36:bd:1a:ad:e5:19:8c:e4:72:cf:40:c0:
         2e:74:69:62:69:51:42:dd:41:64:16:7f:07:35:50:97:54:fc:
         9b:bc:31:c5:04:09:74:7e:ec:60:9b:a9:33:8d:dc:0f:0d:b4:
         a5:a7:20:11:ce:1b:0b:b8:c3:58:3e:5a:82:e1:5c:45:6c:cb:
         c8:2e:d4:0d:33:05:07:5c:8c:07:fe:39:19:bd:97:a0:9b:5f:
         fe:c5:40:82:61:8d:5e:ca:00:88:91:0a:2c:ae:1d:9e:17:70:
         ca:fc:69:57:c8:76:17:7e:6d:7a:38:e3:3a:f3:e7:fa:b1:91:
         e5:df:3e:19:44:9d:80:c2:24:1f:fd:a6:1a:f5:b7:67:3c:0d:
         c6:33:d7:09:8f:69:45:eb:c9:83:53:8e:b4:f0:8f:25:f5:5a:
         0b:58:47:64:c3:93:3f:66:10:f1:c2:60:e8:2c:96:af:70:32:
         0e:e5:a6:81:8a:81:44:c1:a1:4c:1a:a8:e0:46:4f:53:05:d8:
         86:ad:08:01:dd:72:0c:72:bb:2f:7c:4f:4c:b2:7d:21:e5:38:
         c3:74:11:69:93:97:03:79:94:d8:ac:fd:ad:3b:18:d2:1d:5c:
         58:d6:19:1b:62:f6:a9:86:07:37:d1:87:96:e1:e1:d4:e8:36:
         ef:d7:ca:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:38:41 2025 by rpki-client