Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
File:                     cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json)
Hash identifier:          ISW7wjAje87jWhCWbNRO9mxzIM7xBOvX/0oaPisgN1Q=
Subject key identifier:   F3:FF:A7:04:CD:C8:68:4A:DC:1E:19:C3:64:8A:EA:EB:C3:46:3F:0A
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Certificate issuer:       /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial:       0196B710DB8F4F94487EB45D88D4E5D23445
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
Manifest number:          1548
Signing time:             Fri 09 May 2025 22:00:57 +0000
Manifest this update:     Fri 09 May 2025 22:00:57 +0000
Manifest next update:     Sat 10 May 2025 22:00:57 +0000
Files and hashes:         1: ELVDoYmFaTCtnTMhAqZufMc8mXg.roa (hash: GX/uRjpcUEeVnkiAfonTZ3Q7zJlqdixXVsuNiqh4BrE=)
                          2: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: uEJj6gGOBNoSbYgdfnPLYj+v/ZBYTfecfHd5m4pNezo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 22:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:10:db:8f:4f:94:48:7e:b4:5d:88:d4:e5:d2:34:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
        Validity
            Not Before: May  9 22:00:57 2025 GMT
            Not After : May 10 22:00:57 2025 GMT
        Subject: CN=f3ffa704cdc8684adc1e19c3648aeaebc3463f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3a:d4:1b:19:a8:b0:15:f3:70:e6:38:ad:bb:
                    a4:87:24:02:42:ed:65:4a:67:e4:05:bb:9c:f8:39:
                    d6:3a:59:f9:4d:8a:03:08:40:b1:e4:49:55:52:2c:
                    96:51:2e:b7:b2:98:39:af:b1:c7:51:e4:40:6f:8a:
                    af:7c:2d:a4:aa:02:06:8b:04:9f:11:bf:cc:85:40:
                    49:c7:fe:c2:04:76:b5:89:8f:e9:21:85:01:76:c3:
                    36:de:8b:b0:0f:f5:99:cd:8c:5d:08:b9:aa:dd:a4:
                    e8:5c:a2:a2:b2:57:a3:b7:ca:b1:67:ed:9e:aa:f0:
                    bc:fa:cc:37:1c:be:dc:f0:93:72:a4:26:64:b5:89:
                    08:90:f6:77:52:be:7e:0d:9d:c8:20:34:0b:52:b4:
                    ed:25:74:10:4e:7a:b0:5f:ec:2a:87:7c:30:0d:22:
                    19:e6:b2:f2:31:91:ce:f3:93:31:32:8b:48:96:2f:
                    05:81:6b:ac:63:e3:77:25:97:45:c8:92:69:e8:bc:
                    30:c3:39:48:a8:b6:db:c1:82:2d:5f:63:e1:5c:da:
                    05:73:da:00:87:8f:d4:15:7e:2b:36:fd:b9:b2:8d:
                    d0:32:d5:90:6b:38:6c:e0:78:ef:5f:50:92:47:71:
                    9c:76:78:87:ae:18:74:25:dc:f6:5c:ae:55:78:98:
                    cc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FF:A7:04:CD:C8:68:4A:DC:1E:19:C3:64:8A:EA:EB:C3:46:3F:0A
            X509v3 Authority Key Identifier:
                keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:36:bb:f8:37:f4:00:26:6a:62:68:52:40:5f:f8:c9:d8:9d:
         9e:46:0b:68:29:35:5b:82:3d:2f:b7:59:19:00:92:04:76:e8:
         09:b6:97:f4:a1:49:04:43:c7:61:2f:70:2f:f1:4f:fa:33:0e:
         1a:4f:bd:4a:8a:41:c4:7d:d7:d8:73:9b:b6:9c:ff:5a:c2:87:
         bc:dc:b1:58:c1:76:b2:a0:85:91:38:74:7e:51:0f:e2:e4:1f:
         a5:a6:82:78:7e:82:fb:f3:7f:b4:3d:53:05:35:9a:44:ba:d7:
         58:ee:4b:c7:f4:d7:e3:37:ef:85:6b:4e:f8:37:df:9d:b6:e1:
         34:0c:d2:f8:9d:5f:e8:0d:a4:f7:7b:14:63:77:59:ac:03:21:
         a2:32:18:34:dd:7d:29:52:3e:ef:00:8e:18:84:2a:09:6c:86:
         1e:ef:42:7b:2b:2f:85:4c:f9:01:97:62:86:5d:0d:95:75:f8:
         d6:79:f6:c8:ee:35:af:1f:05:10:fa:7a:78:0f:f0:b1:1a:e3:
         90:f2:a5:3b:1e:28:84:8f:2d:ca:bf:14:51:6d:00:8a:ed:a4:
         16:0c:60:42:52:5c:44:13:55:57:aa:31:61:56:97:5b:34:e9:
         2c:a4:3a:18:fe:c3:43:07:53:e0:6c:8a:11:70:c9:40:07:76:
         3e:a8:85:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:30:41 2025 by rpki-client