Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
File:                     StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft (raw, json)
Hash identifier:          TBnQgGU/vnSXdSP3VnaJKSrVYFzBy60j7HNGRBYiUU4=
Subject key identifier:   B5:1F:8E:AB:1E:6D:02:94:0E:36:A2:97:12:48:12:D1:35:71:F6:00
Authority key identifier: 4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
Certificate issuer:       /CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
Certificate serial:       0196B36A9540E90FE480182DA9CD20D367D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
Manifest number:          152F
Signing time:             Fri 09 May 2025 05:00:28 +0000
Manifest this update:     Fri 09 May 2025 05:00:28 +0000
Manifest next update:     Sat 10 May 2025 05:00:28 +0000
Files and hashes:         1: StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl (hash: uM8fOFzZzK1YNlka3XIvHqsu4bi82G5+5cDw3dtt/O0=)
                          2: aRNIY9aPisPsPJEyhtJc_m061Zk.roa (hash: ah5G0cArNKCIsOUw2/tpkDwad97MIaUDok+u/s4pKjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b3:6a:95:40:e9:0f:e4:80:18:2d:a9:cd:20:d3:67:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
        Validity
            Not Before: May  9 05:00:28 2025 GMT
            Not After : May 10 05:00:28 2025 GMT
        Subject: CN=b51f8eab1e6d02940e36a297124812d13571f600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1c:fc:9a:18:ba:fe:f2:1d:cd:f7:72:22:0d:
                    53:9c:36:5a:3f:95:93:6d:18:17:b0:a7:b0:a0:79:
                    82:c4:8c:d7:dc:76:12:be:8e:52:ed:fe:ac:13:49:
                    ee:7d:4b:25:2e:e0:5a:66:3b:e4:71:c1:02:1c:42:
                    48:2f:d8:a9:8b:08:08:0b:60:6a:c5:ba:44:8f:4c:
                    b4:fb:11:fa:54:0f:97:9e:24:7c:7d:98:6f:4c:af:
                    55:40:02:bc:22:eb:fa:43:61:95:81:18:e6:98:32:
                    95:95:9a:1b:71:ef:ba:2c:fa:46:a7:98:44:a9:a5:
                    40:02:87:8c:e1:05:97:44:3a:2e:c0:cd:cf:6b:f7:
                    4c:23:65:ec:54:8e:85:c3:65:ff:3d:2d:23:0a:e3:
                    55:2d:5d:42:13:4c:1b:4e:8c:49:fe:17:e7:44:2a:
                    d6:0d:35:b3:84:cf:36:30:0e:12:d7:45:88:1c:89:
                    58:8b:5d:d2:75:84:05:c1:0d:67:72:f5:91:62:64:
                    67:2d:8b:a3:e7:06:6e:12:bf:e2:65:65:53:6a:bc:
                    5f:e5:2f:a1:ab:2e:2f:7e:83:c8:7e:e0:e1:03:c0:
                    8d:2c:bd:6e:bc:60:a6:33:77:db:9c:47:1f:59:42:
                    02:45:28:68:9f:ba:95:34:82:bc:43:89:c1:29:de:
                    4f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1F:8E:AB:1E:6D:02:94:0E:36:A2:97:12:48:12:D1:35:71:F6:00
            X509v3 Authority Key Identifier:
                keyid:4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:e5:c7:85:a9:a4:6b:9f:0a:11:da:79:d7:42:b4:50:a0:8f:
         79:ad:cf:a1:2b:d3:e1:a4:d1:5e:d5:8d:82:de:b0:f6:4e:08:
         8e:00:d4:b3:dc:bc:2f:b2:d0:21:50:18:09:bd:18:a8:07:23:
         65:cd:d3:73:02:dc:96:fb:7a:20:b1:ae:bb:f7:93:7f:33:95:
         b3:21:bb:4f:ad:ca:b6:53:65:44:72:cc:21:2a:c6:e6:5c:31:
         d1:4f:16:28:36:ca:d7:fe:8f:11:63:a5:14:47:b2:d5:be:e1:
         64:81:a0:72:a0:bf:44:31:08:2a:bf:e3:3a:8c:5c:a5:60:85:
         27:7e:6a:31:95:e5:b0:9a:3b:da:1a:7a:83:55:c8:7a:e3:bd:
         fa:cd:45:d9:b5:cd:51:1c:6d:a0:42:97:bf:df:17:fc:4c:20:
         02:d2:72:c6:64:f3:3e:91:7f:9b:a4:26:29:fa:3d:60:d0:e1:
         b0:7b:c4:60:88:da:52:63:eb:1b:54:e2:97:bc:53:1a:31:e0:
         d8:cc:23:c0:35:9e:65:7e:97:61:28:a4:82:c7:78:7d:b3:d9:
         b5:3d:17:70:39:c4:73:fc:6f:1b:25:12:e0:b6:f1:c7:4c:e7:
         ed:98:8b:56:f7:ea:f4:e6:6a:23:f4:8b:7d:82:56:3b:20:2c:
         9c:dd:0f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:48:57 2025 by rpki-client