Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft
File:                     _eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft (raw, json)
Hash identifier:          20qfP+Qawjdta9j6nPAQeRckm2m+IGVR8pc7KFTZYvg=
Subject key identifier:   32:F1:C6:F0:C0:D2:2D:90:45:84:2D:9E:37:2C:E5:C9:B5:ED:18:51
Authority key identifier: FD:E1:AF:B5:5D:8B:B3:DF:F1:F0:FE:63:06:F3:EF:20:79:58:5A:AD
Certificate issuer:       /CN=fde1afb55d8bb3dff1f0fe6306f3ef2079585aad
Certificate serial:       0196BBFFACF96ADE42437D6BB8390437F0AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft
Manifest number:          1536
Signing time:             Sat 10 May 2025 21:00:17 +0000
Manifest this update:     Sat 10 May 2025 21:00:17 +0000
Manifest next update:     Sun 11 May 2025 21:00:17 +0000
Files and hashes:         1: YExiaarbuvH9TQzZ24egFcmAkD0.roa (hash: mt2m3RTRnmt9DmA4UJddV/a1P2ybagRmPkEyYSpRGrY=)
                          2: _eGvtV2Ls9_x8P5jBvPvIHlYWq0.crl (hash: cOjGaId0dxeZRuac8tJuGEQDyNiCHQT6HMAyDJKWYx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:ff:ac:f9:6a:de:42:43:7d:6b:b8:39:04:37:f0:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde1afb55d8bb3dff1f0fe6306f3ef2079585aad
        Validity
            Not Before: May 10 21:00:17 2025 GMT
            Not After : May 11 21:00:17 2025 GMT
        Subject: CN=32f1c6f0c0d22d9045842d9e372ce5c9b5ed1851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f4:8d:14:a1:d0:cf:22:92:94:c4:a5:35:ef:
                    f5:44:d8:6e:f5:1c:62:55:60:e3:da:50:6b:07:81:
                    f4:67:48:ce:14:6d:ee:43:6c:37:9a:0d:86:c5:04:
                    1f:55:73:0c:19:6c:65:77:93:ba:15:3c:fc:70:2b:
                    e1:4c:62:4b:e5:06:79:e0:1c:53:f0:3d:ab:17:6b:
                    b5:46:90:e0:b0:6b:23:9d:22:bc:9d:44:2d:96:99:
                    41:0a:3b:f7:ec:62:6d:04:d2:23:0b:c1:34:6e:29:
                    74:a8:e5:9c:cc:1f:7e:b7:02:b5:16:67:2c:bc:ac:
                    4a:d1:28:03:f7:66:b2:fa:51:41:f2:c6:6f:85:18:
                    62:5e:d9:e2:43:5d:bf:40:e9:25:bb:c2:4d:51:c9:
                    dc:e7:48:85:15:59:07:b0:0a:e0:c6:e4:89:fa:20:
                    5c:21:be:29:0f:16:f9:d6:52:87:a6:c0:ef:76:80:
                    b6:cd:2e:26:8b:8f:c8:4c:fb:8f:23:17:ea:fc:c4:
                    78:04:19:eb:a4:f9:8b:a5:6c:d0:e8:e2:34:ad:ff:
                    95:c2:f2:a1:f3:69:d5:2a:48:e7:cd:fa:67:8c:02:
                    2e:b0:f4:4b:0d:67:af:82:3b:ff:82:70:b7:a7:26:
                    2b:7a:56:d7:af:84:f9:bd:80:40:92:f5:aa:6e:8a:
                    e5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F1:C6:F0:C0:D2:2D:90:45:84:2D:9E:37:2C:E5:C9:B5:ED:18:51
            X509v3 Authority Key Identifier:
                keyid:FD:E1:AF:B5:5D:8B:B3:DF:F1:F0:FE:63:06:F3:EF:20:79:58:5A:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:5f:5f:18:25:0b:c3:cb:d8:f6:67:80:9e:55:41:30:f2:47:
         0b:9c:8e:45:e2:0c:a9:bf:62:9a:3e:68:bc:7d:0a:b3:67:7e:
         ac:08:6d:b2:ca:d7:a0:06:a8:e5:f3:a1:39:8e:01:ab:3a:61:
         ff:5e:3d:cf:50:03:e0:e9:a9:9b:d8:bf:ad:be:aa:b3:84:68:
         5a:cc:bc:aa:40:3b:f0:ca:60:63:f5:31:81:eb:b4:f3:69:40:
         d1:df:f7:2b:48:83:ae:87:39:29:9e:cc:3a:c0:83:59:71:6c:
         b8:b3:ad:47:71:4a:8d:a0:e2:98:6b:8a:a0:07:ef:d1:2d:9c:
         58:8e:d9:25:a0:36:20:f4:5e:08:12:56:97:1f:62:ad:07:b5:
         99:da:5c:77:6e:b0:67:dc:bf:db:cc:4b:d6:0a:ba:0e:d8:b5:
         bf:7f:93:9b:69:b1:a5:36:fc:b5:b3:bf:50:49:ec:2f:a4:42:
         fa:ac:ed:78:76:60:50:66:55:99:11:27:10:f5:a7:a3:fd:53:
         52:1a:b7:f9:f3:fe:68:93:a7:16:e6:b2:a3:ab:6e:91:eb:02:
         c2:ae:6e:15:0a:4c:32:12:a1:7b:6f:33:83:ce:24:1f:ea:28:
         04:59:38:43:3e:dc:19:54:0c:db:84:81:f5:3d:a5:6f:2a:b7:
         e2:71:81:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:12:35 2025 by rpki-client