Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
File:                     bO30FYremPFFfOyFiVVibxYdKu8.mft (raw, json)
Hash identifier:          926RFedEuL39/sfh001HgUuzdy3dcJn3+rv7/wyQiXM=
Subject key identifier:   04:58:F0:50:8A:82:AF:D6:DD:3B:1B:C5:5F:51:2D:5C:28:99:A0:65
Authority key identifier: 6C:ED:F4:15:8A:DE:98:F1:45:7C:EC:85:89:55:62:6F:16:1D:2A:EF
Certificate issuer:       /CN=6cedf4158ade98f1457cec858955626f161d2aef
Certificate serial:       0196B9DA92810A3CE7EC646298681D9B6C13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
Manifest number:          153A
Signing time:             Sat 10 May 2025 11:00:31 +0000
Manifest this update:     Sat 10 May 2025 11:00:31 +0000
Manifest next update:     Sun 11 May 2025 11:00:31 +0000
Files and hashes:         1: Flwvhhtmnugnw0Jq8XM4728h_tc.roa (hash: mMPxIGgY2ZdP2DRf7AHcBe/zEjvkKGfWdlZtEbsX1hw=)
                          2: Mz05BHBSbafMl08a8_UKVe_gGso.roa (hash: 41KbWqupO1eNtLpQemjc0X3ZgLWHI1W8tciFt0xry74=)
                          3: bO30FYremPFFfOyFiVVibxYdKu8.crl (hash: msDEyRDNyNptEjXu1Oq7cUN4n2udkFbmp+uASgmFYp0=)
                          4: nfbw8nkOWLMFYeRpQFZBC2lYZWg.roa (hash: uMfkd4wLt8gDn0VUwsQBSdryskjaJgQtls/Bs/4236o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:da:92:81:0a:3c:e7:ec:64:62:98:68:1d:9b:6c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cedf4158ade98f1457cec858955626f161d2aef
        Validity
            Not Before: May 10 11:00:31 2025 GMT
            Not After : May 11 11:00:31 2025 GMT
        Subject: CN=0458f0508a82afd6dd3b1bc55f512d5c2899a065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0a:78:ca:43:57:65:fd:62:18:98:ad:ce:d9:
                    2e:d4:67:58:70:5c:d7:7d:4e:dc:2f:46:42:c1:ce:
                    9c:d1:e7:7b:1e:22:1e:6c:42:f0:01:d3:5c:08:47:
                    60:14:ef:9f:d9:ae:3d:5c:25:7b:fc:68:e0:56:25:
                    9a:ad:0b:26:1e:08:41:ee:2b:66:5f:9b:a1:c3:de:
                    9a:54:32:14:6a:6e:80:de:65:4c:9e:e0:0b:9c:0b:
                    34:93:58:e9:e0:a2:21:58:4e:ce:c5:53:f0:cc:42:
                    15:74:7c:7e:87:0e:5c:9c:91:95:ae:10:28:a2:49:
                    ce:19:36:b1:55:b2:be:ba:83:1a:8f:c2:ab:c9:72:
                    4f:24:01:33:9a:ec:a3:d2:7f:b0:00:61:49:28:9c:
                    bf:2a:de:1d:4c:85:85:eb:64:cc:53:c4:e6:4f:67:
                    57:f4:9b:c3:1a:f3:c5:0c:71:66:19:89:b9:8b:9d:
                    61:9a:de:e1:38:9c:e3:53:93:b4:f9:c3:21:99:26:
                    de:b6:d3:84:15:aa:4b:7c:35:45:1d:48:17:d9:50:
                    be:70:0c:01:02:35:e4:4a:6f:6c:24:d7:c7:87:aa:
                    ea:be:5c:81:26:39:bb:6a:ba:16:56:28:11:81:17:
                    87:96:a3:1d:a9:c5:c1:39:a7:b7:9a:c1:1b:83:db:
                    44:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:58:F0:50:8A:82:AF:D6:DD:3B:1B:C5:5F:51:2D:5C:28:99:A0:65
            X509v3 Authority Key Identifier:
                keyid:6C:ED:F4:15:8A:DE:98:F1:45:7C:EC:85:89:55:62:6F:16:1D:2A:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:57:34:cf:a8:34:9b:91:aa:f0:72:70:ba:54:91:4f:dd:ba:
         88:01:d1:5e:d2:b2:7e:e7:11:d2:72:ec:21:36:60:89:fa:27:
         47:56:f3:fa:85:c5:96:a3:23:a7:ed:64:a1:60:70:1a:e5:95:
         91:81:5d:32:5f:0c:fc:3a:23:97:87:8a:3f:79:b6:b8:7e:81:
         b4:34:1e:cc:ac:34:06:bf:1d:22:4d:19:0d:1f:72:23:d5:b9:
         ba:99:70:95:18:6e:77:6f:06:8a:bb:df:24:c1:2c:f7:13:1c:
         08:9c:fd:be:4d:6e:68:55:4a:98:21:63:8e:73:28:92:c7:c3:
         4b:c7:3e:dc:f4:a2:21:db:bc:be:8a:80:4e:00:a0:d2:25:3a:
         af:dd:10:e6:7b:03:3d:6b:57:f7:ab:d7:f9:57:65:0a:f7:90:
         7b:b8:f6:85:9f:db:04:ea:98:2c:bf:ef:5e:6d:6a:9e:e6:74:
         42:a4:d9:e0:c2:44:0d:da:a6:be:c0:cc:eb:32:d5:c6:06:5f:
         03:d5:a3:2a:68:9e:8a:f6:e7:ed:7e:df:df:08:75:d1:5b:3d:
         b6:91:84:7b:83:2f:e0:e5:da:d2:0b:64:12:3b:13:ea:73:1f:
         53:e1:41:44:83:f4:ce:fd:52:0b:90:b0:dc:a7:da:1f:2e:79:
         69:78:da:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:36:56 2025 by rpki-client