Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft
File:                     SiHJG2O7vaiASnSfPWEOiyF_m3M.mft (raw, json)
Hash identifier:          9cYcS7FWCrB9cue8cff3dqqhO9PIhAyBh237HV5lBtM=
Subject key identifier:   15:58:F8:02:ED:D6:D6:8A:60:A6:91:59:6B:8E:F7:E6:29:E7:44:BB
Authority key identifier: 4A:21:C9:1B:63:BB:BD:A8:80:4A:74:9F:3D:61:0E:8B:21:7F:9B:73
Certificate issuer:       /CN=4a21c91b63bbbda8804a749f3d610e8b217f9b73
Certificate serial:       0196BE253BC25BFDC7A8CC0EC9B381932EE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft
Manifest number:          1132
Signing time:             Sun 11 May 2025 07:00:33 +0000
Manifest this update:     Sun 11 May 2025 07:00:33 +0000
Manifest next update:     Mon 12 May 2025 07:00:33 +0000
Files and hashes:         1: 1Z1yWNgRSnqR3pt5WlApDelQe4o.roa (hash: 7G52qXZFDFq0XDjJ+/lW8m4SCa70rkFS2r1Ec1zORA4=)
                          2: SiHJG2O7vaiASnSfPWEOiyF_m3M.crl (hash: xcNrAru4c0V+19H3iStyfwAmBjVGN7inUQgRMxORl2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:25:3b:c2:5b:fd:c7:a8:cc:0e:c9:b3:81:93:2e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a21c91b63bbbda8804a749f3d610e8b217f9b73
        Validity
            Not Before: May 11 07:00:33 2025 GMT
            Not After : May 12 07:00:33 2025 GMT
        Subject: CN=1558f802edd6d68a60a691596b8ef7e629e744bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e9:ca:b5:b2:fa:43:c0:52:76:39:d0:59:40:
                    e6:d5:52:b0:21:53:fa:a0:76:8c:1b:9c:c0:46:48:
                    0e:03:56:5d:18:b3:56:aa:68:f1:c5:d3:7a:a7:1d:
                    28:fc:df:f8:39:52:cd:34:1f:45:e3:82:6b:36:89:
                    d0:12:9d:6e:5c:e5:44:76:3a:a1:f1:0c:23:f8:32:
                    89:a4:d9:34:46:93:a3:3c:d7:1c:80:7b:46:47:f2:
                    e8:63:60:bd:a7:8b:d0:3e:7c:64:93:70:50:0a:93:
                    d1:b3:97:12:2e:87:b6:78:e6:87:49:6e:79:fa:e4:
                    70:bb:0b:6c:38:d1:e4:00:ea:20:bc:f5:ee:4a:fe:
                    20:e0:d8:f2:26:2e:8d:9c:6d:38:80:ef:17:17:72:
                    d4:d1:9d:85:66:16:6e:01:fb:02:ee:a0:3e:08:5c:
                    ae:15:62:da:8d:2b:3e:9f:b4:31:7d:05:2c:1d:48:
                    94:53:ad:36:37:40:64:e5:08:55:d9:77:cb:40:ab:
                    54:13:8c:83:d8:0a:77:25:26:98:48:86:3a:5e:c3:
                    87:d5:97:dc:a1:14:bd:3e:24:72:73:b2:8e:be:23:
                    33:f6:02:15:11:3c:72:d3:b6:fc:7e:30:c0:7b:b8:
                    a8:ac:64:ae:22:dd:88:fb:a3:de:c7:61:e5:1b:ac:
                    7b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:58:F8:02:ED:D6:D6:8A:60:A6:91:59:6B:8E:F7:E6:29:E7:44:BB
            X509v3 Authority Key Identifier:
                keyid:4A:21:C9:1B:63:BB:BD:A8:80:4A:74:9F:3D:61:0E:8B:21:7F:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiHJG2O7vaiASnSfPWEOiyF_m3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6e8ca0-cd40-46fd-8ee4-47fbe4c4a4fd/1/SiHJG2O7vaiASnSfPWEOiyF_m3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:22:8d:ff:9f:7e:45:46:a8:ac:86:a6:17:35:26:a2:f8:43:
         6b:51:af:90:30:15:80:e3:8d:3f:1b:99:ba:f3:2a:17:5b:0a:
         36:54:41:f6:6d:5e:73:dd:2e:3e:9d:96:80:de:9e:9c:55:93:
         44:06:39:99:b3:f9:3d:3f:27:04:51:87:4d:fe:be:bb:5f:6f:
         70:34:4d:2b:a5:ec:7b:81:80:2d:b1:62:0f:5b:fe:e6:3b:38:
         38:72:71:cd:94:88:eb:2a:b8:1b:40:e8:37:2f:23:ce:4e:22:
         a2:f7:94:bc:0d:21:0e:6e:b8:b8:4f:e7:19:73:5f:ce:fc:3a:
         5f:7b:78:29:ee:f8:15:2d:e1:58:75:9d:f2:46:ec:79:29:0a:
         9e:a8:e4:e7:90:e6:d8:8a:d9:3b:4d:ae:31:34:8f:d7:ff:ed:
         ab:8c:2d:5d:6b:11:7f:8c:03:35:3e:9b:35:a8:56:d4:81:3f:
         41:42:bd:cb:58:83:46:8b:7b:f2:08:55:31:db:1e:d2:2b:be:
         26:f1:3a:f9:3e:0f:10:cf:64:fe:53:d6:01:d0:09:75:c8:a5:
         ea:7c:62:c3:49:ba:7a:0b:a0:3d:c4:88:fe:ce:38:a3:9f:52:
         d9:5c:2b:6b:db:a2:76:27:09:f1:0e:b4:1d:fb:c9:2a:cf:9e:
         37:4a:02:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:39:47 2025 by rpki-client