Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
File:                     xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json)
Hash identifier:          cOjOvxNnyT/BM64It4Zk7cDK/1SrZZwDV2R28xre4ks=
Subject key identifier:   AA:18:91:08:21:A7:6E:29:75:A3:2D:35:1A:C7:19:5D:ED:73:39:53
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Certificate issuer:       /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial:       0196B4B4942A0D5BF3F152A952AC524247A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
Manifest number:          154C
Signing time:             Fri 09 May 2025 11:00:55 +0000
Manifest this update:     Fri 09 May 2025 11:00:55 +0000
Manifest next update:     Sat 10 May 2025 11:00:55 +0000
Files and hashes:         1: AGkNk2ZYDTGltyEXWoEVhtwt9oY.roa (hash: dlqvyvQ8Rvf4T+DKyr3OY+YZh3rtTCxaYzwHy40bMgA=)
                          2: BG-IwhP94ukLbxm2X3VxR4W5Nbc.roa (hash: 8rlyAUIx0xWV/NVKgvLdoyGMltHPy6j1FAqFmhNaiKg=)
                          3: H0yf0Oo2kc1vuXQI2C2XHgJR1UA.roa (hash: +TduWsFWrzOECmrsJ1U+XZI1HDNWMV9mx9iurejnLIs=)
                          4: NGphx2qhBW9gE8CfDHfoJNe6mG0.roa (hash: ECnwkjX75lQ4kRJVM7O1TZuPUXkcSD/08JlEytcC2F8=)
                          5: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: zr0ZaC58/xFL2XiihJAV3OyYXHnLtdeaINYf0SkDGAQ=)
                          6: zvoNtmVyFGPqGLORGNfy_liCG3g.roa (hash: OrM2f4p6SPuoSJpjtWAlr90ha2Ax6eDIbJJgANcSLqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b4:b4:94:2a:0d:5b:f3:f1:52:a9:52:ac:52:42:47:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
        Validity
            Not Before: May  9 11:00:55 2025 GMT
            Not After : May 10 11:00:55 2025 GMT
        Subject: CN=aa18910821a76e2975a32d351ac7195ded733953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:75:69:32:60:59:f3:73:af:34:02:3d:d4:67:
                    f4:87:d1:4b:30:f6:cb:ed:d1:8f:8e:a4:ca:6b:bd:
                    c9:53:f8:ba:10:bd:12:e8:59:af:10:c2:7f:17:54:
                    94:e1:99:9d:55:c5:e5:30:7a:96:e1:43:6f:61:b4:
                    c6:08:1a:0a:10:a2:b4:c6:dc:3b:21:3f:bb:5a:cb:
                    11:32:a8:c5:56:9e:db:a8:fc:47:e5:43:36:21:ea:
                    ca:e4:92:b9:00:3d:89:9a:7b:65:84:8b:0e:78:23:
                    38:95:ad:56:05:f3:03:c7:9e:09:b6:6a:08:81:4a:
                    63:4a:e4:0f:60:8e:be:62:20:41:f6:ff:aa:a5:ba:
                    d8:a7:46:86:21:f4:2e:1b:0e:1e:37:41:ab:4a:95:
                    0c:18:7b:c5:2a:27:e6:85:ce:62:1d:a5:79:89:e2:
                    eb:40:f6:0a:ce:86:11:dd:21:d1:50:0f:bf:bf:49:
                    10:ed:02:7a:f3:79:94:cb:07:ad:d3:49:6c:06:c3:
                    c5:b5:bb:3f:96:99:14:ca:13:63:3c:e1:de:e9:80:
                    67:fa:58:72:2e:93:a8:15:7b:ab:d0:f0:e7:36:a9:
                    97:20:3e:2d:86:da:81:29:b8:4b:f4:ec:3b:42:99:
                    77:09:64:0d:30:d4:ad:c4:08:35:8d:e1:91:ee:78:
                    8d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:18:91:08:21:A7:6E:29:75:A3:2D:35:1A:C7:19:5D:ED:73:39:53
            X509v3 Authority Key Identifier:
                keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:19:c8:af:57:0c:8b:ad:5c:1f:78:8e:89:c5:20:c0:9f:80:
         93:65:e7:9f:76:e1:38:19:a0:cf:f9:4f:b9:01:ff:d3:43:cf:
         f6:fe:d3:a4:8a:0c:fe:fb:2b:2b:85:d3:a0:02:46:e5:3d:cf:
         6f:48:3e:34:6b:77:0b:ed:c2:cb:1f:3a:1e:0a:77:d2:18:b0:
         51:cb:e0:3a:78:d1:61:49:67:b1:f2:61:08:f2:68:0d:d8:50:
         e2:86:82:57:05:42:83:1a:34:cd:d4:e3:10:b9:c9:7e:93:9d:
         42:68:5b:ad:a1:79:e6:41:b2:47:0d:a9:e9:cf:94:a8:d7:2c:
         81:c5:03:38:09:f8:ad:0b:42:92:f1:d2:11:24:e0:19:b4:f4:
         32:db:fc:5f:da:0f:ac:9a:49:1c:5a:36:f3:ca:da:0e:45:3e:
         56:36:16:7d:46:04:f8:0d:e9:1a:4a:28:df:eb:f6:fe:d1:37:
         ac:8a:fc:d2:37:45:77:d6:98:96:36:38:55:00:69:7f:0f:3f:
         f6:86:d6:01:85:ed:b1:43:57:60:2f:38:89:f3:0e:1f:b6:92:
         cc:b3:de:da:f4:94:64:08:18:f4:da:7f:e5:de:ac:0b:4d:bb:
         52:cb:e6:f8:5c:7d:d5:a1:e7:5c:eb:ea:10:3f:3b:91:96:03:
         d7:e3:b4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:27:43 2025 by rpki-client