Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
File:                     fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft (raw, json)
Hash identifier:          3ACR9ErjsQJnFXJO4fkonQ7/IlR9vHYUA+pEaqxRwgY=
Subject key identifier:   54:D1:59:2E:6F:24:A1:07:54:AE:61:10:AD:AA:EB:4A:3E:38:BF:F8
Authority key identifier: 7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
Certificate issuer:       /CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Certificate serial:       0196BE5C5B29C7A0AFCE4B757F46FBAA8A29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
Manifest number:          1535
Signing time:             Sun 11 May 2025 08:00:45 +0000
Manifest this update:     Sun 11 May 2025 08:00:45 +0000
Manifest next update:     Mon 12 May 2025 08:00:45 +0000
Files and hashes:         1: fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl (hash: Xf04HEZreaHO8lAcxF6TmkAW5VYDbxIJEZhTQVFEJSU=)
                          2: zCcp7j-FTR7h6zyRr__6kmhwg_M.roa (hash: ep4Wt4XOrawaaEnM0c8/+z8Ud6DA2WUnVWDUZ1tn3mc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:5c:5b:29:c7:a0:af:ce:4b:75:7f:46:fb:aa:8a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d0ac334438a53d18ae40efc9368768b931cfac2
        Validity
            Not Before: May 11 08:00:45 2025 GMT
            Not After : May 12 08:00:45 2025 GMT
        Subject: CN=54d1592e6f24a10754ae6110adaaeb4a3e38bff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6d:8f:95:c1:fd:c2:25:ce:7d:7a:a5:a8:b8:
                    f3:47:c4:ad:6e:3a:66:f9:7c:aa:4d:0a:c2:63:f5:
                    d8:22:57:8c:02:be:c4:17:e1:f2:b2:1b:ff:8d:0e:
                    e8:f0:eb:de:1c:21:b4:14:7e:5e:ec:c0:d5:48:68:
                    bd:d9:d6:7d:19:72:2b:3c:27:9c:c2:b2:0c:c5:0b:
                    a3:00:b9:6a:41:bc:42:7c:f5:d3:04:ec:06:ac:85:
                    37:c1:b1:71:4a:46:04:ee:25:84:ef:b8:ab:21:c8:
                    00:6b:90:95:e4:6b:10:8c:fb:3c:64:4a:b2:e8:70:
                    0c:b3:12:cf:77:bb:2c:84:da:1a:48:61:6a:4b:db:
                    65:d8:93:06:c7:df:58:09:8c:47:0d:43:d7:00:30:
                    d6:46:ed:0c:b7:82:d9:a2:11:ed:9c:2b:ec:49:8e:
                    0e:88:43:10:29:36:04:8d:48:0a:eb:d0:38:23:68:
                    6b:dc:f2:c9:ab:ff:ab:7d:bc:63:4b:7f:4a:b3:5d:
                    05:8d:98:c8:29:7c:a4:cc:f0:9e:42:11:f2:ef:45:
                    b3:c2:b0:77:3e:0b:14:c9:2a:f8:21:10:b3:bd:66:
                    79:17:ba:0b:61:53:89:67:a5:2c:50:be:50:ca:51:
                    72:09:60:1e:54:c6:c9:d8:b9:5c:12:89:dc:62:2f:
                    36:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D1:59:2E:6F:24:A1:07:54:AE:61:10:AD:AA:EB:4A:3E:38:BF:F8
            X509v3 Authority Key Identifier:
                keyid:7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f8:34:6e:9e:84:7e:f5:4a:7f:53:d7:07:01:03:1e:55:4c:
         63:7a:60:02:5d:5c:17:d8:15:e6:09:49:b4:d9:d5:c0:77:33:
         48:21:79:84:f9:a9:aa:25:b2:e9:e2:53:b8:20:b3:50:10:e3:
         16:d5:31:1f:67:40:e3:01:45:66:41:7b:0f:33:1a:62:fc:b3:
         54:54:b1:aa:0a:e4:03:d7:5a:31:13:48:1b:0a:98:db:22:e1:
         54:9d:4e:16:3f:4e:5d:c8:08:65:da:63:dc:8b:f0:e7:56:47:
         11:49:a3:33:ee:03:4b:99:0a:10:f2:34:21:32:b2:08:e1:5c:
         a4:05:fc:00:b4:85:7d:6f:69:a6:5b:e9:99:5b:5b:4d:59:96:
         55:15:2c:5c:7b:76:13:62:e7:5d:8c:b2:9f:bc:4b:d9:e3:3e:
         e3:40:e6:ed:4f:14:a2:9f:dd:87:18:93:08:04:75:e5:02:64:
         bd:0e:c1:21:2b:dd:c7:6c:73:61:a0:1d:1d:97:a9:fd:b2:d3:
         94:d0:bd:8d:b6:67:68:cc:93:81:7c:61:c1:d1:8a:21:17:30:
         01:42:ea:35:cb:6e:77:bf:77:8b:c4:b2:ef:5a:42:c6:bb:21:
         dc:4d:06:93:01:b9:b9:74:12:30:ce:eb:6d:ff:28:dd:4f:8b:
         7b:96:29:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:55:41 2025 by rpki-client