Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
File:                     NyU16sFYwCZyeiXh6-Rtilyc-78.mft (raw, json)
Hash identifier:          HxHcVuxap93kzXYzSuYfS2j21VBsb2eenw2sBEKyRy8=
Subject key identifier:   EE:1D:E0:A7:66:81:53:87:76:EA:A6:35:D1:9A:9C:32:D3:71:B2:E8
Authority key identifier: 37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF
Certificate issuer:       /CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
Certificate serial:       0196BB9246465891BD479207BF0694FFBC92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
Manifest number:          1534
Signing time:             Sat 10 May 2025 19:00:47 +0000
Manifest this update:     Sat 10 May 2025 19:00:47 +0000
Manifest next update:     Sun 11 May 2025 19:00:47 +0000
Files and hashes:         1: Ex_2ickmNwSl468A43nBNWlR1U4.roa (hash: 2F6N+mLC+ZFSEAJYbcx9IRB+VD26lz+G1r697PEXjx4=)
                          2: NyU16sFYwCZyeiXh6-Rtilyc-78.crl (hash: IlTSHjb6OgW/cnN3JcU3oT3ooq4NXH5JAIr4WpZRbU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:92:46:46:58:91:bd:47:92:07:bf:06:94:ff:bc:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
        Validity
            Not Before: May 10 19:00:47 2025 GMT
            Not After : May 11 19:00:47 2025 GMT
        Subject: CN=ee1de0a76681538776eaa635d19a9c32d371b2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:30:9c:db:ae:13:0f:20:e7:de:4c:51:38:ad:
                    6f:b2:d3:2e:bc:77:da:9a:77:26:ce:8f:97:39:25:
                    b3:dd:6f:e3:50:7e:ef:be:f5:08:19:84:89:b3:75:
                    04:43:16:32:09:79:97:ac:1d:a8:94:2c:f6:2a:76:
                    99:bf:05:9c:8a:93:0f:5e:58:db:08:33:a0:76:69:
                    fd:49:b1:d7:6c:3b:44:60:3f:22:a3:0a:a7:8e:fa:
                    66:b1:76:02:58:37:8c:4c:9e:66:10:5c:c9:e0:43:
                    b9:a9:54:5e:c6:71:9f:6c:7a:27:a9:be:75:0d:f3:
                    3b:78:7a:a7:c1:fb:cc:af:b5:46:16:1d:f4:fb:ab:
                    08:4e:a3:03:da:5e:27:ac:76:74:b2:2e:4f:25:36:
                    d8:26:4c:a0:4b:be:f9:18:2c:d5:3f:d3:28:e4:67:
                    6b:ea:02:df:5d:cc:98:b6:73:9a:9c:af:8b:10:75:
                    40:05:95:a2:b3:4c:85:74:3f:c1:a7:a6:20:53:da:
                    b8:c9:b3:d1:6c:f1:62:73:6d:af:42:12:91:54:25:
                    e7:d8:72:2b:3d:e6:87:8a:56:c1:b1:64:ff:7a:0f:
                    34:09:ad:7c:5b:37:1b:04:b3:a4:1f:61:98:78:54:
                    03:1c:c7:a9:95:a2:4c:eb:f0:21:ca:29:88:f6:af:
                    e8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1D:E0:A7:66:81:53:87:76:EA:A6:35:D1:9A:9C:32:D3:71:B2:E8
            X509v3 Authority Key Identifier:
                keyid:37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:d0:f3:66:b2:19:9f:05:83:a1:bd:55:42:4b:7b:b2:f4:a7:
         49:e3:0b:3f:98:1f:d3:7a:74:c9:46:d4:d3:2e:5e:91:8c:74:
         9a:2e:c1:25:d2:60:05:ee:8b:60:8f:61:ce:02:1f:fd:7d:31:
         ec:94:6b:c5:dd:28:7c:7a:bb:d2:6f:cc:d1:e6:ab:d8:65:0f:
         a8:b0:c8:0c:ac:06:c2:b9:8e:bb:aa:7b:bb:72:ee:b9:b7:6a:
         fe:4d:0a:e4:a9:73:e9:d2:37:3c:42:29:3f:4a:c6:0c:4d:49:
         ab:b8:a6:74:78:fc:5e:59:d0:d2:3b:44:53:bc:dc:2f:2f:94:
         aa:70:80:20:c7:49:85:85:d6:58:e2:60:c5:b2:5a:2b:da:19:
         98:2c:6b:64:ef:83:de:0b:4b:53:c2:d9:2e:15:09:d1:3a:58:
         11:76:09:08:fb:63:f3:5f:fd:94:8c:7f:44:81:be:a6:91:fb:
         2e:96:20:ce:25:83:0c:b2:54:56:df:8e:eb:05:6f:c8:e8:c0:
         c6:7c:30:3c:a5:c2:38:7a:d9:ba:5c:06:2d:67:e4:7e:c8:a1:
         6d:23:4d:b4:57:50:01:b5:e8:bc:9b:80:45:6c:e0:c6:9f:9a:
         17:2a:af:2b:2a:59:e0:6d:22:d0:17:3a:d5:f3:94:9d:0a:5e:
         50:9d:00:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:25:14 2025 by rpki-client