Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
File:                     FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft (raw, json)
Hash identifier:          ocZf7doJZ6ZoS0MqHkh66GjcF1TrraYihtlFdid/mNo=
Subject key identifier:   91:AF:B8:0F:54:8C:2C:BD:EC:78:8D:2E:BA:19:5C:E6:69:4D:71:F1
Authority key identifier: 15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C
Certificate issuer:       /CN=153d757b77067befd9446694748ad2b04e97b38c
Certificate serial:       0196A2E54CE144A3244FBCF32190F70355A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
Manifest number:          1528
Signing time:             Tue 06 May 2025 00:00:58 +0000
Manifest this update:     Tue 06 May 2025 00:00:58 +0000
Manifest next update:     Wed 07 May 2025 00:00:58 +0000
Files and hashes:         1: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl (hash: vlFTkbq652UXlKEPjPRomhoQ+FiinLwEXMeK6RC1wuA=)
                          2: r7lFXPa807MfacPLjTifqcio5eE.roa (hash: uWVAVnCuqwCuf5rQTJ4k2G3R8ObiUvivLPLiht6CJGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:e5:4c:e1:44:a3:24:4f:bc:f3:21:90:f7:03:55:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153d757b77067befd9446694748ad2b04e97b38c
        Validity
            Not Before: May  6 00:00:58 2025 GMT
            Not After : May  7 00:00:58 2025 GMT
        Subject: CN=91afb80f548c2cbdec788d2eba195ce6694d71f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0b:b3:9c:c6:50:59:aa:15:f0:16:e2:b2:03:
                    86:0f:71:65:71:ad:71:31:e2:d6:03:66:64:fa:9e:
                    1f:f6:76:56:c2:d2:f9:a4:29:f6:2f:0c:4b:ff:a0:
                    db:7e:ce:6c:41:82:22:a5:a5:6c:c4:c0:3b:74:05:
                    fe:e2:7c:b0:75:7f:9e:fc:2d:bf:9e:21:45:30:41:
                    49:08:b5:9a:ed:ed:70:e2:ba:9f:60:a6:3f:52:2d:
                    ad:da:f1:ed:75:c6:01:e9:d7:56:f4:80:9b:43:9a:
                    1b:6a:9f:be:65:56:6f:7c:aa:5f:e8:ce:dc:97:f4:
                    ef:5c:50:3a:b9:3a:9d:dd:f1:6c:3f:ec:d9:24:5c:
                    c2:64:26:5a:46:22:e5:e2:b2:b7:fe:dc:dc:2d:7d:
                    16:eb:75:49:ac:48:c1:67:cf:b0:1b:9a:3f:02:ba:
                    cc:83:a4:54:0d:7c:df:7f:4b:5f:f0:db:f8:51:f6:
                    99:5e:9c:92:c9:c3:f5:5c:4a:f7:1d:ef:71:47:28:
                    d4:b0:db:77:0f:b2:ff:a2:06:15:d2:11:1b:ac:a3:
                    2f:77:14:8a:80:8e:ec:c1:26:56:8a:a2:11:c4:bb:
                    15:09:f0:c0:b8:85:4b:35:cb:89:8b:b6:d5:da:0a:
                    8b:f0:df:5c:de:61:2b:c3:09:94:c9:b6:e6:cc:f6:
                    de:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AF:B8:0F:54:8C:2C:BD:EC:78:8D:2E:BA:19:5C:E6:69:4D:71:F1
            X509v3 Authority Key Identifier:
                keyid:15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b6:2e:9d:1c:4b:29:c6:98:19:de:f9:07:fd:96:64:b4:11:
         da:e5:4a:48:6d:92:8d:25:51:af:3e:a5:e5:65:31:f0:d5:9e:
         ff:54:2d:8a:55:aa:48:85:57:e9:2d:c2:45:36:6f:60:ad:b3:
         db:ab:a4:a3:e9:1f:45:c8:31:99:4a:f3:a3:85:a4:f0:09:b8:
         37:2a:15:12:96:b4:51:ba:36:0f:f8:23:07:a4:2b:40:16:4f:
         e0:86:7a:9b:ec:a8:14:ca:fa:e8:91:a7:3d:ca:66:a4:e7:90:
         d9:d3:6d:e7:ec:7d:b6:0c:d4:e7:05:bf:7d:8a:e0:54:dc:3f:
         08:b4:4f:7d:d2:b5:8f:8c:25:68:58:88:bf:3e:94:c6:36:35:
         fa:8e:52:cb:ec:28:e7:3f:3d:b1:d4:39:58:9b:b8:12:48:a5:
         e5:4f:6b:ae:ec:8e:e0:17:ae:28:58:e2:85:52:a6:e3:75:32:
         64:53:4c:5f:95:6a:42:6b:e4:e3:a0:41:24:33:5b:02:47:0b:
         fa:cb:0d:ac:63:d6:61:f2:54:ea:f3:1b:eb:77:56:47:1d:4f:
         9f:f7:8d:6e:13:04:6c:c5:54:f4:04:28:33:46:c8:fa:2f:37:
         07:af:1c:34:68:1a:4e:29:04:28:0f:c1:c3:18:85:e9:7b:ab:
         5d:24:88:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:20:25 2025 by rpki-client