Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
File:                     aDg_-p8gvwIcCQJimUIS1xZn7QI.mft (raw, json)
Hash identifier:          3Z9k/QK3X/gddiqwJZrvxeLteQ3VXzW2zqdy6OQ3pJo=
Subject key identifier:   E0:9D:04:1E:B6:8E:39:1E:69:DC:64:77:C0:14:3B:4C:E9:1B:DA:A4
Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
Certificate issuer:       /CN=68383ffa9f20bf021c090262994212d71667ed02
Certificate serial:       0196C570A67C54F63385979951B1DBC777CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
Manifest number:          153A
Signing time:             Mon 12 May 2025 17:00:16 +0000
Manifest this update:     Mon 12 May 2025 17:00:16 +0000
Manifest next update:     Tue 13 May 2025 17:00:16 +0000
Files and hashes:         1: aDg_-p8gvwIcCQJimUIS1xZn7QI.crl (hash: f0eRcdKdr8v8HuA8EHO7Z0/Kmylwe/s0TcE37UHfX3A=)
                          2: au3QsLFo03d8LYUAjCFPkrVh1G4.roa (hash: isOlLFXxz/6TcM6N4LdFi3q+A0FHjScvgWUQkggZJpo=)
                          3: bqsYblKj7hcMS1s1tPb3Q-dO_OY.roa (hash: C6NQjixTOIceoGsxhMeDSn6DTrvOtIxF3QPKT2AqmUU=)
                          4: fZN-mJc8fZOK-6XrfXacVqv1tuE.roa (hash: dKX6X2ROArIQd/pMehz+1TmwgekylLZCGEI0q4Su81U=)
                          5: qT9a3yWCoydql47MfRG9zQlfRRU.roa (hash: sztKYcCFWM27FMQp6a+1b3A1caK/AF/jWPueCOzMPvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:70:a6:7c:54:f6:33:85:97:99:51:b1:db:c7:77:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02
        Validity
            Not Before: May 12 17:00:16 2025 GMT
            Not After : May 13 17:00:16 2025 GMT
        Subject: CN=e09d041eb68e391e69dc6477c0143b4ce91bdaa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:53:b0:6e:5a:3a:f3:d7:9a:f0:3b:2f:89:43:
                    d0:b2:75:3c:42:95:3b:03:36:89:a5:5d:77:3b:89:
                    9c:f0:62:6e:c9:2e:74:6c:d1:3d:02:36:e4:88:29:
                    cf:8a:1a:d1:6c:81:fa:4f:8c:3d:ad:ed:ec:5d:66:
                    c8:c3:d7:b8:fa:eb:85:60:72:9b:6e:27:0d:b7:a3:
                    79:eb:02:fa:7a:0b:1d:15:5e:e3:18:e9:6d:19:c5:
                    e8:e3:81:65:3f:54:63:32:73:3a:26:2c:97:6b:9d:
                    6b:b0:37:eb:1a:bf:2f:47:6b:0c:63:a3:10:66:87:
                    40:21:a2:cd:1c:2c:66:ee:9d:05:6d:20:5e:06:be:
                    0c:97:08:a1:24:4a:81:97:c0:5b:9a:b5:37:b1:d6:
                    e9:97:fd:0e:d0:af:af:ee:89:6b:e8:35:b1:b6:80:
                    66:0c:3e:23:bb:5f:11:74:04:ca:62:08:ab:87:93:
                    1f:5e:dd:9a:cc:42:a2:57:11:06:1b:c3:72:d2:18:
                    4b:b0:17:9d:89:f2:2f:e6:1f:dc:2b:0b:cc:00:77:
                    d7:17:3b:9d:a1:41:c2:e8:0d:29:53:eb:1a:56:81:
                    d5:a1:4e:8b:b9:1d:bb:8f:ca:3b:b7:ac:66:de:4b:
                    77:29:a8:ee:81:23:ef:20:c3:a6:53:7f:12:6f:b3:
                    41:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9D:04:1E:B6:8E:39:1E:69:DC:64:77:C0:14:3B:4C:E9:1B:DA:A4
            X509v3 Authority Key Identifier:
                keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:1e:6f:da:c8:d3:8e:14:e4:13:69:be:6a:b1:39:59:80:d4:
         99:12:43:9b:2d:0b:37:bf:d5:fb:1b:ce:d0:a1:98:32:58:50:
         49:5a:c9:b8:6c:e0:1f:e3:bf:09:6a:77:35:2c:c8:96:45:75:
         1f:0a:c5:ab:41:7a:6e:6b:27:a3:76:4b:a0:2c:cd:13:a0:c2:
         d0:5a:1b:07:f6:7a:f4:88:74:ed:eb:b6:63:98:c5:be:59:b6:
         2b:73:0c:52:8a:ae:18:a8:a5:61:50:a3:92:b9:5a:4d:be:0f:
         c6:4e:1c:ee:20:2d:d9:9f:d0:e7:15:e9:19:b4:f0:8c:a6:d1:
         1f:23:e4:fb:e1:1b:a3:4b:27:29:c0:d5:8c:0e:c8:44:95:45:
         d1:0e:6d:2c:34:dd:70:e0:80:91:9a:d9:68:7b:21:30:71:97:
         ec:d1:fd:2f:19:51:49:8e:d4:ed:66:3c:7a:4c:e2:56:ac:6a:
         5b:64:75:89:05:53:1c:98:e1:5a:06:07:16:ab:a8:e1:bd:33:
         ee:4d:c3:ba:58:f5:5c:d8:24:9e:f2:74:f2:29:87:06:31:13:
         b9:0c:b8:d3:0e:0e:d8:01:fe:8a:23:4e:5e:1b:6d:7c:50:bb:
         69:ce:0b:ee:45:88:6f:52:03:b9:cf:e7:96:96:0a:6c:d2:8e:
         d4:54:2a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:10:16 2025 by rpki-client