Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
File:                     y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft (raw, json)
Hash identifier:          jWOIFv7f9FyzBKufHbmu87yvibRaaGnkkBYVUprTec4=
Subject key identifier:   43:5B:4C:9D:07:E6:AD:FA:E5:9D:7F:69:B7:E0:57:43:C7:97:16:0C
Authority key identifier: CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
Certificate issuer:       /CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Certificate serial:       0196B822EEC2AD29D30FCD18447019A9C71D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
Manifest number:          1531
Signing time:             Sat 10 May 2025 03:00:19 +0000
Manifest this update:     Sat 10 May 2025 03:00:19 +0000
Manifest next update:     Sun 11 May 2025 03:00:19 +0000
Files and hashes:         1: A7rB6GvieHic3egdiMZfNGfq2m0.roa (hash: HS3mNdYCRI3MKIsdLKnGS/MBr6fXeWlgGEcIpC1Xugc=)
                          2: y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl (hash: b+3jCYS3gZyjjRUgGgTzaaHaE6QHujW7Tl+JNdkljVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 03:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:22:ee:c2:ad:29:d3:0f:cd:18:44:70:19:a9:c7:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb4fba09190b76849fff3d26d580790e54fac2e3
        Validity
            Not Before: May 10 03:00:19 2025 GMT
            Not After : May 11 03:00:19 2025 GMT
        Subject: CN=435b4c9d07e6adfae59d7f69b7e05743c797160c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:19:64:2f:f4:34:7c:cc:e3:2d:42:d5:3b:5a:
                    7b:c0:28:c3:2e:b1:ac:e1:4e:7d:e0:3c:62:3b:78:
                    dc:da:6e:e1:ce:26:25:c5:d2:d1:e5:44:43:8c:73:
                    e9:bf:cb:5f:31:49:04:f4:f2:f2:50:b7:65:1d:48:
                    24:82:08:d2:65:66:b8:26:68:fc:f4:55:c9:4e:05:
                    e4:c2:42:31:02:92:99:71:38:53:cc:f0:39:63:f7:
                    47:10:00:9d:4d:82:93:cf:6f:5f:04:13:cb:d2:44:
                    7c:e9:5a:cb:cd:39:49:19:70:64:97:68:b4:ba:a0:
                    27:72:53:f2:61:24:d7:91:6c:34:96:46:57:96:93:
                    7f:d6:06:bf:07:de:07:ce:db:51:2e:c7:17:fc:08:
                    c2:d9:bb:90:03:f7:30:71:1c:a0:67:eb:40:cc:5e:
                    f2:bc:01:ad:3f:ef:a0:86:fd:31:e2:c1:bc:7a:87:
                    a9:61:40:1a:ba:b6:cd:fc:92:d4:4d:ea:47:b3:d1:
                    4f:f1:8e:37:8c:01:47:61:97:86:5c:8c:1d:da:6e:
                    96:05:13:8a:68:fa:85:47:a5:ef:2b:f6:37:33:d7:
                    28:a3:44:da:42:b4:51:f4:92:ca:18:40:70:8f:94:
                    e3:77:0d:55:37:cc:bf:1b:03:66:14:ce:08:4a:8a:
                    99:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5B:4C:9D:07:E6:AD:FA:E5:9D:7F:69:B7:E0:57:43:C7:97:16:0C
            X509v3 Authority Key Identifier:
                keyid:CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:41:66:c5:2b:51:5e:88:e1:bc:7d:3b:6c:1f:a9:59:a0:33:
         be:21:97:87:a7:6f:d7:a5:22:a8:16:56:c3:4b:84:8f:23:d3:
         ca:87:13:7a:ca:e2:0b:10:cf:44:d0:40:36:89:49:1d:9f:8f:
         2e:87:25:f9:8a:bd:f7:e4:d0:e0:94:e7:37:b5:fb:24:60:aa:
         ff:93:1e:32:fc:e0:2a:d8:18:f3:65:95:2d:17:c9:84:1f:7c:
         d9:0a:d2:04:37:e4:a8:a1:8f:91:9e:1a:95:96:df:5e:8e:6f:
         b9:5d:b7:6b:38:e7:17:cb:24:d5:d6:d7:81:78:66:c7:28:66:
         eb:1d:0d:31:bf:55:73:09:d8:33:e9:ab:88:70:5c:af:3b:4d:
         f4:97:7a:5a:75:34:f9:ba:2e:ec:21:e5:4d:71:cd:45:f5:23:
         6f:a9:8f:8d:c7:02:1a:97:f0:fd:52:d5:45:aa:3b:ce:7f:91:
         d7:be:29:38:b5:59:2e:44:d1:0c:72:00:07:fc:b7:c2:e4:56:
         78:38:78:26:c6:01:62:fd:e7:01:31:9f:7a:f6:dc:51:6d:af:
         c6:70:f7:4f:46:70:1f:8c:8a:0f:5a:4b:69:b7:27:f6:46:04:
         92:41:ae:b9:cc:84:bc:58:3a:5e:1f:fa:9a:2c:47:9f:4f:77:
         32:6a:42:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:16:00 2025 by rpki-client