Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
File:                     7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json)
Hash identifier:          TDgkb3t7qOVCBCWwTGx3LfxeRdCmPvp+ExS5MJApU2c=
Subject key identifier:   F6:3D:BA:29:44:3F:00:3C:45:55:A9:CF:10:4E:6A:F2:15:A8:D1:0A
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Certificate issuer:       /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial:       0196C94D909429276D9081AE01B7A205BF5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
Manifest number:          153F
Signing time:             Tue 13 May 2025 11:00:25 +0000
Manifest this update:     Tue 13 May 2025 11:00:25 +0000
Manifest next update:     Wed 14 May 2025 11:00:25 +0000
Files and hashes:         1: 1-feNHEHoxAVzT15DqDBKqpRnimc.roa (hash: 9Yua0Iw095Y35K0y20x+VN7YpOWR+p0yztD1WINH47c=)
                          2: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: nyzhqHQKTqWF9kp4X/0CB1pw1a+Tw2sG6WJ5kECqLz4=)
                          3: Nn-caKWqxDsYGYS4deITO9z5CII.roa (hash: SvP+0fiOTnKdkSN+scro3CcRKv0nhE96wmndJk4XP2E=)
                          4: gBTX6rtk3VmnZ3B2jpAIDYetIds.roa (hash: 9P8zTI1kLcc7GPpGKJR5mrODeo55W0eiIG9cnwU/wvE=)
                          5: kDyvOnLZQzeKWmaZeleSC7tsL8w.roa (hash: GbNFAnU0pItUjpzB6Y7UDRf6GIn6EyzF7Cux5iLe9bY=)
                          6: uH8W7wZaxW_HHCHl_MLip0UA6Og.roa (hash: VC5miMPD+f8MyskvN+/iLqKFYtg3R/WiLzahDu8sebs=)
                          7: w1Jkwc30Zm1-u5PRd54_RLWNBBE.roa (hash: b//DfWhivHZOy3olewCUbwfnWte1KqYiB/RE4sezwI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 11:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:4d:90:94:29:27:6d:90:81:ae:01:b7:a2:05:bf:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
        Validity
            Not Before: May 13 11:00:25 2025 GMT
            Not After : May 14 11:00:25 2025 GMT
        Subject: CN=f63dba29443f003c4555a9cf104e6af215a8d10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:67:f7:f5:81:1e:77:48:00:9f:63:53:32:96:
                    f6:19:dd:60:b1:78:9d:dd:8b:2d:b3:8b:29:38:df:
                    c4:4b:c9:99:3d:00:81:d0:37:e5:dc:54:eb:de:2e:
                    d0:8d:e7:ea:eb:87:82:d2:39:5c:7b:80:30:49:4e:
                    89:83:5b:32:1d:76:ad:c6:d7:8d:3d:4a:6e:18:3f:
                    d4:65:c5:f1:d5:88:5b:49:87:36:83:ea:58:c8:a3:
                    7e:36:f9:c1:49:e7:a4:28:48:e0:59:c5:7e:07:cc:
                    65:24:8d:b9:50:12:8c:b4:a1:6a:e6:6f:06:7e:0c:
                    d3:9f:e2:09:8f:1e:19:c0:21:ae:ce:05:af:1d:05:
                    e8:76:bb:af:6a:8b:ea:fe:5f:bc:e6:50:56:c3:9c:
                    63:ee:9b:26:36:9e:a7:02:42:d3:41:01:cf:cc:db:
                    bf:c8:7f:a1:36:3a:44:cb:c6:e4:e9:37:53:3d:5c:
                    95:6b:dd:e7:89:bc:c8:0b:09:43:2c:51:0d:ee:51:
                    47:1c:77:0d:0e:e3:c9:c8:77:b9:52:c3:64:ca:c0:
                    5b:04:f4:94:e7:92:e1:d6:e5:25:f6:3c:06:bd:9a:
                    5d:8e:6f:b7:1c:67:8a:d2:ca:d3:ed:c0:41:10:93:
                    fd:f3:53:99:00:14:3c:fa:d6:28:45:8f:b9:65:57:
                    a1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3D:BA:29:44:3F:00:3C:45:55:A9:CF:10:4E:6A:F2:15:A8:D1:0A
            X509v3 Authority Key Identifier:
                keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b6:76:29:8d:f1:f8:5b:25:e2:b9:58:3f:96:94:19:ed:4a:
         e9:8e:6f:20:f3:ff:60:90:5d:b6:2f:bf:fa:0b:e5:1b:82:1e:
         ed:24:e1:67:69:75:2a:1a:57:25:4a:dc:66:e1:0c:36:82:0f:
         22:c2:28:37:8d:c7:74:3e:28:ae:7e:4a:33:ca:db:1e:6d:4e:
         37:3f:02:4a:83:0b:fc:61:1c:50:2a:13:1c:4d:56:b4:39:bf:
         20:b4:38:af:14:50:e0:25:5e:2a:80:a3:b3:a4:e3:01:8f:ea:
         84:a9:15:9b:6d:cb:ac:95:0d:79:be:86:ef:23:46:e4:39:19:
         8c:d9:aa:3a:6e:fb:72:16:7d:b0:74:8d:23:1e:1c:64:6b:19:
         97:15:78:69:16:9a:f7:d6:c2:8a:81:50:11:35:52:b3:26:76:
         0f:dd:02:30:cf:29:80:2c:c8:1e:c0:a4:23:55:75:01:1d:08:
         84:f0:dc:8a:92:32:bd:bc:c7:57:65:e2:9d:a9:4d:ba:ec:02:
         b9:3d:e8:4d:e7:47:d4:f7:58:40:10:e7:ae:ec:b0:03:ae:44:
         cc:e4:68:5f:98:06:6c:0f:76:de:53:77:0b:1f:be:ab:be:e0:
         6d:b0:ba:7c:95:33:28:0e:4e:f2:8d:3f:0d:bc:fc:30:76:bc:
         2f:be:82:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:13:41 2025 by rpki-client