Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
File:                     A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft (raw, json)
Hash identifier:          3oVnC4Wrsg8s/360vtBfhE7nI72zK+BqHpoOD26ce2U=
Subject key identifier:   ED:1E:B9:61:D3:AD:11:BB:87:41:79:77:87:11:2B:A7:11:11:B5:78
Authority key identifier: 03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
Certificate issuer:       /CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Certificate serial:       0196D1756BCAFAA2D8D3F43F47ECA277AFF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
Manifest number:          1143
Signing time:             Thu 15 May 2025 01:00:55 +0000
Manifest this update:     Thu 15 May 2025 01:00:55 +0000
Manifest next update:     Fri 16 May 2025 01:00:55 +0000
Files and hashes:         1: A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl (hash: lKJofC94qEb2lwK0ec+EOFa6WsrVyOhPliwrhS08vho=)
                          2: nMVNf2lQw6OBO1n2yk42KKveQrw.roa (hash: wyqNzIcUGswTCmLW0W5XZCdk6EXaGRyb1txoc0qPRcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d1:75:6b:ca:fa:a2:d8:d3:f4:3f:47:ec:a2:77:af:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
        Validity
            Not Before: May 15 01:00:55 2025 GMT
            Not After : May 16 01:00:55 2025 GMT
        Subject: CN=ed1eb961d3ad11bb8741797787112ba71111b578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:88:47:e3:0d:4b:b6:7b:5e:7c:46:55:d0:46:
                    e7:3a:92:90:36:62:cd:01:00:a8:a0:f9:c2:2a:cc:
                    2d:6f:6b:c9:ac:01:b4:d5:11:5f:2a:b2:a7:54:3e:
                    d1:81:45:93:1c:e6:b5:a0:10:b2:d7:15:77:f6:4b:
                    05:60:cd:88:a1:35:43:f9:51:cd:a4:48:71:e7:ff:
                    3c:fa:e3:78:07:a9:27:83:e2:36:70:fa:de:f4:6c:
                    26:78:f7:3e:b0:60:79:0a:a2:58:1c:38:82:b8:41:
                    84:e0:06:db:99:e3:b5:8e:52:56:7f:8c:95:70:a3:
                    45:9a:66:2a:24:07:9e:20:5e:e7:6b:db:b1:16:a7:
                    30:00:75:e8:8b:e5:6f:7c:b3:52:62:82:5d:ec:76:
                    b7:06:4d:93:7d:ab:b1:68:94:97:0f:01:ab:59:25:
                    b7:e3:a6:00:86:c2:d2:94:12:22:b7:88:92:4d:18:
                    ac:d8:14:5e:13:56:c8:f0:d6:36:2f:2f:84:0b:c0:
                    c1:c4:03:8a:03:36:e5:84:f1:49:5b:42:d3:45:cb:
                    5b:bd:4f:fb:2f:52:a2:41:aa:33:7c:a9:2b:56:d6:
                    f3:be:61:b2:1f:0d:f3:5e:ff:9c:8a:46:59:ac:ef:
                    0a:26:b1:75:d4:16:f6:a8:9f:2f:16:97:6f:44:64:
                    1b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1E:B9:61:D3:AD:11:BB:87:41:79:77:87:11:2B:A7:11:11:B5:78
            X509v3 Authority Key Identifier:
                keyid:03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:92:e7:48:1b:b9:91:0a:e3:b3:cb:a9:20:2b:e6:ab:85:41:
         06:3e:c3:87:56:b4:cb:27:51:39:7f:23:4b:5e:77:31:3a:54:
         36:6e:49:03:b4:c4:08:72:a9:8f:f9:cb:5e:a0:71:c0:30:84:
         c0:d2:99:dd:b2:32:28:31:1a:ba:34:a9:4a:83:d8:05:13:59:
         a1:8f:58:80:7b:56:ce:d0:d2:bf:3a:d5:54:4b:b5:c2:2d:72:
         ae:f5:ab:85:c3:96:69:08:3e:9e:34:b7:b2:07:0c:b0:33:ab:
         38:bf:ae:25:d1:d7:90:2d:5f:a3:d6:0e:e7:2f:96:68:b3:ac:
         61:e5:5e:b1:bb:66:37:41:8c:bc:72:4a:dd:92:86:c4:66:55:
         1f:de:6a:a2:80:d2:e4:73:2f:48:2c:47:fd:1d:89:bf:48:21:
         b8:bd:57:96:3a:34:73:ea:77:ba:c7:ac:03:7d:0a:bb:07:b6:
         59:78:24:83:db:d5:a0:5a:29:12:de:c3:13:6d:fc:e1:e2:be:
         26:a8:56:2d:f6:ec:5c:b5:eb:c7:ae:a6:89:75:11:74:71:4c:
         dc:2a:c4:20:1b:72:8d:50:0f:89:5a:56:72:90:71:80:19:ba:
         02:63:63:7a:7c:2e:4e:a7:4b:3a:dd:1f:ce:fd:78:d3:fc:f8:
         b0:ce:49:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:56:23 2025 by rpki-client