Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
File:                     25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json)
Hash identifier:          e3ow34AiicRL20xF7igq3B2GbRsko0w0VRF7lVRQf9k=
Subject key identifier:   E7:35:83:47:A6:B0:62:CE:CD:F3:6E:8B:3B:08:DE:C0:04:FD:C9:EA
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Certificate issuer:       /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial:       0196A84328AA992DC5AE763EB2BFC0267574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
Manifest number:          152D
Signing time:             Wed 07 May 2025 01:01:35 +0000
Manifest this update:     Wed 07 May 2025 01:01:35 +0000
Manifest next update:     Thu 08 May 2025 01:01:35 +0000
Files and hashes:         1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: XCPqEBOJiD/ytSCEmfNXTEmdIk8vZ4/a55LQGDgmwZE=)
                          2: N4n5sfqwVKR0MtRKu60VkuVT8t8.roa (hash: 7oA83Z9SKqiyh1q+LTyv1yKzsMJNh3uvhrwtOfQSMtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a8:43:28:aa:99:2d:c5:ae:76:3e:b2:bf:c0:26:75:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
        Validity
            Not Before: May  7 01:01:35 2025 GMT
            Not After : May  8 01:01:35 2025 GMT
        Subject: CN=e7358347a6b062cecdf36e8b3b08dec004fdc9ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8a:52:6a:55:0b:1a:db:08:23:22:7d:73:11:
                    b2:a6:92:df:ed:5b:6b:59:c4:7b:8b:07:dd:26:4d:
                    01:ee:2a:0d:70:16:67:0d:a7:a1:cd:c0:3c:13:67:
                    f8:3c:cd:92:74:bc:c6:20:22:9f:03:4f:37:d0:7d:
                    0e:c5:90:98:94:29:27:5c:06:b6:15:71:84:45:03:
                    48:47:b4:39:9c:76:fa:9e:8c:b2:3d:45:ee:fc:bf:
                    c8:04:dd:6f:d6:2e:6c:fd:8f:1c:f5:db:36:55:3e:
                    bd:f7:71:b8:02:03:7b:cd:37:fb:a6:12:ec:72:26:
                    ef:3f:52:b6:12:5a:e2:a1:50:66:e1:51:30:e6:71:
                    a1:9d:97:8e:93:d9:b6:60:e5:26:b9:d5:ab:74:8a:
                    dd:e6:70:c1:20:f4:56:0d:b5:5f:d5:59:fc:33:c5:
                    40:c5:99:1a:10:d2:3f:14:c8:1d:67:78:09:97:69:
                    f1:c9:c6:ce:8d:7e:f4:ae:d4:e6:34:eb:a2:20:5b:
                    61:af:16:3a:ad:22:b9:4e:27:f4:d9:44:df:33:6e:
                    0c:93:83:5f:26:17:84:6b:2d:3c:cf:c9:49:62:a7:
                    ba:13:1e:c2:ad:a3:ff:25:6e:df:9a:e2:d1:3f:94:
                    61:a8:bd:ab:f3:e1:a1:99:e4:e4:94:ca:44:74:a3:
                    43:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:35:83:47:A6:B0:62:CE:CD:F3:6E:8B:3B:08:DE:C0:04:FD:C9:EA
            X509v3 Authority Key Identifier:
                keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:8a:ac:65:d6:2d:39:9e:64:9f:16:8a:a0:f5:c9:28:15:91:
         f8:a7:89:bb:23:87:8f:07:e2:c3:eb:2b:7d:02:0f:4b:e0:b0:
         b7:83:81:a6:f5:6d:73:97:73:9c:91:5e:d6:5f:0a:1c:72:6b:
         3a:75:cc:98:8a:90:7f:3e:1d:32:7e:1b:3d:ee:18:c2:cc:9b:
         5a:4a:aa:8d:9f:01:9d:e1:74:72:43:84:a1:10:8c:88:d1:ec:
         18:7f:f6:e8:48:fb:84:6f:9c:ef:60:89:48:a6:51:74:5b:37:
         0b:31:b3:bb:34:85:1c:5b:59:54:d3:2a:ff:ca:8c:1c:5a:19:
         8b:25:62:12:6e:f1:d2:54:90:e2:2d:25:a2:74:25:a7:ab:dc:
         7c:41:97:b8:74:d3:2d:2b:c2:cf:43:7e:c4:07:80:b0:27:d1:
         3d:75:b0:63:7c:01:fe:a7:fe:a0:f3:0b:14:4a:98:a9:9b:20:
         8b:16:1a:b3:64:71:c0:8e:87:69:17:cc:d1:bf:79:ab:27:ef:
         1b:0a:e3:66:fb:a7:26:ae:f7:1b:02:4a:82:59:9f:df:5d:25:
         36:7b:a2:c0:72:15:ac:7e:4c:ed:29:bc:9a:8a:6e:a9:8d:1e:
         a9:94:67:85:6f:54:71:1c:1f:e7:d1:ba:14:f8:a0:b7:3c:7f:
         8e:e8:d9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:21:53 2025 by rpki-client