Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
File:                     8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json)
Hash identifier:          ydWeM0zrxEHQ8svg3NSh0pMcj2/7VBppKUgltCcwjCg=
Subject key identifier:   5C:15:9E:27:A1:08:B7:A1:F9:78:CC:BB:E2:40:8B:B3:F6:EC:9A:92
Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
Certificate issuer:       /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Certificate serial:       0196D02B53A9A2C62EAB7621B2D38FD80559
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
Manifest number:          153D
Signing time:             Wed 14 May 2025 19:00:22 +0000
Manifest this update:     Wed 14 May 2025 19:00:22 +0000
Manifest next update:     Thu 15 May 2025 19:00:22 +0000
Files and hashes:         1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: xSJCg+ZO/o8ndBTN+Hd6lc+q05tSgNiKUI04VWm4kaU=)
                          2: jfUqkf_BnbSeyvKiFitEY3b5cmY.roa (hash: MkQ1kYsqlZvezBQ/uBC4v1whC4HDYOAxUmlDZ4BgXWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 17:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d0:2b:53:a9:a2:c6:2e:ab:76:21:b2:d3:8f:d8:05:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
        Validity
            Not Before: May 14 19:00:22 2025 GMT
            Not After : May 15 19:00:22 2025 GMT
        Subject: CN=5c159e27a108b7a1f978ccbbe2408bb3f6ec9a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:43:b1:79:67:e6:85:2e:2d:2f:49:39:76:
                    76:a6:fa:39:8a:3e:b6:6b:d2:d3:d7:74:5f:ea:40:
                    01:0d:8e:67:b3:88:de:3e:de:ad:54:41:02:d7:92:
                    f6:cf:78:e6:9b:63:72:ef:5c:70:84:85:d0:17:7d:
                    71:33:86:b4:7f:cd:84:cb:c1:fe:45:23:17:e6:06:
                    29:48:3a:92:76:72:c9:d7:4e:97:fe:a6:c8:4e:06:
                    5e:d8:74:e6:92:06:59:61:2d:39:98:e6:ca:b9:95:
                    c7:74:e2:b0:01:1a:99:35:da:92:39:59:9f:58:d0:
                    61:9a:1c:34:a5:96:7b:ec:df:e6:ca:f5:bd:22:1c:
                    0c:81:7f:0c:66:48:81:5f:31:10:a3:85:f7:c0:61:
                    34:1c:0f:de:05:a0:56:c3:4e:22:a0:11:9a:49:fd:
                    2d:bc:35:38:56:b8:a0:6d:35:d5:01:b0:cd:f6:78:
                    84:22:c5:e0:95:43:16:96:b0:95:3f:77:3f:4c:3b:
                    38:a4:e0:4a:3c:8d:9e:71:06:6c:f8:55:b6:19:3e:
                    65:d8:bc:13:78:7a:38:6e:43:7e:09:0a:a2:7e:22:
                    7b:66:9c:bd:11:e5:cb:f0:8d:dc:e1:fa:dc:1d:4d:
                    47:c9:01:f1:81:da:26:0b:1d:5c:2d:80:f6:b3:0d:
                    35:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:15:9E:27:A1:08:B7:A1:F9:78:CC:BB:E2:40:8B:B3:F6:EC:9A:92
            X509v3 Authority Key Identifier:
                keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e1:c2:3f:cc:8d:fa:96:84:0e:48:f0:be:3f:d8:85:13:f8:
         34:f0:80:83:a8:93:05:12:84:e6:be:07:ea:36:75:e1:c5:da:
         46:da:1a:5c:8c:7d:2d:ae:7f:1b:f4:69:5f:f8:8a:b5:07:63:
         8f:f5:bc:6b:2c:0b:35:cc:86:37:72:65:b5:f0:8b:5b:9b:0b:
         20:55:d4:9b:d0:ca:34:01:e5:12:9e:ef:18:7b:64:ac:94:66:
         24:42:16:5a:04:30:2c:50:9d:33:f1:9e:41:6d:6c:c0:f8:59:
         98:54:12:ca:b1:d3:24:61:41:78:83:2a:e3:9a:6b:52:94:1b:
         f3:c9:a6:0b:43:73:4c:94:b4:bb:39:c9:85:f5:22:d1:ed:53:
         76:33:0f:53:f2:92:b5:56:7c:f7:2c:62:1c:a1:6d:70:d1:28:
         b9:2c:a8:17:52:9f:15:af:2d:31:8f:0f:6a:10:15:51:06:d7:
         63:78:68:32:bb:ac:18:3c:d9:65:cc:b6:0e:d1:07:b7:e6:b7:
         43:5a:71:f6:38:34:39:7d:54:ab:89:0e:50:47:e1:c1:0c:35:
         12:6a:4f:40:5e:ec:c1:ba:21:ae:fe:86:ab:06:25:60:24:23:
         78:ea:77:4a:5f:fc:77:9e:7e:24:89:96:6e:27:05:85:7d:f5:
         89:b2:01:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:38:18 2025 by rpki-client