Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
File:                     kNPlNxtkq5QtbcugSt_yrnq3xxI.mft (raw, json)
Hash identifier:          LNVwAHq09QXbCSaAC2Jo94co2rQcoJyF7w2u2xLr3/Q=
Subject key identifier:   E7:A0:62:7B:A9:C3:77:8E:B6:02:28:92:E7:9A:8E:3D:25:8C:C1:55
Authority key identifier: 90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
Certificate issuer:       /CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
Certificate serial:       0196A6544DB28189F566DA2AA9811F347624
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
Manifest number:          1527
Signing time:             Tue 06 May 2025 16:01:04 +0000
Manifest this update:     Tue 06 May 2025 16:01:04 +0000
Manifest next update:     Wed 07 May 2025 16:01:04 +0000
Files and hashes:         1: 8qr5TNtGc99EM-QMiEzlHX-eukY.roa (hash: dcTHPs/n6VDmLIgcktF37rlPg3cwpYptx2bPoNDPRlM=)
                          2: kNPlNxtkq5QtbcugSt_yrnq3xxI.crl (hash: bPBoXBtaRIX/nQwVev1Y6pIlYd5/MfABl27lFolLM50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 16:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:54:4d:b2:81:89:f5:66:da:2a:a9:81:1f:34:76:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
        Validity
            Not Before: May  6 16:01:04 2025 GMT
            Not After : May  7 16:01:04 2025 GMT
        Subject: CN=e7a0627ba9c3778eb6022892e79a8e3d258cc155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ae:e4:1f:29:89:ec:f2:e1:4b:d2:c4:7b:4d:
                    07:40:70:9b:38:92:94:68:69:49:14:ee:92:f8:f2:
                    70:79:70:8e:01:8e:03:ba:1d:0c:a1:a7:3f:92:48:
                    18:a9:25:54:31:8e:87:13:0e:c9:80:57:a7:85:34:
                    b3:ac:22:b8:db:e0:a0:95:a3:de:ea:dc:8e:5d:ab:
                    6b:2a:b3:c3:9d:c2:56:94:d0:69:c1:df:8f:f5:f2:
                    f4:6c:4f:31:f5:6d:83:3c:17:fc:7d:82:71:84:d9:
                    41:fa:cb:f1:04:39:b7:7b:58:da:f4:ab:43:fb:d0:
                    17:a9:67:ba:39:50:e9:b4:55:a1:b6:cf:7c:70:eb:
                    af:57:28:49:d8:9f:94:33:b8:3b:0f:ce:94:ba:a3:
                    ce:e5:18:94:97:79:7e:c0:65:df:48:a7:ee:6d:3b:
                    8f:15:8f:bf:a9:51:6c:6d:4e:d8:20:59:90:c9:05:
                    09:0c:80:ad:e0:08:5f:eb:f0:81:dc:2e:d7:ca:67:
                    f0:c1:fd:18:87:a0:1f:59:b5:40:dc:9a:4d:a5:6d:
                    fb:ba:c8:3d:fa:85:52:6a:59:fc:98:68:e1:44:06:
                    0a:28:c9:85:45:6a:af:4d:8e:82:35:1f:4e:dd:3e:
                    49:93:6c:4f:6f:88:e5:5d:97:3d:46:a3:3e:5d:0e:
                    a6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A0:62:7B:A9:C3:77:8E:B6:02:28:92:E7:9A:8E:3D:25:8C:C1:55
            X509v3 Authority Key Identifier:
                keyid:90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1d:8f:6c:28:10:e6:c8:41:e3:2f:70:38:22:24:5e:37:5e:
         fe:d7:f9:35:ab:70:13:fc:44:b3:32:07:f1:ef:fe:87:df:02:
         d1:40:7c:d2:9d:28:3b:ee:e3:9e:02:0d:b5:79:aa:f2:03:f8:
         ee:c2:be:f2:4b:5e:7b:0f:87:f2:db:d2:f7:11:d6:23:e0:c6:
         c3:c0:5a:c6:43:85:ec:41:a9:25:7f:f5:3e:dd:6a:27:50:e7:
         e1:f6:6f:e7:9d:4c:98:b1:5f:e6:85:85:c5:b1:ff:b7:d4:ed:
         ce:56:bc:b6:32:75:3a:44:ed:bb:43:f7:b4:3c:35:7b:71:dd:
         12:ee:a4:02:a7:4e:3d:63:89:cd:8e:ac:7d:01:99:3d:80:d9:
         f1:63:3f:85:aa:41:5d:c3:79:40:a6:6e:bd:15:3c:5d:dc:70:
         0a:59:93:86:7d:e5:6d:c4:31:57:ee:59:43:53:12:a4:ea:e6:
         88:a8:b4:5c:2e:bc:13:02:f2:34:5e:f8:f2:33:78:c7:a2:cf:
         a1:3b:0c:34:d6:c5:04:52:14:eb:4c:22:de:a4:9a:19:c4:1b:
         d1:8c:e0:8d:2e:31:30:89:83:a3:47:84:1e:0e:0c:56:0c:a2:
         21:dc:1b:06:7c:1c:59:1d:72:12:81:7a:74:ce:fd:a1:42:17:
         d8:3a:9d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:39:32 2025 by rpki-client