Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
File:                     U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft (raw, json)
Hash identifier:          cnFvUZk3wIPSWCGZPn/MC1xfBvuQDz5pYM5RtJHSziA=
Subject key identifier:   72:79:90:A1:DE:70:B1:69:68:C4:EC:76:AC:6B:E9:DB:6A:D9:9E:AF
Authority key identifier: 53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
Certificate issuer:       /CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Certificate serial:       0196A7D4717E1B1DF956F924A830BC292E52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
Manifest number:          1511
Signing time:             Tue 06 May 2025 23:00:39 +0000
Manifest this update:     Tue 06 May 2025 23:00:39 +0000
Manifest next update:     Wed 07 May 2025 23:00:39 +0000
Files and hashes:         1: SIEblnDTmxDkNQuR8GrQyNScjq8.roa (hash: 994/huZNdlRSyw8MDRW+EKE0ylyI66j7DW5sNtIspOA=)
                          2: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl (hash: Lx1Fm9b7cOcSEW+o8lpxxyyhPgw9hQJPB0eiV+76UXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:d4:71:7e:1b:1d:f9:56:f9:24:a8:30:bc:29:2e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
        Validity
            Not Before: May  6 23:00:39 2025 GMT
            Not After : May  7 23:00:39 2025 GMT
        Subject: CN=727990a1de70b16968c4ec76ac6be9db6ad99eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:6d:72:60:9b:06:d0:88:e0:d9:f1:31:84:
                    e6:e7:fe:5e:fd:01:f2:1d:24:2a:31:a7:95:b8:c6:
                    51:fb:10:77:ff:b7:c9:5f:ee:e0:c7:bc:65:e2:34:
                    43:f0:55:54:13:87:52:9d:34:91:ae:c6:e6:56:5a:
                    52:df:cf:d7:bd:6b:a1:c9:4f:8b:43:1b:83:b7:7e:
                    42:4e:c5:7e:83:0a:40:0c:51:34:54:ff:bc:79:86:
                    64:dc:47:4e:69:07:33:a0:a0:30:92:91:93:9e:42:
                    22:2a:12:fa:75:41:f9:aa:85:c7:f7:ca:c1:5d:9e:
                    38:90:c1:50:ad:e1:40:98:3b:0a:e8:de:91:8c:01:
                    b4:38:f6:34:f6:74:3a:2a:9b:c2:b5:7d:ee:bf:a6:
                    80:fa:ed:c1:7d:43:6f:d5:da:65:13:9e:1f:40:60:
                    3a:a1:5f:16:1f:b3:ab:0b:6b:60:b1:83:f0:62:fb:
                    b3:1b:a9:0d:50:55:c5:80:82:94:fe:dc:2c:ec:e3:
                    f9:2e:12:78:0e:95:a5:f8:aa:41:10:f9:69:2a:37:
                    16:4f:9d:4e:60:b7:d1:f4:8e:75:e8:a8:2b:5d:18:
                    9e:62:14:cf:c2:0a:26:25:70:3b:94:97:1e:69:ab:
                    e1:eb:71:0f:16:80:41:16:a0:76:0a:9d:4f:a6:2f:
                    88:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:79:90:A1:DE:70:B1:69:68:C4:EC:76:AC:6B:E9:DB:6A:D9:9E:AF
            X509v3 Authority Key Identifier:
                keyid:53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:ef:15:51:2c:25:ab:4b:b0:f9:af:1d:cf:6a:4f:24:2a:6e:
         64:5a:7c:19:08:da:f9:09:57:41:7d:5d:7d:cb:87:97:46:6e:
         aa:4f:56:64:2b:57:68:36:0a:7d:be:b3:23:9e:9a:fa:c0:41:
         2f:7b:a6:c1:2f:72:3b:a1:c1:91:e8:40:7f:a3:f3:86:88:10:
         ba:e9:dc:61:11:06:db:94:1b:8d:ef:bc:1c:03:23:9f:55:20:
         73:fd:38:2b:f5:f0:e6:58:6e:e4:48:62:79:65:5e:53:03:ac:
         b1:55:8f:18:5a:98:27:6a:12:e8:23:29:e0:85:e8:c6:cf:67:
         5f:5b:67:c9:7a:a7:da:9b:d2:54:1d:82:e0:ab:3e:da:b8:d2:
         66:fd:ad:a5:70:18:4d:15:6d:a8:71:5c:80:c2:2e:02:9f:48:
         f5:dd:5b:4c:52:f4:3d:1c:77:47:a6:6d:fb:df:ea:54:42:7e:
         e3:6c:be:cd:ce:af:b5:0a:df:fd:ce:d8:ec:4f:69:16:c5:ba:
         7d:00:ec:90:ca:6b:c8:75:2e:ba:48:18:5c:28:ae:9a:b6:07:
         db:fc:1a:34:b4:b1:b3:05:5f:03:43:28:9d:7d:f9:a2:70:3d:
         9a:80:ce:69:27:93:00:14:4f:7d:67:b2:ae:35:c8:dd:e3:f1:
         38:7c:07:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:58:30 2025 by rpki-client