Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
File:                     1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft (raw, json)
Hash identifier:          iwEy3c2gmg4TwweRUTmbs8ftljahuuO3oU/QDHSq5uA=
Subject key identifier:   ED:49:30:DF:87:6C:29:A1:16:06:53:7D:CE:4A:E4:FD:EE:10:B8:80
Authority key identifier: F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
Certificate issuer:       /CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
Certificate serial:       0196AD9F40BB17079ED736DF1E9FF2C1496E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
Manifest number:          152A
Signing time:             Thu 08 May 2025 02:00:17 +0000
Manifest this update:     Thu 08 May 2025 02:00:17 +0000
Manifest next update:     Fri 09 May 2025 02:00:17 +0000
Files and hashes:         1: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl (hash: SYQ9eetAHhvlx0zpGdhu27qTk+/b1xpmtv7fCXtG0Hc=)
                          2: Pgq22PofDYngFneIOCYn3YcILuE.roa (hash: gLgiBxrwAEPz9zi62TVewjSLhEPnaaAHEiKYcUhQX+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ad:9f:40:bb:17:07:9e:d7:36:df:1e:9f:f2:c1:49:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
        Validity
            Not Before: May  8 02:00:17 2025 GMT
            Not After : May  9 02:00:17 2025 GMT
        Subject: CN=ed4930df876c29a11606537dce4ae4fdee10b880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b8:c8:42:3c:3f:45:c4:c0:af:0a:d1:ef:a6:
                    c0:06:eb:af:28:79:cb:a1:24:8f:04:a9:9b:a9:75:
                    f6:ac:86:cc:33:c0:e4:a2:ba:67:bc:f6:7c:e7:5a:
                    43:6e:4a:03:cd:20:f2:2c:de:59:de:04:90:d1:0d:
                    dd:a0:0e:82:28:1e:c8:96:e4:b3:e0:6c:56:93:91:
                    81:bf:ef:aa:b9:a0:26:61:8d:81:1b:88:4c:46:b4:
                    f7:6a:e6:08:a2:4d:d3:d5:81:63:16:34:33:03:87:
                    00:09:09:01:de:b4:80:aa:61:89:a5:ab:3c:e4:0d:
                    6f:fe:05:15:16:d6:bd:d1:fe:bd:6d:f7:df:76:4f:
                    2b:5c:96:d8:1a:b6:76:81:73:09:60:1f:c6:01:a3:
                    04:aa:37:bf:36:2a:f1:92:52:b4:9c:fe:34:6e:31:
                    63:e2:17:98:55:df:53:32:87:84:9e:99:3d:ae:0d:
                    ec:ad:1d:5d:9a:b7:39:39:6e:b8:37:96:c0:f7:ce:
                    4e:8e:73:2b:c6:47:4a:0b:bf:57:ca:a0:e6:6e:11:
                    2e:46:a0:6c:59:cd:e5:d6:9f:5d:55:6d:9c:d8:40:
                    55:b5:a6:85:57:c2:9c:91:32:12:e5:54:85:c2:c5:
                    67:fd:09:b3:df:bf:4b:dd:d9:d3:6b:62:d0:8b:d1:
                    30:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:49:30:DF:87:6C:29:A1:16:06:53:7D:CE:4A:E4:FD:EE:10:B8:80
            X509v3 Authority Key Identifier:
                keyid:F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a3:34:a0:76:3e:04:7e:0f:44:4b:13:9e:3e:e1:d9:d4:33:
         74:c6:83:88:4c:4f:5b:cb:18:fd:63:a7:6b:0a:5f:a8:51:b7:
         b5:ca:28:dc:22:46:4c:0f:5d:6e:61:13:38:0c:9a:7f:bf:40:
         08:ea:66:d0:53:85:9b:6d:34:99:4f:3f:b7:10:72:12:61:48:
         cd:80:7a:b2:82:05:36:cb:45:3e:c1:78:44:d3:16:14:0d:18:
         0c:cb:1f:47:21:d0:b4:4e:e4:eb:dd:41:4c:96:bc:0b:61:f1:
         58:63:31:ea:5d:0c:25:e4:a5:cc:61:16:f4:dc:8e:b9:47:48:
         02:50:ac:48:db:bb:df:dd:c4:35:fd:9a:c7:17:b2:3c:da:95:
         c0:83:8c:92:08:8c:41:9f:4a:18:3f:82:04:8d:01:ef:00:c8:
         ed:89:0a:4a:d1:98:04:6c:60:fc:b4:0d:3f:61:75:01:21:05:
         b0:88:c7:6d:bd:8c:21:8d:a2:0a:0c:e6:19:b6:82:88:b3:61:
         3f:dd:fd:81:ee:8e:06:dd:46:38:2a:f1:2c:fd:af:40:b9:2a:
         a0:b3:15:34:2d:21:90:d0:53:41:5a:09:72:f7:bd:67:54:f0:
         2b:e7:97:f9:3a:08:4e:0e:2d:c7:e5:4e:bc:dc:9e:31:48:46:
         84:6a:27:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:51:22 2025 by rpki-client