Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
File:                     U8dzEuDSzshFoEYThF-KG-Jjw5k.mft (raw, json)
Hash identifier:          MajYOiIXLojvV1J7k8uE/NGj2yHvfelnl81vZfsRkNA=
Subject key identifier:   F9:D6:C1:9A:79:7F:FF:6E:33:FC:3E:2F:1A:0B:F3:AE:A9:82:59:E9
Authority key identifier: 53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
Certificate issuer:       /CN=53c77312e0d2cec845a04613845f8a1be263c399
Certificate serial:       0196BBFF9F2538731DA2B06218C33E00026A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
Manifest number:          1533
Signing time:             Sat 10 May 2025 21:00:13 +0000
Manifest this update:     Sat 10 May 2025 21:00:13 +0000
Manifest next update:     Sun 11 May 2025 21:00:13 +0000
Files and hashes:         1: RJUXqZbym2ishJcHOLCYIF0YjN0.roa (hash: mDH4mu8jxseWgzZZaCZaysAEEMBUpOt419o1jwjwG7Q=)
                          2: U8dzEuDSzshFoEYThF-KG-Jjw5k.crl (hash: 2Oj1b/iraFINlulSkZGzaFfaIAY/CP9+QwaRtqB5+Hk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:ff:9f:25:38:73:1d:a2:b0:62:18:c3:3e:00:02:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c77312e0d2cec845a04613845f8a1be263c399
        Validity
            Not Before: May 10 21:00:13 2025 GMT
            Not After : May 11 21:00:13 2025 GMT
        Subject: CN=f9d6c19a797fff6e33fc3e2f1a0bf3aea98259e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:50:44:08:11:c6:97:63:7d:70:02:19:fe:ff:
                    8e:f1:cb:2c:b6:4f:d0:4d:11:de:d4:33:fc:ea:3a:
                    74:12:6d:b2:fd:fa:cf:e2:bc:a8:de:d1:91:20:2d:
                    4b:89:83:2d:b1:44:94:9a:31:02:3e:90:e7:c0:0f:
                    e5:e7:bd:af:c5:07:93:d9:f4:31:55:0b:7d:be:f5:
                    d4:51:64:81:c4:39:30:df:3b:a0:9a:3b:50:5f:0c:
                    90:fc:bd:59:09:c6:f5:4a:31:95:2f:35:e5:b3:9c:
                    cc:2d:18:d7:28:e4:90:05:ed:ce:e1:47:fc:f7:39:
                    f7:f8:a8:6f:c4:b4:e7:c1:3f:18:da:eb:23:84:ec:
                    c0:07:b6:74:eb:04:b6:01:ab:d0:3f:8e:49:d3:a8:
                    d7:7f:39:ec:d0:5b:d5:a9:a7:cf:21:d1:63:12:4c:
                    bc:b8:59:05:7a:2d:da:ab:b0:cb:94:68:10:b0:d0:
                    1b:96:2e:c8:0d:22:3f:53:68:2c:50:59:7f:db:1f:
                    f8:c0:e7:9e:59:d3:3e:60:5a:e3:76:5e:f2:36:04:
                    c7:8f:9e:9d:03:18:df:fd:d1:d1:ec:c1:3c:a7:02:
                    0b:0d:4e:24:0f:82:29:97:3b:72:f8:7a:da:ba:6a:
                    f3:e9:7c:b4:ef:57:11:60:4c:2a:5b:b1:3f:1c:be:
                    eb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D6:C1:9A:79:7F:FF:6E:33:FC:3E:2F:1A:0B:F3:AE:A9:82:59:E9
            X509v3 Authority Key Identifier:
                keyid:53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:fa:7f:65:ad:ea:03:ef:98:ad:ef:0a:77:34:ac:c6:f1:e3:
         e7:39:17:a8:60:1a:11:a7:a1:d7:2b:2c:d6:20:92:03:a3:f4:
         c0:07:a8:a0:3e:d4:7f:11:e1:0e:11:fb:2d:53:c2:55:5c:d8:
         59:be:f4:f3:27:d7:ce:84:75:71:48:c8:b1:e7:0f:72:cf:6e:
         74:c0:37:70:95:65:8b:f3:4a:2a:77:63:1a:43:26:c6:df:c7:
         96:70:9e:c3:13:72:19:0f:e5:b3:df:23:17:6c:02:f5:c4:0c:
         34:93:c1:d8:0f:42:2d:48:01:30:7b:e9:c1:2a:7d:81:d6:a4:
         10:75:79:f6:84:1b:29:2a:26:58:5e:26:78:f1:88:0b:ad:e8:
         0c:05:d4:f6:05:3a:f9:13:56:3e:e0:0d:57:72:f6:b0:b4:9c:
         98:74:f0:18:ce:68:9e:1b:79:6f:91:95:e8:c4:c4:56:dc:57:
         d8:97:0e:6f:42:78:12:ce:00:43:91:bb:80:bc:9e:d5:e5:6b:
         3c:0c:6a:31:81:5f:88:82:6c:98:1f:a6:96:4d:99:7c:ce:eb:
         58:cd:c6:f9:a1:45:15:fd:77:cc:81:b6:8d:a5:cd:e2:91:58:
         68:c6:47:c0:e8:83:99:f5:cc:14:93:e3:15:c9:e0:56:e5:05:
         7b:78:db:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:12:32 2025 by rpki-client