Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
File:                     buuvFSM9mOuO8GLCRfkXNi5jJlY.mft (raw, json)
Hash identifier:          JFNZxuv6Mxt8Jx2vynsFygTPA7d6W90yb+H7/uhEXIA=
Subject key identifier:   DC:F1:3E:E8:01:FA:E4:C1:EB:94:D7:90:6A:79:50:BF:B5:83:CD:62
Authority key identifier: 6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56
Certificate issuer:       /CN=6eebaf15233d98eb8ef062c245f917362e632656
Certificate serial:       0196CF18A39D2B9836D20F93651365807C47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
Manifest number:          153F
Signing time:             Wed 14 May 2025 14:00:20 +0000
Manifest this update:     Wed 14 May 2025 14:00:20 +0000
Manifest next update:     Thu 15 May 2025 14:00:20 +0000
Files and hashes:         1: YWeKpT1rE5D3jQdqNfYDMaSRQ-o.roa (hash: Zb5RmiW5EJ1sc/m0g84BzROe4xUzHJtXaAdIweCX3Co=)
                          2: buuvFSM9mOuO8GLCRfkXNi5jJlY.crl (hash: hZmY8dhAz3jaNsL9z5n75P1gMMuOemYYqh9xStaBV/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 13:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cf:18:a3:9d:2b:98:36:d2:0f:93:65:13:65:80:7c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eebaf15233d98eb8ef062c245f917362e632656
        Validity
            Not Before: May 14 14:00:20 2025 GMT
            Not After : May 15 14:00:20 2025 GMT
        Subject: CN=dcf13ee801fae4c1eb94d7906a7950bfb583cd62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:63:df:3f:99:8c:77:e2:08:97:f2:d0:84:92:
                    c6:06:a1:fe:24:51:30:b3:8e:f1:ef:f3:27:ba:b2:
                    1d:96:f7:2e:0e:7e:27:e1:f9:10:c3:df:f0:52:6e:
                    a9:1c:dc:59:f0:14:d0:04:f1:20:7a:18:57:cd:55:
                    32:e8:2d:07:ba:f7:42:29:e4:e8:83:05:74:09:b8:
                    d3:4a:27:39:3d:e7:01:4d:3c:4b:b2:0f:98:da:5a:
                    9c:93:96:d0:cc:50:d4:ab:ab:27:59:c5:83:85:d9:
                    40:47:be:59:da:52:e7:f2:1d:2c:c0:9d:fa:65:59:
                    7d:72:cb:73:b0:a1:95:c6:69:da:d9:4d:c1:53:16:
                    9f:30:d2:91:3f:fa:c1:2e:b4:ef:ef:6a:53:84:d4:
                    49:81:76:d3:d8:78:24:f3:79:5d:52:5a:3d:0d:64:
                    71:9e:25:16:c7:6e:75:25:b9:8c:41:e3:18:28:95:
                    52:62:e5:61:5c:3d:c3:e0:e2:14:7c:a6:52:ab:88:
                    b9:7e:77:30:1d:8d:20:af:10:56:b5:7b:5e:e6:a1:
                    f0:10:54:73:a0:4e:3f:10:0a:e4:1b:09:5c:45:9b:
                    06:6a:e9:76:a3:9a:a7:58:29:65:5a:84:0f:54:76:
                    67:a2:31:8b:a3:5f:b7:7e:65:7b:73:c0:25:5d:9f:
                    0d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F1:3E:E8:01:FA:E4:C1:EB:94:D7:90:6A:79:50:BF:B5:83:CD:62
            X509v3 Authority Key Identifier:
                keyid:6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:85:4a:b9:a4:e6:95:b1:12:7d:49:d8:3c:ae:01:43:3c:a9:
         55:f2:ec:d6:36:bc:64:0c:fb:29:07:62:b5:81:00:20:d2:de:
         4a:57:6f:aa:a5:75:92:e8:02:f3:ad:d9:83:24:99:1d:56:db:
         63:b7:82:01:69:3b:96:13:e1:51:25:b0:03:fa:43:a6:ae:8f:
         69:2a:d2:6e:ed:5a:1f:09:f7:3c:bc:67:7a:e1:9d:5d:a3:d3:
         08:83:2f:26:4b:68:e1:10:6f:7a:bd:f3:7f:61:46:65:39:90:
         49:30:3d:bb:4b:15:60:6a:7c:ad:3a:9f:29:67:d1:39:1d:28:
         b4:8f:1f:90:bd:0d:f3:66:a2:9c:4f:d3:2a:80:f2:6b:be:bd:
         f8:be:3c:36:fc:23:bb:4b:11:ad:8c:b2:7d:5d:ec:13:79:3c:
         4f:3e:84:82:7f:9b:e9:13:32:92:23:83:f9:27:5d:b2:f1:1c:
         b7:89:29:bd:20:2b:07:23:a9:bd:dd:c8:7a:0f:f8:0d:d0:ca:
         e8:37:79:96:d5:de:c3:90:a3:89:3c:71:c9:5c:ed:18:a5:6f:
         9e:7d:ef:16:bb:ef:17:0e:80:54:ef:9b:8f:52:9f:6c:a1:c5:
         dc:46:fb:21:b3:ca:c4:af:f1:b9:b2:16:79:c1:00:82:b4:76:
         ae:7b:5d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:23:58 2025 by rpki-client