Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File:                     nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier:          Szd2Y+2rvzoxqYMV4gK5iXvibMe5vk9f/2i+lfTmKBI=
Subject key identifier:   71:1D:3E:2D:A0:0A:F4:10:DE:54:37:01:87:99:43:92:6A:66:0F:E2
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer:       /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial:       0196CE06096A0E87E6DA18035C72F24CD438
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number:          153F
Signing time:             Wed 14 May 2025 09:00:24 +0000
Manifest this update:     Wed 14 May 2025 09:00:24 +0000
Manifest next update:     Thu 15 May 2025 09:00:24 +0000
Files and hashes:         1: LAf6z2y7d_FvHWa2exDFEGsDUYk.roa (hash: yLu10ItcbqMAqor4DiKoo4ryX77evtxiM9mUG5P0yVc=)
                          2: kgdBEe32jL4o_RNVND7NTLfwJwI.roa (hash: PZIGs+YorN99DtOYFOROjFtihI/jC535mZ5OqGnLcRA=)
                          3: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: WuQO7S17NRWTgjH9KJetbizGdnhPTXP2ZrjoF1DbvjQ=)
                          4: qO2F63snosgQCd-tQ25OAd4civA.roa (hash: KELhV9b4nDo2k2LkjCvA0ufUmi/5QZ+HPUiWXl9d83Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 09:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ce:06:09:6a:0e:87:e6:da:18:03:5c:72:f2:4c:d4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
        Validity
            Not Before: May 14 09:00:24 2025 GMT
            Not After : May 15 09:00:24 2025 GMT
        Subject: CN=711d3e2da00af410de543701879943926a660fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:56:5a:15:eb:d0:ce:c9:c4:09:23:47:90:
                    bc:56:81:f1:fe:a4:dc:e0:2d:ef:4a:4e:18:00:37:
                    48:48:73:45:91:7d:42:55:b8:33:b7:10:7a:d2:11:
                    de:e9:b6:16:d0:cc:28:a1:36:9a:10:a1:e5:4f:4a:
                    d4:90:87:aa:e4:b1:4b:fc:84:73:9f:73:bc:72:fd:
                    30:44:86:18:c8:09:97:98:fa:b4:11:a0:e8:d8:b8:
                    6a:aa:0d:4d:39:0b:45:07:18:b3:31:d5:b9:a6:d5:
                    4a:52:e4:b6:83:30:ba:ec:58:12:14:88:3c:79:d7:
                    5c:35:19:85:5c:ee:dd:6e:1d:fb:64:cf:b5:48:3b:
                    f3:00:81:bc:3a:d5:64:02:14:2e:31:ae:cd:68:27:
                    2b:0d:7a:83:71:ce:24:bd:33:95:0d:90:94:98:1f:
                    8d:1a:1e:72:56:0a:c1:f5:2a:a5:22:cf:71:8a:54:
                    59:1d:f2:63:b4:b5:93:0f:dc:8d:f3:4a:41:c1:cc:
                    3b:9f:8d:fa:46:42:4f:c0:ba:ae:79:42:12:c1:89:
                    80:92:86:c4:a7:df:1b:89:98:15:a9:07:66:bd:87:
                    81:22:e3:1e:fd:f3:79:69:77:10:76:88:6d:63:ad:
                    9a:f3:7c:cc:05:41:81:f5:4c:40:0e:a9:f3:e0:d4:
                    f6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1D:3E:2D:A0:0A:F4:10:DE:54:37:01:87:99:43:92:6A:66:0F:E2
            X509v3 Authority Key Identifier:
                keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:dd:63:58:ce:1b:4e:ee:09:54:86:35:cd:a5:97:79:a6:eb:
         87:cd:03:94:e1:7e:08:6d:d5:da:22:be:2b:95:c8:c8:a0:65:
         b6:45:97:14:bd:ca:87:db:bc:1a:0e:b4:f5:24:c5:f1:8a:fc:
         da:73:d8:c2:1d:aa:46:80:ac:6b:07:e1:9e:a9:d3:b3:14:48:
         66:e1:a4:91:d2:64:eb:23:c1:35:6f:a5:c1:87:8d:7a:e7:47:
         1c:5e:3a:ff:78:b0:52:d2:10:ce:cb:40:81:1a:f6:37:1e:67:
         79:98:7e:df:48:c8:0b:a0:45:63:0e:d5:14:dc:a3:55:05:7b:
         27:d9:37:18:a3:c0:64:ec:17:9a:0a:bd:70:cd:17:99:49:a1:
         28:77:40:d9:1f:e0:64:c6:fd:73:fe:99:e8:d0:c7:ca:ba:53:
         98:8e:3d:d6:ad:54:a5:d2:5d:8b:e1:ac:0e:d1:28:21:36:7f:
         62:e6:9a:e4:88:34:c6:b5:02:37:c0:5d:b0:ff:1b:3b:43:fb:
         2c:3d:4b:b7:9e:77:78:2c:6a:a3:10:7a:6f:32:a9:4f:9a:1c:
         da:30:36:3c:4b:8f:58:f9:3d:6e:fa:3f:ba:0f:8d:8a:b6:be:
         27:81:ce:79:67:5f:55:61:52:41:38:d0:22:d8:b3:89:7a:ef:
         b2:38:06:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:53:02 2025 by rpki-client