Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
File:                     F1lDaGkInNnH5tAgKPJKL-SbhtU.mft (raw, json)
Hash identifier:          me5m0yrXsGT3mKWP6f8R/tkFMd3EuOfLjYoWPBY84zo=
Subject key identifier:   D2:75:84:1B:00:27:6E:DB:3B:A9:E9:BE:DE:13:7E:D6:E2:39:CD:F7
Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
Certificate issuer:       /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Certificate serial:       0196B4B3EEEB456FBA7B5363822170432E5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
Manifest number:          153D
Signing time:             Fri 09 May 2025 11:00:13 +0000
Manifest this update:     Fri 09 May 2025 11:00:13 +0000
Manifest next update:     Sat 10 May 2025 11:00:13 +0000
Files and hashes:         1: F1lDaGkInNnH5tAgKPJKL-SbhtU.crl (hash: uBexb+vMvvO7KO5GVewdonfTb4a+iFYCNFp2uO4MDwk=)
                          2: x_rxqF-JJR6RocSDql__H0qmhrc.roa (hash: 4JF9dz0rvoh3uEdMTV+Of1B1JpkW2SA5c3PR2yvS+Us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b4:b3:ee:eb:45:6f:ba:7b:53:63:82:21:70:43:2e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
        Validity
            Not Before: May  9 11:00:13 2025 GMT
            Not After : May 10 11:00:13 2025 GMT
        Subject: CN=d275841b00276edb3ba9e9bede137ed6e239cdf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c8:f2:71:0c:b8:31:62:9e:97:7a:05:9a:74:
                    8c:47:2a:9b:75:d4:c8:d2:63:3e:85:38:38:99:3e:
                    19:73:44:6c:77:22:50:1e:0a:1c:1d:e3:ab:f8:3d:
                    69:60:c4:36:77:2b:03:47:0e:b6:67:27:8c:96:e9:
                    53:a0:ec:86:9a:f0:c5:c5:7c:81:4f:7d:6b:d8:ef:
                    9c:67:32:5b:db:4a:72:1b:37:bc:ca:7c:3c:d9:0c:
                    b7:11:09:4a:8e:86:64:51:0a:98:62:7b:c5:7b:c9:
                    7b:3f:38:68:6c:1e:96:14:ab:ed:45:c3:82:d3:b4:
                    bd:45:c9:80:9b:8e:0d:96:80:dc:a8:9d:6f:4a:cb:
                    93:8b:f2:e7:b7:9c:c1:bb:75:10:0c:1f:50:ce:11:
                    8e:5c:cf:e7:2a:62:21:ab:62:8e:94:eb:e0:7d:0a:
                    a2:ae:85:03:79:35:06:82:91:53:03:c5:48:69:2b:
                    04:27:8f:f2:b6:f1:24:df:0f:29:47:07:7f:d9:b3:
                    16:4b:0b:2e:b3:70:13:3c:57:3c:3f:84:64:12:b8:
                    03:27:73:b3:bd:65:93:0c:20:76:6e:4a:51:a3:ad:
                    95:ec:26:90:f4:64:3d:e9:d8:d0:b2:24:6b:2c:9c:
                    de:62:7f:ba:e6:fb:8c:66:92:9f:d6:5b:29:29:c3:
                    8d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:75:84:1B:00:27:6E:DB:3B:A9:E9:BE:DE:13:7E:D6:E2:39:CD:F7
            X509v3 Authority Key Identifier:
                keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:cd:a8:ae:5e:0d:24:87:13:d7:f2:56:2e:aa:2d:5f:72:61:
         3b:8c:2c:0d:b4:73:02:ff:1a:8b:08:9a:40:21:6b:3d:29:2e:
         e4:d9:fc:68:e8:bf:b8:89:86:74:da:db:fa:9e:c5:0a:de:ec:
         8d:96:fb:2b:f7:d6:ee:a2:63:ff:6b:ac:43:eb:f6:ed:b8:03:
         f4:29:57:19:f0:32:3d:48:2f:42:63:8e:77:af:9d:e3:a8:a6:
         c0:b4:9d:1b:0c:d3:17:5a:35:c1:27:cd:07:4c:39:4a:d4:c1:
         72:7b:f1:28:f9:da:a1:f8:16:54:52:f5:bd:14:c9:71:d7:4d:
         a2:2f:5e:c3:2d:0c:02:29:f7:0c:30:fb:87:ff:f2:c6:c8:93:
         a1:1a:09:ea:1b:0e:ce:ee:86:27:36:93:c5:49:70:f1:20:87:
         42:70:a6:f8:33:e7:0e:65:68:60:88:14:1a:46:4a:ca:da:a4:
         9b:49:a8:5d:18:5d:e1:9f:92:76:e1:be:bd:ca:0e:41:03:36:
         c2:b9:43:65:65:31:09:8a:c8:3e:a7:a6:0b:ca:80:46:e9:52:
         e2:f2:51:d0:0c:bf:ff:bf:33:db:a5:0a:0e:a2:d4:ac:22:b4:
         98:f5:2e:29:e3:0a:ed:06:ab:a7:31:b6:6e:dd:df:da:48:60:
         f6:56:31:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:11:15 2025 by rpki-client