Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.mft
File:                     4C15LJfb1EguuBXMmk-59Uevegk.mft (raw, json)
Hash identifier:          sqXQRGxkPE5gpQEiO2gxqiFy8OwxYqvWy5jr9QbhE8w=
Subject key identifier:   F4:2B:AE:0F:A2:1B:B2:E3:42:BF:AD:F1:12:24:F6:A6:08:5A:72:FB
Authority key identifier: E0:2D:79:2C:97:DB:D4:48:2E:B8:15:CC:9A:4F:B9:F5:47:AF:7A:09
Certificate issuer:       /CN=e02d792c97dbd4482eb815cc9a4fb9f547af7a09
Certificate serial:       0196B7B51829D7AF190501D2A0FB3D843EDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4C15LJfb1EguuBXMmk-59Uevegk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.mft
Manifest number:          1531
Signing time:             Sat 10 May 2025 01:00:20 +0000
Manifest this update:     Sat 10 May 2025 01:00:20 +0000
Manifest next update:     Sun 11 May 2025 01:00:20 +0000
Files and hashes:         1: 4C15LJfb1EguuBXMmk-59Uevegk.crl (hash: HI7jCdRfSzfTfaUXFxqi4IgD3eY6oipX4i1Q9h+9N+w=)
                          2: cWQ3FcXIpgayQfqlmppdKMwVQXo.roa (hash: psm2EXD7JYCfSDQE9D3Rxu9Bj66wyGfDywECDIfOm7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4C15LJfb1EguuBXMmk-59Uevegk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 01:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:b5:18:29:d7:af:19:05:01:d2:a0:fb:3d:84:3e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02d792c97dbd4482eb815cc9a4fb9f547af7a09
        Validity
            Not Before: May 10 01:00:20 2025 GMT
            Not After : May 11 01:00:20 2025 GMT
        Subject: CN=f42bae0fa21bb2e342bfadf11224f6a6085a72fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b5:66:57:b2:20:6c:9d:a5:3e:1b:da:e8:75:
                    2d:0f:17:20:76:ed:b2:34:41:a3:03:59:f7:83:3e:
                    c8:1a:e3:8f:d4:39:94:9a:37:be:f5:9a:47:2b:26:
                    c3:6a:9e:d3:aa:1b:a0:66:ee:69:82:b5:15:b6:39:
                    a0:87:01:fe:de:88:5d:17:39:9e:85:39:a5:09:7e:
                    87:e6:c1:82:5e:10:11:22:04:8f:63:1d:92:52:a4:
                    97:f7:16:88:09:d5:e3:c3:6b:26:9a:52:bf:61:61:
                    f8:16:77:5e:4b:70:28:8b:26:5d:33:82:3f:83:35:
                    d6:c9:6f:2f:de:eb:9c:86:5f:0a:46:e8:e7:20:7c:
                    d6:f9:1f:52:4d:3d:8a:a5:a1:c6:54:9c:5b:fa:4b:
                    bc:41:fa:e9:1e:f5:e0:2b:d1:d3:28:8d:ee:8e:4f:
                    c6:52:15:ad:54:9c:3f:7f:82:dc:77:f1:b1:ce:a6:
                    4e:e1:c0:76:ce:a7:a1:c6:f7:94:2f:f0:fe:43:07:
                    45:1d:db:ba:07:f1:b2:f3:93:13:fc:de:75:3a:a9:
                    1e:8c:c4:ec:e3:a4:22:e8:fd:27:c7:1c:c1:5b:b5:
                    72:9a:08:7f:86:68:40:85:c8:3c:9e:2f:ea:1e:0e:
                    46:4e:c2:7b:a1:4c:5a:d6:d1:e5:21:40:8d:ac:d7:
                    df:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2B:AE:0F:A2:1B:B2:E3:42:BF:AD:F1:12:24:F6:A6:08:5A:72:FB
            X509v3 Authority Key Identifier:
                keyid:E0:2D:79:2C:97:DB:D4:48:2E:B8:15:CC:9A:4F:B9:F5:47:AF:7A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C15LJfb1EguuBXMmk-59Uevegk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:9a:6f:27:04:c1:f2:55:8d:4f:da:af:0d:5b:62:13:3f:72:
         2d:a1:a9:8b:5a:80:c3:9c:60:4d:22:cc:a9:0e:89:7a:c1:14:
         e8:9c:55:c5:fa:31:86:73:52:d5:2d:1d:06:48:cc:50:be:dc:
         a3:b5:07:20:9e:a6:90:95:94:c5:7e:35:41:f5:86:f9:91:43:
         cf:9b:55:ca:62:c5:cc:2c:ec:a2:1c:21:ca:b1:0f:86:0c:10:
         69:48:16:1e:21:fd:3f:85:a0:77:d7:9c:14:1c:59:f6:de:f6:
         3a:9a:2c:de:b5:d7:cb:c2:90:f9:57:ff:68:74:c1:99:d7:3e:
         5e:0a:9e:e8:33:36:44:f3:3d:43:94:29:b7:60:54:58:59:0c:
         fe:07:dc:ea:84:87:38:da:be:a4:5b:b0:5b:35:2a:ae:a4:67:
         c6:5c:5d:a2:21:7c:66:f2:73:fc:51:6f:cd:7e:69:82:a9:ec:
         fb:ae:a2:98:c8:75:bc:cb:36:b5:ea:ca:8e:ae:f3:7b:71:7d:
         af:a0:fc:a8:93:37:55:35:10:28:17:f2:5d:e8:85:2a:b1:8d:
         fc:0c:27:74:99:8c:71:ae:78:a0:18:a1:52:ec:a5:7d:30:df:
         b3:ed:e6:bb:75:b3:b7:ba:63:e4:0a:b4:c7:23:b8:36:19:60:
         22:c5:7b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:29:05 2025 by rpki-client