Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
File:                     wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft (raw, json)
Hash identifier:          Yhag0U2MxjBfD/tf69baatUZ0pcLJXoI9bOnr3hZVDA=
Subject key identifier:   38:F3:49:D2:08:9C:11:57:FE:A6:ED:24:BB:60:AD:DD:60:82:04:A1
Authority key identifier: C0:AB:92:DE:7E:AF:5F:BB:2D:14:A5:08:A9:0C:EF:C5:69:B5:4E:D4
Certificate issuer:       /CN=c0ab92de7eaf5fbb2d14a508a90cefc569b54ed4
Certificate serial:       0196B069BAF0C4840F83DA7408BE9FA4CCE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
Manifest number:          1530
Signing time:             Thu 08 May 2025 15:00:41 +0000
Manifest this update:     Thu 08 May 2025 15:00:41 +0000
Manifest next update:     Fri 09 May 2025 15:00:41 +0000
Files and hashes:         1: uOmu1u-0cx95qJdb2F6OqNW0AyI.roa (hash: T1ZCPSydqXCfxYKH+M6++cGYvIdpSTMuo8K8u6PSUYU=)
                          2: wKuS3n6vX7stFKUIqQzvxWm1TtQ.crl (hash: 6b2Exz7BNwjmT4PiJA7E5L9R+A1Ib9RY+kw/fTzZkJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b0:69:ba:f0:c4:84:0f:83:da:74:08:be:9f:a4:cc:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ab92de7eaf5fbb2d14a508a90cefc569b54ed4
        Validity
            Not Before: May  8 15:00:41 2025 GMT
            Not After : May  9 15:00:41 2025 GMT
        Subject: CN=38f349d2089c1157fea6ed24bb60addd608204a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5e:2f:9e:04:fd:6d:30:9a:21:90:e9:98:6a:
                    97:0f:46:6b:1b:65:c7:19:18:08:b1:92:9d:8f:fe:
                    49:b9:3b:03:e5:0d:67:1d:b6:f9:a6:b2:ab:1a:4b:
                    5d:13:af:40:1f:37:2e:22:7b:95:81:10:db:0b:3f:
                    b8:cf:ad:1e:a9:98:ad:af:ba:bf:16:fe:04:a1:27:
                    86:52:68:30:ef:05:c3:f0:a1:a1:9c:4e:af:85:c1:
                    ed:82:a9:31:de:4b:3e:f4:3f:a1:9e:ad:99:2a:0d:
                    a2:2b:8d:20:68:d3:89:d5:93:46:84:33:25:b8:2a:
                    20:90:a5:06:b6:58:bf:fe:87:27:c3:c2:cf:fd:f1:
                    b6:e3:97:9b:6b:0f:95:83:62:00:59:31:32:13:54:
                    cf:d6:9e:2b:24:7f:fd:00:78:b4:31:d6:ae:d5:e1:
                    36:bc:f9:64:ab:97:c8:9a:6c:1c:af:d7:8c:9f:b3:
                    a9:b6:ac:0a:8d:c3:4a:ab:22:70:18:1d:18:7a:75:
                    8c:8e:12:84:fa:23:e3:e6:c2:b5:55:05:24:1b:ac:
                    0e:23:63:78:0c:2d:b3:ad:9f:8b:3b:19:8e:dc:1f:
                    48:a7:47:60:ff:3d:37:fe:18:27:bc:15:30:86:97:
                    63:2b:1f:4b:6d:7d:1a:ed:a0:ae:21:13:b9:76:68:
                    3a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F3:49:D2:08:9C:11:57:FE:A6:ED:24:BB:60:AD:DD:60:82:04:A1
            X509v3 Authority Key Identifier:
                keyid:C0:AB:92:DE:7E:AF:5F:BB:2D:14:A5:08:A9:0C:EF:C5:69:B5:4E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:db:c0:9e:67:fe:2e:67:b3:d4:42:b4:56:00:d7:63:94:ef:
         46:f9:b1:70:3c:89:a7:74:46:f6:66:db:b2:73:d8:2a:f0:8a:
         78:64:65:fd:55:18:74:60:9a:e9:d4:a3:4e:10:26:de:79:53:
         7f:d2:a9:6b:89:0e:2c:f8:48:bd:28:46:90:44:e5:aa:f7:05:
         17:22:ba:b3:f6:86:db:9e:d9:e4:7a:e4:ab:d3:12:0d:4a:42:
         e6:20:ac:60:de:79:c3:53:b6:ad:c9:68:fa:64:53:7c:03:e9:
         8f:bc:b2:90:b4:d4:95:93:f2:19:f5:df:66:29:29:2b:1e:aa:
         28:87:33:21:5e:69:1e:8d:00:d8:5a:c7:c8:55:3d:93:3a:ff:
         ca:32:7b:1d:8b:b2:d0:4a:ce:c2:80:05:31:49:7c:23:47:48:
         93:c2:fc:a9:fd:db:4c:dd:89:4a:ff:ee:31:45:5b:05:80:de:
         28:6b:f0:04:6f:0b:55:a0:13:75:e0:e5:74:31:5d:41:c7:58:
         ac:b6:d1:06:ff:26:d4:86:0a:65:15:ab:25:98:64:e2:8a:2b:
         93:28:44:e7:cb:62:7b:f4:fc:3e:9c:e7:19:73:f7:63:0d:96:
         91:fe:f2:a4:c2:97:aa:40:14:2e:86:f9:ac:d5:68:ff:46:51:
         f9:3f:d1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:55:23 2025 by rpki-client