Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
File:                     d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft (raw, json)
Hash identifier:          ndd315Q1LVxYcmovbFKqWLp0E739rx8kb99gEWhwDTk=
Subject key identifier:   18:ED:F3:87:76:22:4D:69:50:41:4A:09:44:95:E7:52:26:51:8F:46
Authority key identifier: 77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
Certificate issuer:       /CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
Certificate serial:       0196C27001E4A4E9A009D70A1481AAB55746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
Manifest number:          1540
Signing time:             Mon 12 May 2025 03:00:42 +0000
Manifest this update:     Mon 12 May 2025 03:00:42 +0000
Manifest next update:     Tue 13 May 2025 03:00:42 +0000
Files and hashes:         1: GiuN6Z-Ii4hKkVx5VV-IMhBO3QY.roa (hash: iyQ6GAQjxqnJYL88mOpP3XC9PzL+98vR7m7z4r32/XE=)
                          2: I31zSlJ40fjjEolj5beTqF2Vpd4.roa (hash: Og0yQVlIZ0GIVCkTxKf0CrUvb1fixcYPJT0gMrkKe1k=)
                          3: d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl (hash: c2SsEk2SGGk2UQJA/IB8dykHgGXfpIuVPqKeEuST0WI=)
                          4: hWqbQCINw_eREZ5Cr4ZVsBmolHg.roa (hash: Udzjv6T0jDHHqGvPVeIEklKJjpCQoCFjU9XymlaTwRA=)
                          5: osKO7b8ccW31sbJ6_t6mywPVBHM.roa (hash: JM2OqJyCoa973ukFnr+UzzosklB0VPL9Ae/5a6wxzDM=)
                          6: pDrGdKgcXes4quzk7Lh5Ka1vr9k.roa (hash: JXmZvN6wvq9s/qrkI9tgKOrpx2n5jQb8xJL6vMObw8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:70:01:e4:a4:e9:a0:09:d7:0a:14:81:aa:b5:57:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
        Validity
            Not Before: May 12 03:00:42 2025 GMT
            Not After : May 13 03:00:42 2025 GMT
        Subject: CN=18edf38776224d6950414a094495e75226518f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f2:7b:2b:1e:bb:ba:53:38:07:de:c5:15:68:
                    e1:9a:ef:de:63:29:c0:e0:aa:eb:d8:33:1a:cf:ee:
                    11:ea:03:62:f2:16:11:16:79:40:f4:34:97:94:6f:
                    6f:14:18:80:64:a5:97:21:ba:bb:23:75:79:c4:8a:
                    a3:c1:f6:b7:ca:a9:07:d9:67:84:84:7e:3f:32:2b:
                    a3:e8:2b:1f:69:62:49:fe:08:b4:1a:5a:4b:46:61:
                    bb:2d:4b:65:1d:6a:b3:07:48:c9:71:80:dc:1c:db:
                    25:ab:36:00:ad:f2:50:4a:65:8b:93:f7:7f:70:9b:
                    03:c8:47:79:f9:3e:7c:01:df:21:df:7b:ef:02:7e:
                    0f:ad:93:b9:8a:1a:44:d8:12:78:70:bd:89:e9:6c:
                    94:8f:b5:41:ba:2b:bb:23:14:93:3f:be:4d:70:d1:
                    f8:57:0c:33:b3:a8:3a:59:95:96:7d:33:40:41:70:
                    c4:b7:41:58:d9:8e:e2:8b:42:76:6a:6c:cb:e4:67:
                    20:67:61:bf:55:01:58:4f:3e:53:f8:78:86:04:a0:
                    c2:3b:ca:09:43:d5:f2:48:07:ab:e5:52:0e:ae:06:
                    10:4c:dc:39:a1:af:2e:b1:54:98:b6:17:82:0a:37:
                    9d:a3:7e:06:3f:c9:0c:1d:95:f2:eb:50:62:ab:27:
                    d2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:ED:F3:87:76:22:4D:69:50:41:4A:09:44:95:E7:52:26:51:8F:46
            X509v3 Authority Key Identifier:
                keyid:77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:8c:b5:7e:7c:4e:29:89:95:cb:e5:31:96:38:e4:8e:92:5b:
         ff:a0:f8:4e:e7:3e:ba:74:24:bf:23:66:21:c1:89:e4:e1:c2:
         80:11:58:df:20:61:b4:cf:19:9e:5c:f1:19:b9:86:04:0a:d2:
         1e:b9:fb:b7:b0:fb:0f:68:b3:d3:65:8d:da:ad:ca:96:50:72:
         33:a6:98:e9:ef:85:11:92:f4:4b:b3:82:e6:b4:9a:0e:99:9f:
         44:b3:ce:b5:41:28:33:26:39:1f:65:05:c6:01:2a:4d:c3:0e:
         3a:06:57:10:c0:2f:ea:7f:16:3e:90:79:61:29:6a:aa:c7:f4:
         68:a8:bc:20:82:1a:86:f2:37:82:fb:8b:76:fd:4d:68:5d:e3:
         49:a6:c2:a2:61:48:fb:32:71:74:0d:52:32:66:57:08:ff:1f:
         dd:0e:6d:d5:67:c9:e9:8a:a9:22:02:6e:38:ee:3a:2e:52:93:
         9f:1d:92:15:5e:c4:15:3f:3b:5c:0f:39:e3:e3:0b:6e:fc:ab:
         1a:6a:68:6b:04:d1:c9:eb:55:47:7b:fb:56:e0:d2:fc:e6:86:
         13:07:69:f8:dc:4d:c4:68:18:33:1e:c7:cc:db:86:8c:99:70:
         73:91:50:35:fa:6c:4d:af:40:bf:9b:07:eb:d0:5c:87:4b:ae:
         ec:cb:0c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:47:47 2025 by rpki-client