Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft
File:                     _zfWwfalxKkrv_2FxBQhJ_o-GjA.mft (raw, json)
Hash identifier:          +hjtgF5fZrcj8b+cPaqETGp0uFQO19z2Sxn7isk33J4=
Subject key identifier:   47:9B:6A:18:5E:FB:DD:F5:B6:05:7A:7A:B4:30:72:C6:C8:1D:89:92
Authority key identifier: FF:37:D6:C1:F6:A5:C4:A9:2B:BF:FD:85:C4:14:21:27:FA:3E:1A:30
Certificate issuer:       /CN=ff37d6c1f6a5c4a92bbffd85c4142127fa3e1a30
Certificate serial:       0196C53A6D109F7D921604A26F3B18EEC6B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft
Manifest number:          153A
Signing time:             Mon 12 May 2025 16:01:02 +0000
Manifest this update:     Mon 12 May 2025 16:01:02 +0000
Manifest next update:     Tue 13 May 2025 16:01:02 +0000
Files and hashes:         1: 95UilOURLat0lc9QoS7Ws8cK2EA.roa (hash: IqAjP92yfLol/XET3CMcHwom9MrBLP/CZ4kPceWSYnk=)
                          2: _zfWwfalxKkrv_2FxBQhJ_o-GjA.crl (hash: mPbJU8lfSyEsQuM0jBPWZK8wqS4iep3KbOoSweZOF/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:3a:6d:10:9f:7d:92:16:04:a2:6f:3b:18:ee:c6:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff37d6c1f6a5c4a92bbffd85c4142127fa3e1a30
        Validity
            Not Before: May 12 16:01:02 2025 GMT
            Not After : May 13 16:01:02 2025 GMT
        Subject: CN=479b6a185efbddf5b6057a7ab43072c6c81d8992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f5:a3:a8:97:60:eb:e7:dd:33:da:b6:74:63:
                    a4:e8:b0:7c:86:61:24:19:b6:14:41:80:65:03:00:
                    2b:92:c8:17:f0:fe:0a:31:38:ea:d8:6f:f5:d6:71:
                    f0:f1:5d:24:10:38:77:1c:28:56:8b:d9:ce:cf:6c:
                    b0:83:ba:a9:ef:7b:4e:0c:8b:5e:3a:ed:9e:6f:b4:
                    30:a8:b4:b6:d7:e7:10:0e:3f:6f:7c:60:91:a0:ec:
                    3b:7d:7b:c6:ea:92:07:92:96:d5:49:70:59:40:9d:
                    6c:3f:88:ba:3b:54:8b:6f:4e:9d:37:f0:d1:7d:63:
                    73:1b:eb:e7:80:2d:e6:c6:c2:5d:6d:1c:1b:15:29:
                    0b:84:e1:3e:f6:3e:e4:c8:d3:de:9a:35:30:f2:28:
                    d0:92:94:e2:4c:17:8b:5c:3c:88:d8:7d:1b:78:ff:
                    5e:98:b1:8a:63:ee:13:39:78:eb:ef:57:b5:4c:f8:
                    c1:85:a1:a1:be:28:f3:86:a4:74:e9:75:23:a5:8c:
                    99:9a:38:f7:d4:d9:0a:24:0e:8a:c1:5b:e3:0a:e9:
                    d6:19:e7:a5:44:d2:0c:aa:b7:82:78:02:4e:1c:e3:
                    63:2a:fc:de:4d:a6:5d:24:f7:1b:51:8a:99:9f:ee:
                    85:d3:bb:2b:f0:b5:2b:ab:d8:63:8a:e2:ed:b9:16:
                    22:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9B:6A:18:5E:FB:DD:F5:B6:05:7A:7A:B4:30:72:C6:C8:1D:89:92
            X509v3 Authority Key Identifier:
                keyid:FF:37:D6:C1:F6:A5:C4:A9:2B:BF:FD:85:C4:14:21:27:FA:3E:1A:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:28:b1:92:11:72:4f:45:f1:7a:79:64:e5:d2:50:10:95:81:
         56:f6:d5:32:b6:82:5e:99:82:cb:00:00:95:b7:2b:66:53:06:
         8b:ee:8b:65:d5:8e:0a:62:89:70:90:64:50:3b:47:51:0d:c8:
         d9:3c:fb:f4:7f:3c:91:6a:1d:8f:de:10:65:0b:5d:42:ee:c7:
         7c:3d:9a:9e:7f:a6:c7:cd:31:ac:57:7c:94:c9:5e:9c:28:3e:
         16:10:d3:57:65:4b:7b:8c:85:6e:6a:36:8b:60:9d:7d:1e:63:
         64:dd:2c:7b:14:84:e2:f9:a0:78:8c:8c:e0:cd:8a:2f:b3:03:
         93:00:95:6b:62:2e:ca:e1:3a:7f:95:ea:e2:34:1d:10:e9:cc:
         2d:79:2c:5f:04:e8:2e:c4:5d:86:b9:9b:ca:4d:07:8d:11:d4:
         6c:68:ff:ae:25:d3:95:7d:66:08:50:e2:4c:31:3c:45:43:51:
         c3:3c:d7:49:72:ae:f1:13:e3:b6:38:3c:0e:48:24:56:aa:5e:
         90:8a:33:4d:7d:43:e8:c4:79:b9:62:d4:fb:97:12:63:5c:b4:
         e7:63:16:a4:f9:15:7f:74:a0:65:47:e2:33:0b:dc:e5:67:69:
         e1:6f:4f:3f:81:03:42:56:f2:9c:21:84:7f:7e:9b:1a:ee:f9:
         5d:c3:ef:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:48:53 2025 by rpki-client