Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
File:                     SeRO7qJladDdvQ6GN_Es9QWk7ek.mft (raw, json)
Hash identifier:          y5sX0LT4F+PP1kMqosMRmKm3f4vKUrObVjN9oUz0Fzg=
Subject key identifier:   46:1D:DE:02:E3:EA:C4:47:1C:B9:F6:9C:B2:82:76:10:31:FA:DF:98
Authority key identifier: 49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9
Certificate issuer:       /CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
Certificate serial:       0196C0EF2FFDCDA6471C884D11973F45AEF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
Manifest number:          153E
Signing time:             Sun 11 May 2025 20:00:22 +0000
Manifest this update:     Sun 11 May 2025 20:00:22 +0000
Manifest next update:     Mon 12 May 2025 20:00:22 +0000
Files and hashes:         1: SeRO7qJladDdvQ6GN_Es9QWk7ek.crl (hash: l+Zfi74Mmfw8BTu/dJmKfoiZP6imhyytedawGOej/a0=)
                          2: ZLZClTfuDKfBFAb78-Sh9gGUq9o.roa (hash: ZjgvTzOG0NWN+AmJ71kj5d0LbF11Gt0UdOZExqIqebk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:ef:2f:fd:cd:a6:47:1c:88:4d:11:97:3f:45:ae:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
        Validity
            Not Before: May 11 20:00:22 2025 GMT
            Not After : May 12 20:00:22 2025 GMT
        Subject: CN=461dde02e3eac4471cb9f69cb282761031fadf98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:2e:4b:f9:e6:6b:d4:6b:e5:f3:a6:1a:54:
                    9d:d0:bc:b9:e0:ae:a1:02:ac:aa:ed:b9:6b:d1:5d:
                    3f:02:ca:5a:c7:3a:aa:3a:fa:81:cc:2e:28:3b:d7:
                    20:65:12:97:f8:b8:bc:9d:10:8e:ed:f7:4b:cd:1f:
                    f7:76:f3:94:68:7a:d1:56:f0:58:84:d4:4b:13:69:
                    c2:f1:d3:9f:9e:e7:bb:73:6e:fe:a4:d7:08:72:2d:
                    00:d0:e6:56:e2:a2:f6:cf:a8:8e:f6:8b:91:9c:16:
                    cf:f7:d0:55:ed:db:04:94:37:ce:59:ed:8e:93:09:
                    5d:b9:4c:8b:7e:90:52:a9:d0:c5:c1:af:d9:1d:2c:
                    8f:b0:37:e0:0a:09:b8:6f:09:3c:d2:37:ac:89:06:
                    26:e1:29:07:93:c5:2e:1c:eb:43:17:fa:08:d7:21:
                    12:ea:f9:df:93:1f:96:3d:18:9e:7a:22:53:f3:7d:
                    11:89:d4:50:1d:1e:35:a1:59:9e:cd:23:cf:e8:a6:
                    9f:3f:70:6e:6b:73:23:20:d0:77:23:83:fb:c3:d7:
                    1e:5f:46:9d:fa:37:07:fd:28:d9:c5:10:cf:10:c8:
                    12:bc:2c:92:b7:93:8d:21:e7:73:a0:4f:45:e5:6a:
                    b3:e4:2b:1d:f3:88:15:8a:af:18:b7:d8:4a:f4:d3:
                    fd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1D:DE:02:E3:EA:C4:47:1C:B9:F6:9C:B2:82:76:10:31:FA:DF:98
            X509v3 Authority Key Identifier:
                keyid:49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ef:1a:9f:d2:93:03:85:1f:dd:d1:8b:c0:e8:dd:2b:c2:cd:
         0b:df:47:f2:ab:6d:7d:87:42:99:b2:d5:f3:60:f0:7f:5e:30:
         d8:17:49:39:a4:b7:65:3f:f0:a4:39:b5:ec:71:74:52:53:bf:
         5b:da:a3:3e:83:ae:bf:91:87:e3:f7:5f:91:fc:49:1a:05:42:
         b6:6c:7f:3b:05:43:c7:55:8a:f2:9e:13:59:1b:68:52:96:47:
         bb:75:16:f6:40:ea:4b:f9:3c:9e:02:12:35:52:eb:7c:63:f4:
         fa:19:a8:51:d7:4d:67:5e:4a:af:21:0f:8f:12:9c:93:cc:d6:
         f6:8a:22:3c:4c:31:80:fb:eb:24:c4:31:ae:3f:2d:46:ce:d9:
         af:78:dd:ad:d2:e4:b6:2c:12:82:cd:64:e6:b1:04:04:e3:6f:
         c2:45:d4:6a:d0:99:9e:f5:14:09:c0:a6:2f:22:d8:67:ce:b9:
         f9:a0:4c:e7:36:e4:a1:0d:77:d5:f9:e1:5e:73:37:5d:88:ed:
         ec:dd:cb:82:76:15:f7:2b:32:aa:d0:1f:a6:6c:80:30:c8:00:
         c6:d9:8c:cf:49:cf:e6:a1:c3:1a:1a:04:6b:8c:74:6c:51:89:
         6a:25:33:00:ce:00:98:0f:8e:79:b7:79:33:50:23:cd:83:78:
         7e:92:60:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:11:42 2025 by rpki-client