Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
File:                     1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft (raw, json)
Hash identifier:          cLULCW/1i6huMnprKKV0gHzP4QPpnPsrQX0Jv3J+Y78=
Subject key identifier:   EF:83:16:A0:BA:D1:D9:E4:B1:EB:8C:33:CA:30:2B:68:41:9C:2C:11
Authority key identifier: FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22
Certificate issuer:       /CN=fb02f648de95b88479364346ed01e78769577922
Certificate serial:       0196A5E6271F6A70F345462870BD217BF5C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
Manifest number:          1524
Signing time:             Tue 06 May 2025 14:00:45 +0000
Manifest this update:     Tue 06 May 2025 14:00:45 +0000
Manifest next update:     Wed 07 May 2025 14:00:45 +0000
Files and hashes:         1: 1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl (hash: 9Ixsr17P0rI5JgjaHDplLnEHQJ0dvEyjnbdIg+AhFx0=)
                          2: 3vK4gZC4TPB0-MQ6z0IE1oo3VSw.roa (hash: j0jyYdSsynnhoRf7eCK9ZvXX/Rp4LU5VAHZHpRm0UEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:e6:27:1f:6a:70:f3:45:46:28:70:bd:21:7b:f5:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb02f648de95b88479364346ed01e78769577922
        Validity
            Not Before: May  6 14:00:45 2025 GMT
            Not After : May  7 14:00:45 2025 GMT
        Subject: CN=ef8316a0bad1d9e4b1eb8c33ca302b68419c2c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:18:7e:c8:33:bd:02:82:bd:2c:b5:f3:2f:
                    60:4e:e8:e8:30:a9:7c:ff:be:a8:aa:c0:17:54:1f:
                    7c:3c:08:e2:40:f4:bf:cb:20:28:d9:dc:81:51:5f:
                    77:49:84:60:50:f3:7c:b9:1d:55:1c:b4:52:08:48:
                    86:36:b3:89:98:74:11:94:77:eb:69:76:b0:ea:d3:
                    7a:4a:be:09:1c:67:aa:e3:2d:a7:e6:0e:d3:76:8b:
                    a6:34:ee:60:d2:87:96:02:7d:7f:9f:9e:13:cb:45:
                    e0:e7:eb:ce:7d:68:a8:2f:4a:19:09:fd:9d:d4:5b:
                    f7:57:bc:b8:6c:82:12:33:a5:bc:82:1b:44:af:b0:
                    67:95:07:33:73:c1:44:29:33:96:a4:13:80:e1:ad:
                    73:1d:db:1a:cc:be:b9:29:1e:a5:16:37:2e:41:2d:
                    d0:9d:49:24:f7:c7:d0:c0:86:b7:4f:f4:54:16:6c:
                    aa:55:9a:0a:dd:5f:ce:ee:58:78:c2:50:66:8a:b7:
                    9e:40:42:68:68:56:45:47:89:31:3a:32:7d:04:14:
                    83:b6:0b:9e:99:05:5a:98:55:32:83:b9:fd:5b:1e:
                    11:d7:72:2b:89:b0:65:29:28:a6:d6:51:11:07:af:
                    e0:1c:58:af:41:30:9b:70:57:60:38:d9:bd:08:36:
                    91:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:83:16:A0:BA:D1:D9:E4:B1:EB:8C:33:CA:30:2B:68:41:9C:2C:11
            X509v3 Authority Key Identifier:
                keyid:FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a6:0d:c4:5b:db:5d:75:3c:ad:d8:15:ce:6d:dd:e3:9a:63:
         cd:fd:75:2c:c6:e8:9b:f5:46:7f:1e:7b:a1:df:eb:c5:20:59:
         9a:f5:4f:22:6d:d3:1b:04:ec:c7:a3:d8:e7:9e:3d:98:68:ab:
         b5:d7:47:56:a7:5b:74:15:34:73:58:15:7e:2a:36:d8:d7:80:
         e0:a4:a9:57:6d:b8:50:de:a7:d1:de:eb:2e:d3:32:67:c6:c4:
         9e:1b:4c:18:cc:b8:24:67:a2:ee:ef:d6:a3:a6:9e:a4:fa:db:
         f1:a5:23:89:4c:e9:b9:47:ab:3c:96:a0:9d:24:7a:22:18:e7:
         96:1b:64:32:c8:86:12:fa:a9:68:6e:27:84:aa:67:17:93:f7:
         35:24:43:ac:9b:e2:c5:b8:5c:7b:18:d4:89:72:26:a5:e3:92:
         ab:8d:34:62:9f:83:b8:4a:e8:fb:4c:d3:73:3d:26:33:3d:7e:
         ff:26:c3:2e:15:7f:06:9f:f5:f9:b9:ba:7c:bd:4a:40:bd:76:
         bd:ca:c4:08:7b:ef:ea:24:58:22:56:46:4c:e0:56:c5:6e:25:
         9b:95:7b:49:67:23:e5:c4:73:23:4c:30:17:27:8a:e0:1e:8a:
         62:3e:ea:70:76:07:2c:f4:d9:6a:69:f5:95:88:02:4a:81:ba:
         4f:6e:53:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:54:42 2025 by rpki-client