Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
File:                     A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft (raw, json)
Hash identifier:          m8FdbOoBD/SjGmA/Pl8zdcMUs5TPyXtLF7G39yc8PTo=
Subject key identifier:   6D:64:4D:CB:B6:58:C3:E1:90:3D:1A:B0:80:D5:6E:6B:A9:90:23:9A
Authority key identifier: 03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
Certificate issuer:       /CN=039b01353e51a3a87e835963bd8833ed81853d77
Certificate serial:       0196C0B8BBC90574EE1EFA3A7C8797508087
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
Manifest number:          1537
Signing time:             Sun 11 May 2025 19:00:54 +0000
Manifest this update:     Sun 11 May 2025 19:00:54 +0000
Manifest next update:     Mon 12 May 2025 19:00:54 +0000
Files and hashes:         1: A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl (hash: /2WlOSOW6aPcP3s+nNF/nINv4TR/6FZBXsO+JvjtyR4=)
                          2: aFAF2a0pf2_iQW_Ah5PtSVGIIsU.roa (hash: CRoJAvxL/AEhIjj3BGa3AOSm/IAStthRp+t6FhfWlZc=)
                          3: g0yUXdYSuBEU7wpjF_M-dIueuPE.roa (hash: PIV5IbeiUmm5gi+hdOXD1voi9O/jmaGDnpkEJZ2+Rwg=)
                          4: kLgY3X5leR0VtUr8VPTZGFKR1kc.roa (hash: LBSLrR+c9iEdXN69yxUzikKKOnVtulDFWy14eJ7VP9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:b8:bb:c9:05:74:ee:1e:fa:3a:7c:87:97:50:80:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039b01353e51a3a87e835963bd8833ed81853d77
        Validity
            Not Before: May 11 19:00:54 2025 GMT
            Not After : May 12 19:00:54 2025 GMT
        Subject: CN=6d644dcbb658c3e1903d1ab080d56e6ba990239a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b7:38:01:33:df:fe:df:ca:5b:4b:2e:81:c2:
                    0e:8c:1f:35:03:61:06:e0:04:09:8c:7d:5c:30:68:
                    30:56:33:4b:0f:b9:34:3f:8e:6c:67:54:f2:94:ea:
                    05:d8:d7:29:c5:ec:1c:f2:91:ff:8b:c5:fd:99:6f:
                    74:dd:a3:f5:0f:63:9e:81:78:75:85:48:eb:f3:ca:
                    66:e5:34:66:49:60:b0:c3:95:2c:4c:07:ea:47:6c:
                    47:07:9c:55:bc:0c:45:2e:71:7f:eb:f7:b4:50:dc:
                    08:32:ba:ee:4d:df:73:e8:86:ec:a8:d0:65:c3:e4:
                    c4:88:a2:e6:c2:3a:3c:35:35:cf:02:f9:17:10:b6:
                    df:1a:a2:23:cf:2d:92:29:07:da:78:0f:f5:18:c3:
                    70:89:f8:e1:b7:e6:3c:ca:64:1d:d9:1f:3e:d6:58:
                    a1:a4:64:23:30:da:9e:0b:40:c8:ff:9f:bd:14:78:
                    55:93:ff:67:ba:11:79:21:1f:28:a0:db:02:fc:b1:
                    ed:91:f2:52:56:7a:03:7c:87:3d:86:c7:a6:8b:78:
                    97:92:2a:00:86:93:60:03:9d:39:f0:30:58:d8:4b:
                    44:99:66:9a:37:62:6d:1a:bb:f8:65:48:ad:b5:f4:
                    da:ea:87:bd:dd:4f:fd:21:cd:c3:fe:08:51:4b:d4:
                    ec:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:64:4D:CB:B6:58:C3:E1:90:3D:1A:B0:80:D5:6E:6B:A9:90:23:9A
            X509v3 Authority Key Identifier:
                keyid:03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f8:2e:7e:8a:f1:8e:ce:a1:66:fe:e9:2c:66:1a:11:29:f9:
         7c:af:27:ad:91:76:a7:69:b6:13:c2:b6:cf:38:c7:fb:94:0b:
         80:b1:f3:65:b8:e2:8d:bf:e1:34:33:33:4d:65:f0:f0:b4:41:
         59:1a:01:b9:94:2b:c9:2e:fc:92:7b:f0:e5:56:93:6d:cb:07:
         1c:2d:8b:14:2e:48:7e:59:29:06:06:4f:3a:72:30:51:53:fe:
         30:c3:12:18:23:cf:dc:9e:fb:1e:e5:1c:be:3a:c5:a1:5b:1f:
         52:10:ba:f3:e6:b2:a6:1a:0e:6b:e7:40:56:05:2b:1c:b2:28:
         27:a3:2d:65:79:e4:eb:13:be:2f:29:7d:10:7f:d9:db:1c:96:
         16:c3:7d:56:22:fd:35:a1:57:dc:f8:5e:04:f6:c2:f1:90:74:
         16:7a:63:34:9f:42:c8:2a:ee:bb:3c:11:d0:db:33:dc:7d:ee:
         88:0d:6d:7a:0b:28:2e:e7:27:25:9f:ec:c4:69:b6:3f:44:46:
         9b:f9:d2:43:ae:9a:58:4f:5c:47:c2:be:bf:b5:e9:57:c9:21:
         86:51:d7:d4:72:41:75:e2:7f:60:a5:2a:f5:18:ed:a3:ba:26:
         79:5c:86:48:e2:02:36:3f:10:75:50:55:10:ab:19:42:8a:43:
         5c:06:14:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:01:30 2025 by rpki-client