Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
File:                     fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft (raw, json)
Hash identifier:          BHVhkIC4+z0CaVtTfRgax8i2/iOkIe4oXpruvGiFQek=
Subject key identifier:   BA:50:DF:F2:0A:43:DC:50:25:2A:3B:9A:93:C4:52:BE:F9:D2:5C:6E
Authority key identifier: 7C:CD:0C:AC:FA:FA:2E:0D:31:49:5D:D9:50:F7:6A:F5:F9:8B:A5:D7
Certificate issuer:       /CN=7ccd0cacfafa2e0d31495dd950f76af5f98ba5d7
Certificate serial:       0196A79D8758EC5D4D6A5D3B8E6509EBC09E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
Manifest number:          1530
Signing time:             Tue 06 May 2025 22:00:40 +0000
Manifest this update:     Tue 06 May 2025 22:00:40 +0000
Manifest next update:     Wed 07 May 2025 22:00:40 +0000
Files and hashes:         1: 9f63Sb9a540JPUwazld4MMVS_iE.roa (hash: DIORsJwOy+2Zy+DITLzusBKnfVOGOXxgm47fM/VbAWQ=)
                          2: fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl (hash: VP+oamOt8L4XRfrxCFpicLenKohz77M1b4j0hWwkLN0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 22:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:9d:87:58:ec:5d:4d:6a:5d:3b:8e:65:09:eb:c0:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ccd0cacfafa2e0d31495dd950f76af5f98ba5d7
        Validity
            Not Before: May  6 22:00:40 2025 GMT
            Not After : May  7 22:00:40 2025 GMT
        Subject: CN=ba50dff20a43dc50252a3b9a93c452bef9d25c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b1:c9:9a:88:41:bc:40:71:4c:07:b5:5c:d5:
                    53:a8:24:c6:c3:9a:0c:5f:61:93:d5:ff:e5:32:af:
                    c9:8c:12:5c:7a:11:85:39:46:bc:95:82:52:94:81:
                    8b:2b:3b:b9:e4:54:f6:39:17:1a:21:8c:eb:bb:3c:
                    21:cb:80:92:47:9b:bb:7d:1e:13:f3:ae:46:b5:cc:
                    2c:e4:ec:86:04:93:6a:59:87:56:80:fa:9c:f0:c1:
                    d5:8c:77:88:d3:d5:17:aa:f6:ef:78:78:29:09:8b:
                    65:16:1e:02:86:6d:bc:a5:0d:9f:fb:25:28:06:51:
                    ff:6f:eb:cd:59:71:61:47:08:bf:05:35:60:30:3e:
                    04:ce:62:e4:62:09:f6:da:3f:1b:2d:36:ca:f2:5a:
                    dc:13:fe:33:79:f7:01:7b:92:f7:22:00:3e:5f:8a:
                    eb:5c:45:95:b5:a5:ce:7b:54:05:d5:16:9a:94:ce:
                    de:29:29:61:97:aa:bd:43:16:e7:21:c7:bf:00:92:
                    6d:f7:4d:bb:fd:df:b0:f5:0d:8f:0f:74:cd:c3:11:
                    6f:bf:a8:37:3d:59:a5:50:06:06:65:1e:f3:a8:fb:
                    ac:ff:a1:09:9a:e7:36:bb:72:d7:3b:ab:9a:83:6f:
                    cf:df:a2:0f:8a:69:e4:cd:8e:5c:c7:ad:3e:d1:99:
                    fd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:50:DF:F2:0A:43:DC:50:25:2A:3B:9A:93:C4:52:BE:F9:D2:5C:6E
            X509v3 Authority Key Identifier:
                keyid:7C:CD:0C:AC:FA:FA:2E:0D:31:49:5D:D9:50:F7:6A:F5:F9:8B:A5:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:91:51:7b:a3:5c:0e:9f:c1:ef:44:92:83:15:57:05:3f:da:
         0e:1e:2c:02:9c:4a:8c:5d:5e:ca:ce:79:6e:58:8e:0d:51:c8:
         5e:90:e9:18:f1:2b:c0:cb:27:c3:48:af:97:9c:54:a1:b9:86:
         7e:a2:6c:68:c3:37:6e:20:54:d8:34:33:c3:18:f2:7f:a8:b3:
         20:b9:5d:9b:e8:f7:a3:69:92:c4:21:f9:73:d6:b7:33:8f:16:
         a7:97:70:66:0f:10:d6:3c:7d:bc:3c:f2:66:57:09:5e:f2:e1:
         55:f7:08:63:69:9a:54:32:0b:bb:b3:69:5b:72:1f:78:2f:fe:
         b5:74:2d:e9:eb:86:52:c5:39:50:37:da:07:23:36:77:64:f8:
         6e:b0:9a:ba:1d:48:d9:6d:ee:fd:cd:2d:c3:38:e1:70:a9:07:
         83:94:50:57:cf:0f:22:55:3d:de:1e:c8:b9:5d:b4:3b:c1:c0:
         6b:b0:46:fa:19:3a:bd:87:90:e3:d6:e9:2e:68:04:b4:92:70:
         f1:5b:f5:5b:90:d4:44:3c:c9:21:42:a2:84:95:1f:63:6c:9d:
         cc:9e:be:fb:96:da:17:c5:53:4a:70:7f:14:0c:7b:9f:df:ad:
         e3:8b:98:14:37:72:32:a2:99:a9:63:55:19:24:fa:37:32:db:
         d2:17:75:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:52:09 2025 by rpki-client