Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
File:                     CjC2NdNXRo1_ky0-H1nVNzz59GU.mft (raw, json)
Hash identifier:          T7/hrMw0CJEq9s2OvFz6K27x0BMqf235wQEteJAJrh8=
Subject key identifier:   88:8B:73:31:69:D0:A4:30:6F:A9:D7:72:5C:C5:AB:0B:C6:5B:B8:9C
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Certificate issuer:       /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial:       0196BE933948F61779D76DD77AC2F5A262C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
Manifest number:          1540
Signing time:             Sun 11 May 2025 09:00:41 +0000
Manifest this update:     Sun 11 May 2025 09:00:41 +0000
Manifest next update:     Mon 12 May 2025 09:00:41 +0000
Files and hashes:         1: 43hLg4tOOv7SoGn-XftXhK9a-NE.roa (hash: fTCV6jJu7vHlfoEQtZwLz0NW5RubKgDanJcVlL86nkI=)
                          2: CjC2NdNXRo1_ky0-H1nVNzz59GU.crl (hash: PL3qP0riyriHSGZ2qWvcXh5eLcP7gj4gt9Nep1T5PI0=)
                          3: RservbDL-BVcPWiT5GY7GGmaqNg.roa (hash: 6kmm57SMuR609w7NX9SqjiOxJz1WjZ0ODARP+aV0g60=)
                          4: SpbFu7cu1hyzijH4Dcq1zO1wfcw.roa (hash: s7llN+uwGj/YltcQ4pU6jWvPZRuwP/LeuHpZEDrxXAg=)
                          5: nvYcptlp0PUhINL8di32N1PMAlE.roa (hash: pt/p/I9QSvcAJg81FJVs1CNUkiY+sFdwtB0jYLQnIjQ=)
                          6: wNh0jMOPHCGGtlAG3PiNBZzjcno.roa (hash: NaE5nCG+kp0N7iEIRzHU/rkLw5QEKaxFzRCaxMZ3BjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:93:39:48:f6:17:79:d7:6d:d7:7a:c2:f5:a2:62:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
        Validity
            Not Before: May 11 09:00:41 2025 GMT
            Not After : May 12 09:00:41 2025 GMT
        Subject: CN=888b733169d0a4306fa9d7725cc5ab0bc65bb89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c1:f8:fa:f3:2b:ae:92:5c:46:e6:e6:3a:c5:
                    d5:78:72:05:60:a9:77:93:5b:e2:e3:7b:0c:a6:f6:
                    27:81:32:e5:ab:f5:5c:8c:d9:88:38:d0:43:96:58:
                    68:19:bd:1a:91:98:d7:2b:0b:84:94:21:25:4e:35:
                    d2:4b:c7:41:0f:2e:b9:3f:a3:57:e8:fa:85:0f:19:
                    cf:15:ce:57:71:34:f2:f0:46:be:ea:5c:0f:80:98:
                    9b:08:ee:0a:d2:1f:1d:cb:8c:27:cc:ee:77:d0:07:
                    79:66:bb:3b:b6:f9:0d:57:94:b4:b3:0a:c0:6e:e5:
                    19:43:9a:a7:49:34:20:62:51:f4:3d:db:50:6a:97:
                    20:a5:a8:ef:be:7a:e3:ea:18:1f:32:d0:bb:35:35:
                    e0:ce:7b:46:5f:c1:26:7a:48:f0:d4:f6:d2:20:25:
                    bd:f3:ff:ad:5b:cf:7f:58:32:21:a9:13:79:b9:7f:
                    02:df:42:90:97:20:cc:7b:6c:7d:f1:52:ea:29:37:
                    53:5c:f0:f8:19:97:58:2d:ac:d7:fb:f1:fd:73:42:
                    98:b9:e8:72:7f:ee:e3:ae:74:21:e1:39:2f:37:44:
                    86:85:8b:5d:a7:7b:1d:6d:a2:32:05:9d:63:7b:7c:
                    ee:e3:b6:f3:1b:89:45:48:d7:93:42:99:a7:8f:47:
                    93:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8B:73:31:69:D0:A4:30:6F:A9:D7:72:5C:C5:AB:0B:C6:5B:B8:9C
            X509v3 Authority Key Identifier:
                keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:bd:20:8a:c2:55:64:b4:7c:ee:0d:48:e4:3b:fa:64:ec:5e:
         ec:8b:6e:de:68:ce:68:25:52:d8:f0:10:cf:86:e3:0d:7d:89:
         f8:4a:1f:ca:4a:24:af:1a:30:01:66:4f:74:d6:8b:f4:56:99:
         bc:cb:19:d1:65:5c:e4:bd:43:45:54:32:5e:01:6f:ee:ee:7d:
         b1:fd:09:6f:e4:ac:2f:cb:7d:f9:01:11:08:b7:d1:54:66:1a:
         2f:71:17:c9:2e:a3:89:57:c1:1a:51:19:af:fc:e8:73:b2:7f:
         19:8a:2a:a1:09:dc:ee:10:18:f5:87:a4:a9:d8:70:a2:1c:7d:
         c3:78:2e:c6:23:5a:46:37:32:59:48:54:c2:b5:9e:ad:05:77:
         b8:13:f5:51:4c:10:d2:28:b6:f3:e8:dd:05:74:23:24:56:50:
         bc:37:f8:0f:d6:6a:28:71:40:7b:dd:96:c7:11:21:3b:20:02:
         d6:90:e2:73:ce:16:3f:13:6d:5d:f2:fe:fc:3f:13:81:08:10:
         8e:d3:85:47:33:73:3f:0f:6c:44:21:2c:69:a9:5e:03:ac:3b:
         16:51:ac:93:6f:79:36:da:17:34:f5:3d:86:79:35:7d:90:70:
         1e:e4:04:cc:03:5a:ee:a4:1b:e7:c7:f6:6d:5f:87:b7:20:e9:
         70:99:f5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:49:03 2025 by rpki-client