Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
File:                     hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft (raw, json)
Hash identifier:          MYYwBwpqbqxJH4H2Tfz5Z7J9WjlNVX+sgyIxcJ9sxHA=
Subject key identifier:   23:03:D5:94:E4:F5:FF:80:6B:52:91:62:B1:CB:9E:65:4E:AC:78:51
Authority key identifier: 87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
Certificate issuer:       /CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Certificate serial:       0196C4CC00B8EF3B93B8FCAD311642A84B3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
Manifest number:          1537
Signing time:             Mon 12 May 2025 14:00:25 +0000
Manifest this update:     Mon 12 May 2025 14:00:25 +0000
Manifest next update:     Tue 13 May 2025 14:00:25 +0000
Files and hashes:         1: C_dV-a8NL19EWcN2B58oBMal8wA.roa (hash: cfrqdXpjr4fkDxvy5PbVD58Is9FxlX0Bf3Low+2bVCc=)
                          2: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl (hash: GtwkyIwDEKX/2STVVvXOy5lCbd1OjxrHJxC+45s83Sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:cc:00:b8:ef:3b:93:b8:fc:ad:31:16:42:a8:4b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
        Validity
            Not Before: May 12 14:00:25 2025 GMT
            Not After : May 13 14:00:25 2025 GMT
        Subject: CN=2303d594e4f5ff806b529162b1cb9e654eac7851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c9:e2:de:6d:f2:4e:43:4b:e8:66:23:88:d1:
                    a7:ea:2e:b6:e6:ea:c9:5b:c3:b1:75:2c:58:ec:1c:
                    b1:9e:72:53:3b:e7:f6:db:de:da:66:d4:55:fa:bf:
                    db:88:5c:42:16:1e:ec:8b:09:2b:8b:aa:ef:45:cf:
                    0b:54:6f:5a:57:46:8d:5a:6f:bd:38:3b:c6:04:25:
                    bf:e9:a5:0b:d8:d6:7f:1a:df:a1:37:e7:5f:f4:27:
                    ba:c3:cb:74:1d:e0:a6:fd:14:06:8c:2e:98:d0:70:
                    08:b7:4a:64:37:cc:7a:a6:12:4a:5b:25:28:63:30:
                    ff:7a:f6:51:69:5d:0f:a9:04:74:44:05:09:68:ad:
                    96:77:74:94:ae:a1:83:28:12:8b:20:ab:39:57:bc:
                    e5:28:1f:40:79:73:fb:9e:ae:de:83:8d:8a:36:4d:
                    7f:4f:21:cc:25:74:8d:dd:49:ca:ed:47:27:81:8b:
                    b4:07:71:cf:f0:80:53:c5:f7:80:cf:49:39:0f:1b:
                    6d:e4:68:7a:5f:2e:39:2a:40:da:44:01:ed:08:48:
                    c2:7f:a8:e6:80:9b:dd:0a:d6:26:3b:39:3d:c0:97:
                    8b:45:13:99:0d:41:02:33:d8:b7:80:c8:94:cf:4d:
                    40:42:76:c2:0a:1e:d6:b3:f0:b7:83:ec:05:28:f3:
                    63:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:03:D5:94:E4:F5:FF:80:6B:52:91:62:B1:CB:9E:65:4E:AC:78:51
            X509v3 Authority Key Identifier:
                keyid:87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:bf:94:d8:6d:3e:c1:73:de:fe:f7:d0:a4:f3:71:bf:6e:69:
         c5:cd:6b:90:de:29:f9:d8:c5:7a:8d:99:3a:a1:0e:9c:9e:2f:
         3c:6e:c0:c0:93:ad:37:e6:d2:fb:63:70:5c:b9:46:a4:28:d7:
         d2:98:09:f5:b9:21:bc:c3:11:25:05:2a:37:67:bf:b6:0c:20:
         1f:ff:9e:00:4b:08:5a:05:9d:c1:b2:8f:4f:ee:8f:0b:a2:ad:
         e0:4c:80:62:64:90:75:6a:de:02:fb:fa:61:74:3f:11:6f:af:
         25:b7:31:c7:46:f1:3e:76:69:52:11:ef:87:04:8d:ab:36:1c:
         ba:00:24:e6:6e:68:50:f4:38:83:e5:e0:80:23:be:4f:86:5e:
         1c:a5:32:c5:f9:22:63:57:58:e7:3e:a0:c2:e8:b3:15:63:6c:
         a0:36:50:3c:73:71:43:9a:93:4c:b4:a9:60:63:e7:ac:fd:ff:
         ea:e1:20:8d:8d:12:99:72:d2:0e:37:7e:73:46:c8:36:e9:3f:
         90:46:da:97:99:68:9a:ee:dc:a9:c3:ab:ab:39:8b:bf:9e:c0:
         9c:36:f7:db:55:a2:d0:3e:56:d4:af:62:3a:59:2a:25:6f:c0:
         89:b9:4d:fc:89:4f:c5:d0:02:21:39:e6:dd:ca:3a:90:6c:01:
         e9:d3:cb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:04:56 2025 by rpki-client