Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
File:                     gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft (raw, json)
Hash identifier:          8njkbf4NSwpcyUWmobQnMhMTTU2iBE8VGjn8IuesefE=
Subject key identifier:   40:D5:EE:8A:2C:33:7A:3C:9C:1D:02:D0:97:83:8B:CA:A3:A0:7B:B4
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Certificate issuer:       /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial:       0196D6D21F0A14CC5A2A717015D7FF604CD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
Manifest number:          154D
Signing time:             Fri 16 May 2025 02:00:16 +0000
Manifest this update:     Fri 16 May 2025 02:00:16 +0000
Manifest next update:     Sat 17 May 2025 02:00:16 +0000
Files and hashes:         1: NxiHrRFmOKs6DxSydD2sJuXQJK8.roa (hash: iNvcUhlJ9Yd5axlJbt+P6uyRKrZKBuBqEJ75zpPuiMk=)
                          2: gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl (hash: 1Y0czbVWskSEuKVKmpF92lF7TbI4Yu5v3Ri2cWdpbXI=)
                          3: p-bGa3FNaz50p4t1OSNDAgoc_0s.roa (hash: kx//HiaOgl7Q7IqXK9lyKotPpA+1c6CW7SCJbi6+JVE=)
                          4: pHamM_FeTuziFQi2w75B0pezcGY.roa (hash: YLgRRlx24P8L2COTLzTtp0xHAktWAujjPd4Z7/lgx3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d6:d2:1f:0a:14:cc:5a:2a:71:70:15:d7:ff:60:4c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
        Validity
            Not Before: May 16 02:00:16 2025 GMT
            Not After : May 17 02:00:16 2025 GMT
        Subject: CN=40d5ee8a2c337a3c9c1d02d097838bcaa3a07bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:7a:a1:05:b6:e6:28:43:7c:4f:60:7e:54:
                    8e:d3:e0:03:19:8d:14:60:d8:b6:15:e0:06:47:2f:
                    45:7f:a7:94:a5:8b:3b:fd:f3:e7:90:a1:47:99:44:
                    a2:75:b2:b0:da:04:80:3c:2d:d5:d6:2f:c0:50:36:
                    2c:b5:03:14:8d:3f:07:48:60:7d:a6:1d:f7:6a:14:
                    f8:ba:76:fa:91:23:ae:3e:3d:e0:5d:e8:ed:b7:9e:
                    78:d7:e7:7d:f6:11:ec:82:8d:2b:19:6b:16:b4:9c:
                    e7:eb:9d:d7:d0:bd:44:5a:78:b8:2c:93:38:ba:e2:
                    7b:6f:ef:ca:95:a8:ac:76:99:ca:db:41:cc:1f:32:
                    d6:c1:56:0f:91:48:19:89:72:10:8b:cf:42:8b:2d:
                    e3:e1:a9:ad:33:68:0a:79:54:68:0b:50:b7:8e:a8:
                    f5:7d:26:2b:32:48:4e:9c:96:90:0f:aa:bc:fe:fe:
                    97:d7:a4:9e:2a:4e:07:fd:15:c7:0e:94:48:ef:79:
                    6d:df:c1:b4:a9:eb:9c:70:0f:0d:62:42:7e:b1:3b:
                    2c:c7:57:3b:0c:c9:e7:20:b6:22:03:7b:19:ad:42:
                    a8:95:60:5a:25:3e:08:f5:47:f6:e4:c3:ad:d3:5c:
                    dc:9c:b9:58:5b:9e:cb:d6:ed:c1:1b:89:ad:f8:29:
                    37:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D5:EE:8A:2C:33:7A:3C:9C:1D:02:D0:97:83:8B:CA:A3:A0:7B:B4
            X509v3 Authority Key Identifier:
                keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b4:f7:64:1e:87:2f:c4:2e:0e:7f:b0:49:f3:a6:96:0e:fd:
         06:58:5b:07:d3:5a:47:73:67:bf:27:26:e4:3a:fd:e5:30:8e:
         7c:a2:05:75:82:01:2e:51:dc:52:62:4f:89:aa:25:c0:d5:83:
         f2:a5:ac:c9:df:c1:6c:3e:5c:39:a5:9c:d1:2f:83:13:50:a6:
         7f:5c:58:2d:4c:6d:c2:ab:39:8f:a7:78:22:ed:a8:14:c6:a4:
         b8:2d:08:92:ea:72:d7:bc:7c:78:79:4f:7a:33:2c:03:d9:08:
         e4:2a:da:ed:3d:fa:23:51:b6:5a:bf:44:0e:6d:2a:71:1f:0b:
         70:bb:30:6a:2b:cd:99:fd:62:cd:9f:93:81:4a:fc:54:e6:d8:
         eb:1d:26:22:aa:b1:90:45:ea:da:aa:03:48:c2:ea:0c:8e:e5:
         18:0b:a7:3d:cd:2a:bd:b2:cc:ec:f5:d8:17:45:c6:7b:2c:41:
         67:a8:fa:15:d3:62:a8:27:df:ca:9b:c5:aa:1e:2d:e0:2c:d2:
         db:09:62:ff:2d:16:c3:8c:0a:cc:3d:26:92:f0:87:af:e9:58:
         42:62:48:07:33:ad:95:0f:7a:9c:ee:e3:28:0d:8b:e9:de:00:
         41:4a:a0:3a:af:dc:46:f6:5d:4f:09:bb:26:46:46:72:93:7a:
         ca:fc:4b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 09:33:31 2025 by rpki-client