Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
File:                     cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft (raw, json)
Hash identifier:          8RGsR3BuRPKpuOF4L4YK++R/zSOfJw17O+DKe2WWY5A=
Subject key identifier:   93:F3:87:F8:B2:83:1B:E2:71:CB:84:77:AB:63:21:17:17:A0:A9:38
Authority key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
Certificate issuer:       /CN=7015ed275005408d2a86a2303701744430eda34a
Certificate serial:       0196D219F4FEE881E25792B42A748DF33239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
Manifest number:          1257
Signing time:             Thu 15 May 2025 04:00:38 +0000
Manifest this update:     Thu 15 May 2025 04:00:38 +0000
Manifest next update:     Fri 16 May 2025 04:00:38 +0000
Files and hashes:         1: HSf-a0eTcicBmzn4zJZRWXp92WE.roa (hash: vvlQV7Jpi0XVGKQA4HOtArKcD3xjeMm171XNaqqkcT0=)
                          2: a5SThzVTiz_HAgBiI_2C-cBicRU.roa (hash: cXR8rbnSwDhsbHRTW7l3Pqi32yZZ/V3whRHlpIMP7KU=)
                          3: cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl (hash: 6WPTtMceHptsMKmo2dD93cmwCjxfrvCgPPCASV6HV7A=)
                          4: e8yOi_zjBd2PptdyDsyc4j2wCEY.roa (hash: gTBImvzLksx7wicV0C8XssUh2BDoKizjYT0J7tkJ1HY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d2:19:f4:fe:e8:81:e2:57:92:b4:2a:74:8d:f3:32:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7015ed275005408d2a86a2303701744430eda34a
        Validity
            Not Before: May 15 04:00:38 2025 GMT
            Not After : May 16 04:00:38 2025 GMT
        Subject: CN=93f387f8b2831be271cb8477ab63211717a0a938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5e:73:5f:1c:40:ab:b1:d9:16:f9:e4:07:a1:
                    b6:34:25:08:47:da:d8:dd:a7:4e:20:28:3c:e9:13:
                    cd:bc:f3:82:2e:e3:78:bb:ec:e9:0c:56:43:64:6f:
                    a0:8a:72:18:14:23:a4:e3:1d:b7:26:f6:dc:0c:49:
                    d4:12:e9:b7:a4:29:c5:a0:c4:fa:37:54:e9:28:ca:
                    87:ca:d9:48:79:78:2e:bd:16:ed:d2:79:83:e0:e0:
                    0d:a0:e4:61:71:92:6a:d8:ef:61:96:ab:2e:9a:7d:
                    26:28:f0:70:55:61:51:c6:44:95:b8:67:e4:4a:33:
                    ba:06:b8:6b:51:3b:81:ef:4a:86:1b:9c:75:a2:3d:
                    17:28:80:c5:6f:ff:d4:55:fa:bb:82:1e:6a:b2:d7:
                    a8:2d:ac:c6:8c:5f:0c:fc:fa:b2:11:a9:67:7d:52:
                    9e:df:72:8e:ba:66:a7:ee:a7:c8:3a:72:85:8b:38:
                    07:79:b6:fa:5a:60:aa:67:2d:ee:fe:a9:f6:27:65:
                    89:bb:5f:33:71:bc:01:82:a7:c9:36:9e:e0:cc:60:
                    b7:39:16:1a:18:23:58:ce:11:1b:89:05:55:5f:5f:
                    5d:98:c7:17:09:fb:e2:f4:be:6e:60:3e:76:e7:dd:
                    09:ce:88:9f:27:25:d3:5e:09:4e:39:fb:3e:f9:fc:
                    ea:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F3:87:F8:B2:83:1B:E2:71:CB:84:77:AB:63:21:17:17:A0:A9:38
            X509v3 Authority Key Identifier:
                keyid:70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:63:72:ab:5e:6a:e5:c9:de:d8:ca:66:e2:2f:b1:09:9f:fe:
         cc:28:3b:17:8f:e3:66:df:f8:56:51:24:7b:22:c5:3e:57:4e:
         a0:63:91:1a:7c:89:a0:18:65:35:24:32:db:9b:c6:89:e3:78:
         c6:a5:94:05:84:60:d2:be:b7:af:0f:00:10:0b:bb:79:53:ef:
         47:33:81:19:54:a1:e1:a5:d1:5f:10:54:1e:8c:0e:df:9f:f7:
         ea:ad:22:d4:11:6a:51:3b:01:46:bc:96:73:33:fd:1e:cc:ca:
         13:2e:c9:e4:d3:98:96:7a:2b:12:4e:16:c9:08:db:97:6d:e7:
         e0:15:27:3f:ca:ad:c1:80:92:d3:f5:6c:d4:27:70:52:10:a5:
         cb:cf:68:3d:0b:3a:aa:2f:c8:e0:aa:40:f8:70:52:c6:44:59:
         a9:9b:04:85:40:8f:cd:78:0b:b2:62:72:1a:1c:72:05:fc:58:
         b6:b3:32:11:32:f5:fb:3b:05:20:b7:e7:4d:a3:29:2e:b8:09:
         da:74:e4:54:e5:9e:1c:16:c3:ff:a0:45:da:1f:91:9d:a9:ac:
         d1:c0:9b:c3:1c:87:c5:fd:32:6c:c4:5f:63:3e:9a:8d:c5:62:
         05:f0:33:4f:29:ab:a0:ab:96:24:73:93:9d:2e:20:f7:82:16:
         13:7c:0b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:57:24 2025 by rpki-client