Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
File:                     c-FXspGMrcqKWp-8Zul3YIpt9eE.mft (raw, json)
Hash identifier:          WvUbuWwg1MvsbaliGYc3N6sOA1yG8ItvAm80sW8Pg0w=
Subject key identifier:   56:42:2D:37:FA:B8:2C:EB:01:B7:23:B7:17:3A:6C:55:7A:3F:67:F6
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Certificate issuer:       /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial:       0196BA48FCD52DBE9FD9F96DA6B27861455C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
Manifest number:          153B
Signing time:             Sat 10 May 2025 13:01:07 +0000
Manifest this update:     Sat 10 May 2025 13:01:07 +0000
Manifest next update:     Sun 11 May 2025 13:01:07 +0000
Files and hashes:         1: 9Vc3AbW6vlZ_1l6ygzFXdiG_9DU.roa (hash: XyjyaFRHv8L+Xv8vUnenIR3U/Eb6y+TGYMaeT4tV8mY=)
                          2: F8Nk--QAXVfgvDbLL_6xQcd6OeY.roa (hash: B5PNCVqEZ3htMuoUo9SXwMTUf5kV2N6tfRSmohV4ztI=)
                          3: c-FXspGMrcqKWp-8Zul3YIpt9eE.crl (hash: bJni2jk8XngMVQg1xNbxvsjIf99xxNVTwW8DdngYmBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:48:fc:d5:2d:be:9f:d9:f9:6d:a6:b2:78:61:45:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
        Validity
            Not Before: May 10 13:01:07 2025 GMT
            Not After : May 11 13:01:07 2025 GMT
        Subject: CN=56422d37fab82ceb01b723b7173a6c557a3f67f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4f:10:ac:d4:62:0a:ea:f0:f3:ff:bc:30:d7:
                    7d:93:ab:28:9c:38:03:55:cb:b8:1b:77:4f:0c:19:
                    00:eb:ba:b9:ed:d5:f2:37:4f:17:6d:3d:b3:85:af:
                    e1:7f:50:0f:1b:6d:85:53:15:ff:4b:16:e5:be:a3:
                    fb:1b:f2:b9:83:1e:7b:fd:78:38:c9:34:71:d8:da:
                    13:8a:7f:a9:b2:ca:c5:d6:d4:88:a8:62:9b:80:ee:
                    59:7f:68:a1:04:9d:b5:7d:70:05:c5:6f:f1:bf:27:
                    78:92:a7:ed:a4:4e:99:f5:44:3e:45:a2:0a:c0:50:
                    f5:35:49:86:bd:1f:5e:55:12:1f:5a:f8:29:1d:95:
                    41:26:1e:55:7e:53:a5:0f:4e:4f:8d:15:51:f0:bd:
                    f8:e1:2f:63:e5:96:14:95:35:4b:88:62:cc:3a:59:
                    76:d0:e8:6b:42:7d:c7:0b:01:5d:13:5c:e9:4a:e2:
                    4b:a4:f5:3f:0d:33:ee:20:d1:e9:ed:7c:db:f4:a2:
                    9f:3b:ff:05:05:ab:6a:d9:16:12:5d:d3:8c:06:29:
                    99:0d:e2:c6:c4:64:92:21:69:73:88:b6:00:7f:40:
                    4d:5e:3c:f9:21:ed:28:f3:ed:2b:12:7d:c2:e8:f7:
                    ee:33:d5:ae:95:08:6c:18:5b:0d:45:87:78:7e:a8:
                    1b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:42:2D:37:FA:B8:2C:EB:01:B7:23:B7:17:3A:6C:55:7A:3F:67:F6
            X509v3 Authority Key Identifier:
                keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:90:c3:f3:58:75:58:af:38:6b:8a:47:b0:db:6b:bc:b2:db:
         4b:cf:b8:a8:8a:57:1c:3e:b9:24:5d:5a:2c:ce:e1:7a:4b:42:
         8d:aa:6a:60:63:c3:4e:14:c0:e5:54:5d:99:40:a5:16:cf:c9:
         d7:8f:3a:31:f3:b5:81:4d:c0:27:ca:c5:26:bb:dd:26:67:38:
         21:25:5f:dc:f1:4f:15:a0:c2:70:e5:fb:75:be:ba:0d:31:51:
         4a:2c:c2:7c:fc:ce:df:97:e3:bb:ef:c4:ca:29:53:ab:76:7a:
         55:45:2e:71:40:f3:43:df:94:67:30:80:c8:66:61:5f:db:4f:
         aa:27:d6:34:d4:90:38:45:75:ec:9b:83:6c:c8:de:d8:79:92:
         0b:ca:17:e6:34:7e:94:e3:29:b0:8d:ab:fc:ab:59:cd:79:f1:
         ac:25:ec:80:2e:13:a3:84:1b:a9:9c:37:5a:86:9d:c9:55:77:
         16:85:dd:aa:de:00:29:0e:a4:75:b4:85:48:dc:58:65:a3:22:
         7d:57:93:2b:a9:78:08:d5:44:b1:a8:91:5e:87:81:1c:31:fa:
         d7:1d:bf:07:23:8e:0a:69:b8:90:13:d5:b8:e9:21:01:c7:72:
         82:24:47:32:fb:65:2b:a0:e6:06:e9:3a:b9:9e:3a:0d:40:70:
         a8:3e:82:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:08:13 2025 by rpki-client