Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
File:                     yPJYziA-BKM_TpBlEVOyWc_6Pog.mft (raw, json)
Hash identifier:          fze49a0xFvRfSoJXis9swJexpNlKfH406QLHNFsKfGA=
Subject key identifier:   0D:FE:0E:CB:D2:F7:F4:BE:7D:B9:75:C5:08:E8:7C:CE:D8:AD:15:D5
Authority key identifier: C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
Certificate issuer:       /CN=c8f258ce203e04a33f4e90651153b259cffa3e88
Certificate serial:       0196AC1F922F17666FEEE6EBB430300380B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
Manifest number:          1529
Signing time:             Wed 07 May 2025 19:01:12 +0000
Manifest this update:     Wed 07 May 2025 19:01:12 +0000
Manifest next update:     Thu 08 May 2025 19:01:12 +0000
Files and hashes:         1: 3OPKqlzsdO_6FnnigdjEBtH5MGI.roa (hash: TGXodn+4ZnMS0vB8YcYqILiualGqtvptFZ+aYltyIls=)
                          2: DSP2YiR4WzjHqSWGSS08rUQRgbE.roa (hash: wRqBcz801mLsMlnqTiS+wIo1U44VP4wBktKdtKLPifQ=)
                          3: L-DhFAOlHk5rFENU35v4H6Y8kC4.roa (hash: es/wTE6LdxRXaEI3U8d6ZJo/4QzkGb/m+lXYCfWMDmo=)
                          4: yPJYziA-BKM_TpBlEVOyWc_6Pog.crl (hash: bZDtcuwCvCqa8NWQQrVZIMtItTAybqhph5r0vaFJiUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:1f:92:2f:17:66:6f:ee:e6:eb:b4:30:30:03:80:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f258ce203e04a33f4e90651153b259cffa3e88
        Validity
            Not Before: May  7 19:01:12 2025 GMT
            Not After : May  8 19:01:12 2025 GMT
        Subject: CN=0dfe0ecbd2f7f4be7db975c508e87cced8ad15d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:76:14:f9:81:24:78:05:6b:0c:bb:d6:37:bd:
                    21:ea:ba:8b:43:8f:ab:fe:44:5c:42:d3:dd:d7:47:
                    ba:26:ae:f0:49:78:2f:8a:37:81:7e:46:44:37:bf:
                    a7:d9:2b:89:b0:12:76:73:5e:6e:d6:03:1c:06:50:
                    23:b7:7e:a3:3c:1a:b0:da:22:32:65:79:32:42:30:
                    9a:e0:87:aa:b6:be:ba:2f:5b:b6:a2:81:16:90:3b:
                    1f:d4:84:8d:5f:7c:18:a0:ee:e1:b1:42:6d:89:ac:
                    f2:b1:3b:1b:49:68:c1:db:98:82:2e:b0:53:c4:54:
                    50:e1:18:c1:90:eb:ea:df:b5:e3:68:53:8c:82:31:
                    0c:b5:2b:c5:ad:a6:f7:45:9b:52:f8:09:74:76:63:
                    79:4a:a7:c2:e3:c4:ac:4c:ba:62:90:d7:93:68:a7:
                    ac:f1:e2:dd:23:bb:cf:90:da:64:57:31:cb:eb:38:
                    f9:9e:76:c8:7a:84:da:78:01:ee:41:b3:a1:27:50:
                    c1:9d:0c:1b:a2:ee:2f:c5:4b:ee:f2:92:dd:e4:a9:
                    1f:15:3a:17:72:f7:cd:3a:f5:a9:22:8b:1f:9c:a0:
                    32:5b:e3:e2:d4:fc:ba:88:6d:5c:8e:48:c4:de:c4:
                    5e:de:5d:c1:a8:ea:17:59:05:0b:d5:bd:1a:64:80:
                    88:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FE:0E:CB:D2:F7:F4:BE:7D:B9:75:C5:08:E8:7C:CE:D8:AD:15:D5
            X509v3 Authority Key Identifier:
                keyid:C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:85:0a:39:ed:e9:23:fe:c0:51:c8:59:df:53:9b:c1:f9:74:
         72:60:9e:5e:e0:5e:e0:ff:83:68:9c:02:33:22:dd:c7:b2:03:
         14:64:49:ad:04:93:90:03:65:fd:a6:94:5b:35:ae:ba:22:b0:
         35:b2:b3:52:40:01:c9:99:17:89:23:c2:5f:10:1c:27:8d:f4:
         13:a5:2d:38:56:09:f2:4a:15:da:7d:bd:4f:2b:af:84:66:40:
         01:d9:16:f2:8e:10:56:70:43:4f:c6:03:1b:20:d5:be:6c:3b:
         2a:b8:38:50:82:a7:56:fa:02:5d:41:8f:72:52:48:08:6a:3d:
         67:8e:68:3d:a4:62:41:22:f4:22:03:c5:e9:e4:1f:4d:60:41:
         cc:0e:9b:e8:9a:a8:7f:e6:1b:dd:60:32:b4:84:12:e0:a8:70:
         c1:e0:da:59:b5:1e:36:d8:b4:8e:16:e0:a2:19:cc:0d:0a:88:
         20:d5:f0:7a:e7:40:aa:bc:98:84:3b:b9:e7:0c:9a:10:21:6f:
         fe:06:d2:13:f1:0d:a9:4b:c6:db:a6:fd:06:98:12:7e:55:53:
         8e:fa:af:c6:b1:ed:48:29:c6:e1:e4:77:4e:71:54:28:68:ef:
         00:3b:6e:e8:75:c8:b7:93:16:f0:b9:9f:43:29:c8:8b:0f:d5:
         74:85:2d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:52:36 2025 by rpki-client