Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
File:                     iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft (raw, json)
Hash identifier:          0lXtKfsk4okRNpO9b/KuXafcwCiPu74qG8VylFiC4t0=
Subject key identifier:   20:55:A3:FA:EE:BC:6A:31:A3:D6:D0:3D:FD:2B:27:5B:01:D0:90:C1
Authority key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
Certificate issuer:       /CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Certificate serial:       0196CE065B6A0D6CD54AB327E7F4BDF49902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
Manifest number:          153B
Signing time:             Wed 14 May 2025 09:00:45 +0000
Manifest this update:     Wed 14 May 2025 09:00:45 +0000
Manifest next update:     Thu 15 May 2025 09:00:45 +0000
Files and hashes:         1: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl (hash: vfK1yoNBzujmYmw65xYSrkY5SR+TOUF/rudhgHFuky8=)
                          2: w8vjCf4MhWSno6arrBizV8hRGB0.roa (hash: u0VlJI61dIeh8T7++/kZccPzyKi9DwtmR02dU9ACLS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ce:06:5b:6a:0d:6c:d5:4a:b3:27:e7:f4:bd:f4:99:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
        Validity
            Not Before: May 14 09:00:45 2025 GMT
            Not After : May 15 09:00:45 2025 GMT
        Subject: CN=2055a3faeebc6a31a3d6d03dfd2b275b01d090c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e2:60:71:c7:7c:c2:2d:bd:d5:ff:2c:a6:0e:
                    69:95:78:88:11:27:99:a9:f0:c3:4c:f7:52:c8:69:
                    a9:d9:32:40:30:56:9c:e4:e0:25:86:ba:ba:e4:9c:
                    6f:fa:df:37:d9:f2:b6:01:ed:1f:fd:a0:65:aa:a5:
                    b6:f7:d0:5e:6b:e4:ac:f1:c2:82:e3:1a:ec:6c:23:
                    d7:4b:c7:c5:a2:67:e1:96:fa:3a:ab:39:f1:ed:4f:
                    3d:ce:85:23:5e:bb:d4:d7:0d:00:31:f6:93:4c:42:
                    3b:29:dd:65:e8:ce:16:49:a0:01:80:33:77:bb:7a:
                    71:a8:3c:c8:d1:7e:51:05:d0:93:47:2a:17:67:0f:
                    81:ec:e0:d3:eb:1c:73:6f:25:f4:6a:42:cd:8b:bf:
                    ac:f1:fb:28:b6:99:8e:d3:2b:80:dd:1d:3e:ef:c1:
                    9d:28:64:e0:38:fd:8d:92:23:46:18:b3:da:13:0c:
                    ce:8f:77:18:2b:29:0c:dd:88:7b:20:a6:98:64:d5:
                    d5:20:63:fb:d2:51:0e:9a:35:4f:2f:19:14:52:a0:
                    e7:f1:88:47:b3:0f:81:64:59:88:dd:3c:d2:2e:0d:
                    fc:ac:6e:c3:87:db:1a:2a:25:2a:35:20:80:c0:eb:
                    12:3d:d0:d4:03:cb:98:fb:0b:33:2b:f6:34:53:99:
                    4b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:55:A3:FA:EE:BC:6A:31:A3:D6:D0:3D:FD:2B:27:5B:01:D0:90:C1
            X509v3 Authority Key Identifier:
                keyid:89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:07:c0:3f:c1:b0:f5:67:13:3e:65:e9:4b:ce:ee:06:c2:32:
         d6:3b:d9:9e:86:9a:9e:e8:62:7a:0e:d5:7c:76:04:09:fa:6b:
         19:96:38:6c:f9:77:6b:3b:b7:0c:eb:ba:2c:e2:a1:3b:7e:6f:
         8a:fa:36:58:e3:0c:46:09:d0:4f:67:5e:8a:cf:ea:10:94:51:
         52:1b:93:31:1c:cf:a7:1e:b4:3f:5e:88:ce:4b:6c:22:03:45:
         a3:04:1f:45:32:36:68:8a:d1:b0:bb:10:bf:9e:87:cc:81:28:
         12:f3:b3:d3:ad:f7:11:21:3c:29:a3:2f:59:0b:92:fd:f2:76:
         63:1a:f3:52:5a:b4:69:e8:35:8a:71:87:90:38:55:d3:65:14:
         d4:30:b3:1a:8c:dc:70:d6:0a:b4:1c:71:54:ec:55:a6:61:95:
         de:90:05:52:83:dd:dc:03:e1:8a:0b:6c:b5:22:b0:32:ed:22:
         7e:59:ef:e3:2c:7f:05:81:9d:b8:4b:25:1f:fb:96:f1:32:e8:
         34:3a:43:d9:a0:cf:8f:ae:ed:a8:8b:e2:38:c4:e5:7f:5f:9f:
         dc:48:df:e1:21:24:1b:39:87:8d:a7:d7:b9:49:04:5f:91:3f:
         94:90:d7:2a:9b:7a:70:1a:90:dd:3d:c0:85:87:7c:8e:ee:87:
         bd:e3:74:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:33:53 2025 by rpki-client