Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
File:                     1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft (raw, json)
Hash identifier:          JBAgvLoUU8+I8aMjKZT9ao0Gz3MAmOWAy+t1v0tCfug=
Subject key identifier:   1F:EB:80:AB:79:F7:DA:D6:09:50:07:A0:B1:33:66:28:83:1F:50:EA
Authority key identifier: FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
Certificate issuer:       /CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Certificate serial:       0196CDCF5C6469C7E79C8F2F29929346DA84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
Manifest number:          153C
Signing time:             Wed 14 May 2025 08:00:40 +0000
Manifest this update:     Wed 14 May 2025 08:00:40 +0000
Manifest next update:     Thu 15 May 2025 08:00:40 +0000
Files and hashes:         1: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl (hash: gQ4AVfXj/ZBLFt5CAkxMfBCh5XMwAgGNOmDRRVsNltk=)
                          2: IU1kfq4weOzN7OdLshfRhNPWBJA.roa (hash: dD5C1zuWgoU/8heEjF9DtJJhbPxUK71KXWz/l+dejRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cd:cf:5c:64:69:c7:e7:9c:8f:2f:29:92:93:46:da:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
        Validity
            Not Before: May 14 08:00:40 2025 GMT
            Not After : May 15 08:00:40 2025 GMT
        Subject: CN=1feb80ab79f7dad6095007a0b1336628831f50ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a4:9a:52:05:12:dc:3e:2e:f7:7d:95:56:b9:
                    79:dc:37:0c:bf:b0:c0:d4:98:88:bc:19:94:79:a6:
                    5f:c7:76:d6:66:2b:65:7a:51:1d:8c:09:3b:6d:9f:
                    92:56:04:fa:5a:de:ca:2e:3a:8c:7d:81:14:ca:a3:
                    50:38:e1:5b:08:22:58:9c:5f:ea:83:24:85:68:bd:
                    46:91:6a:19:de:ac:28:3d:b1:f0:b5:ce:e6:36:c4:
                    5c:75:9f:d8:7f:e1:9f:bf:16:7d:6b:ae:ac:4d:2c:
                    22:67:bb:95:06:67:58:6e:bb:ad:32:c6:b2:42:67:
                    d2:65:df:48:a9:6e:87:52:15:c1:29:e5:7f:37:b5:
                    dc:18:9e:1a:6d:86:15:ab:b7:b4:58:d4:c9:97:c8:
                    78:cf:e7:76:ba:5a:e4:b8:94:62:f2:9b:a7:2e:c0:
                    92:67:fc:ec:46:49:52:fd:43:63:f0:b7:cd:79:78:
                    61:5f:ca:50:59:1f:06:20:8c:80:5e:6a:e6:d4:50:
                    9f:23:b7:f6:8c:9a:cc:e4:7b:42:56:53:b2:f0:87:
                    d8:c0:c6:a3:06:fa:45:24:c1:e0:e6:24:d2:2b:0f:
                    f1:ed:d4:83:81:60:68:e0:79:10:a3:92:6c:90:9f:
                    6b:69:7a:0f:30:ed:9a:b3:7a:70:02:43:2a:a8:aa:
                    60:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EB:80:AB:79:F7:DA:D6:09:50:07:A0:B1:33:66:28:83:1F:50:EA
            X509v3 Authority Key Identifier:
                keyid:FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:16:e5:87:13:5d:52:69:da:98:b9:13:f8:5d:40:3a:20:e6:
         41:ab:4b:68:25:44:b2:95:a2:e6:70:c7:04:b0:7b:f3:85:2b:
         ff:0c:fa:97:c4:94:a7:a2:a5:7e:71:4d:12:2b:f2:09:67:2d:
         cd:0a:02:ff:4a:de:4c:c2:7d:90:31:07:f2:f2:16:7b:00:51:
         20:13:5d:c7:5b:eb:9d:83:49:43:92:fc:f3:6e:14:17:03:a1:
         a9:39:8d:51:5e:f6:c2:9b:d2:f8:9a:2d:08:8f:b9:8f:f1:e9:
         f2:0b:4d:7f:e4:1a:e1:7c:a0:fb:5b:22:65:58:c7:08:78:6d:
         69:57:5a:06:4f:ad:81:cf:6b:1f:ad:96:cc:44:69:06:f7:a3:
         e0:97:8c:fd:cd:b7:0d:a6:c9:e9:24:91:8b:33:83:db:9e:64:
         39:39:3f:2f:07:cb:83:e3:c9:17:da:2f:c1:19:f7:d1:73:d8:
         0a:09:68:3f:cc:bf:5d:b3:a3:3a:3f:39:40:06:7a:59:bf:cb:
         7c:d2:48:d0:b7:86:fb:1e:64:1f:11:4d:29:88:46:75:8b:ca:
         61:1e:4a:a5:8c:db:3c:46:d3:e1:71:e3:9b:28:95:2d:ad:36:
         f2:b2:64:86:58:0a:6c:aa:0c:e3:6c:7f:c6:0b:1d:ff:73:e4:
         48:6c:db:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:33:59 2025 by rpki-client