Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
File:                     1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft (raw, json)
Hash identifier:          7YL4M6Lh3NX2e77LKoLun8jGThMAFq1fiB6zeCkmRH4=
Subject key identifier:   57:D1:0C:ED:B6:90:7C:31:68:64:37:A4:4F:A9:4D:7B:0A:4C:E0:FE
Authority key identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
Certificate issuer:       /CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Certificate serial:       0196CC4EE9DB8CC62ABB9BF4EF1F8756FBA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
Manifest number:          153B
Signing time:             Wed 14 May 2025 01:00:45 +0000
Manifest this update:     Wed 14 May 2025 01:00:45 +0000
Manifest next update:     Thu 15 May 2025 01:00:45 +0000
Files and hashes:         1: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl (hash: G0aUODEwhB9VnV33J+ApRq7OTr2M9xVMHR5WNuTnsDM=)
                          2: LiDek8ukAeDalnCmjHOSOx8ybkY.roa (hash: XaMtoZ+RB8cq+ljNgiN30o7Aneys4CKgmujbsMdFNUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 22:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:4e:e9:db:8c:c6:2a:bb:9b:f4:ef:1f:87:56:fb:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
        Validity
            Not Before: May 14 01:00:45 2025 GMT
            Not After : May 15 01:00:45 2025 GMT
        Subject: CN=57d10cedb6907c31686437a44fa94d7b0a4ce0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1a:dc:82:a7:3c:75:a8:33:23:9a:19:e9:ba:
                    09:75:55:40:eb:f7:8c:72:14:f6:d5:49:b2:7c:cd:
                    54:5c:64:bd:9f:b6:00:a5:f1:00:72:d8:92:30:ec:
                    ad:47:65:bf:a8:61:0b:93:70:67:f4:9a:01:15:9d:
                    e2:fa:fa:c9:f1:7a:e1:ef:ea:49:48:65:a8:98:1a:
                    4c:3a:22:f5:92:54:3a:2f:d7:fa:0a:c6:72:d5:75:
                    3e:94:7f:df:ac:a7:c6:c1:d9:60:0b:02:10:b0:3d:
                    20:ea:d6:09:a5:f0:77:2b:e7:e3:ec:4d:fe:7d:91:
                    f6:99:6d:1e:59:0e:83:cd:69:63:f8:24:ca:e3:6a:
                    71:a8:7f:bb:b4:08:78:a3:f8:6c:4a:9f:5a:c2:b3:
                    27:e2:e3:9f:e3:b6:17:69:38:4d:41:49:09:68:3d:
                    f5:85:20:e0:17:c5:46:f2:8e:37:f7:98:19:9e:8d:
                    86:c5:05:ca:42:93:88:dd:1a:ed:e4:3d:cd:2e:f4:
                    be:9b:83:4d:f1:3f:01:35:a6:fa:94:64:2b:3e:46:
                    e5:c4:77:bd:a6:d4:55:16:20:59:5a:ed:a1:77:c3:
                    ee:7d:ce:89:c5:3e:dc:0f:d0:4a:98:4f:e4:29:1f:
                    82:49:04:97:1a:36:e7:ca:4e:29:0c:27:b4:4f:53:
                    ea:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D1:0C:ED:B6:90:7C:31:68:64:37:A4:4F:A9:4D:7B:0A:4C:E0:FE
            X509v3 Authority Key Identifier:
                keyid:FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:9d:60:79:69:22:42:c4:53:c5:0f:dc:60:b2:08:4b:af:83:
         15:2a:73:36:17:ec:a4:bb:e2:62:15:01:46:b1:3e:df:b2:ff:
         15:8c:2f:8d:a7:fc:9e:75:06:47:f4:c3:fc:80:84:55:fa:64:
         cf:06:70:ee:d0:0a:bf:51:f4:3b:9d:3b:59:01:c4:67:d3:1c:
         3b:8b:fa:da:aa:ee:ca:61:78:1f:c5:3d:cb:d5:66:2c:85:c5:
         29:58:f5:57:a5:81:5e:56:ef:c1:48:87:85:45:bf:c9:30:3a:
         1b:6a:e5:69:8e:5a:18:bf:34:a5:e9:f6:cb:a3:13:b4:44:25:
         8a:1d:90:f4:3f:5d:88:d9:ad:ed:d4:7b:5c:fe:f5:4a:d3:f8:
         5a:31:25:5e:ad:76:9a:c6:e6:b8:ad:56:14:06:56:88:f8:38:
         30:0c:4e:36:71:1a:cd:26:c6:b7:3c:f3:e2:cc:7c:aa:93:84:
         30:4b:6a:9c:e9:74:9b:64:c7:03:ab:74:03:64:06:0c:46:0a:
         89:a0:8f:09:df:b0:ef:ef:8c:94:67:cc:e7:c8:66:a8:21:33:
         0d:83:6d:9f:64:49:95:ed:fd:a2:65:7f:ca:1a:db:89:aa:f8:
         91:25:da:0f:a4:76:a1:04:71:7f:dc:a5:e9:39:f5:21:f0:ff:
         ab:d2:56:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:58:41 2025 by rpki-client