Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
File:                     deqJTuBXdeDvBh0IbKJSFH9ckd4.mft (raw, json)
Hash identifier:          3UXkOH2By6QsIsQwaIkJH8M8hjmhNCnefhotxzAB7/o=
Subject key identifier:   7B:ED:73:C9:2A:3C:41:7B:84:E6:41:B4:A6:09:D5:2D:E6:6A:31:9D
Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
Certificate issuer:       /CN=75ea894ee05775e0ef061d086ca252147f5c91de
Certificate serial:       0196BAB600FBB3FC3F8ED0FD5206A734E247
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
Manifest number:          1539
Signing time:             Sat 10 May 2025 15:00:11 +0000
Manifest this update:     Sat 10 May 2025 15:00:11 +0000
Manifest next update:     Sun 11 May 2025 15:00:11 +0000
Files and hashes:         1: HQ3g25P006ROllKfG3gdhpSNHOg.roa (hash: JkW/Op/fvYeKeMra4WDWooddbprrjz6RgWEE7Fl3VHc=)
                          2: T23Nk-nWZ13uL-vUgHBSmBD0a5Y.roa (hash: /bhq2aMKeWlXXVjqRKG1maK35mjghRj8veSjPURu6WI=)
                          3: deqJTuBXdeDvBh0IbKJSFH9ckd4.crl (hash: DfNmJYgQH/HUVC7CTtZkMcFzQtf59fytlSIkUdW3Y5s=)
                          4: koi0-CGVFzzCbkI5al5_w7LgOj4.roa (hash: Ypeyl95U2AAhobdLkDDvp1F6OHWp8H5ed2csv8B3QLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:b6:00:fb:b3:fc:3f:8e:d0:fd:52:06:a7:34:e2:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de
        Validity
            Not Before: May 10 15:00:11 2025 GMT
            Not After : May 11 15:00:11 2025 GMT
        Subject: CN=7bed73c92a3c417b84e641b4a609d52de66a319d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:88:7f:e6:42:7d:ce:65:1a:b7:20:ef:bc:ae:
                    7c:16:60:e0:9f:b9:ed:3b:46:e4:8a:8c:d8:77:e9:
                    79:07:89:2a:77:6c:bd:43:42:8d:99:7f:3d:56:2f:
                    e0:2f:69:ee:83:5e:a2:e6:6b:c9:bd:74:7f:6e:db:
                    e0:33:b9:b2:0d:74:58:c7:02:5c:9a:93:70:09:b2:
                    74:9d:54:c2:f1:7b:20:43:bd:ab:73:57:30:b9:2d:
                    19:46:79:09:bf:dd:09:63:93:75:dc:55:51:61:8f:
                    41:18:2b:55:6c:a9:00:e2:6d:43:c3:b1:bc:36:b8:
                    15:36:5f:08:3e:35:3f:9c:6d:04:c3:7e:f9:62:37:
                    70:98:57:cb:38:ed:21:20:99:5f:89:98:75:60:94:
                    b9:ec:28:48:e4:97:0b:ad:37:04:bd:2e:eb:53:b1:
                    c8:e7:90:68:d5:f8:a1:c8:57:ca:0f:eb:f8:71:93:
                    1f:a5:57:61:59:2f:53:a1:ed:84:9a:fe:b5:cd:ed:
                    98:c9:5f:29:d4:98:06:6f:40:9f:b4:30:43:19:d0:
                    34:c1:76:3c:5f:b7:3a:62:8c:d0:ed:67:8f:fb:e0:
                    de:54:90:9c:1d:53:14:5e:45:27:f0:4e:29:11:44:
                    7e:74:f9:fe:78:c6:8b:49:d7:fb:2b:d7:d4:f2:6b:
                    30:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:ED:73:C9:2A:3C:41:7B:84:E6:41:B4:A6:09:D5:2D:E6:6A:31:9D
            X509v3 Authority Key Identifier:
                keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:d1:83:a9:89:36:c2:88:5f:f8:a7:e5:0a:d3:52:a1:07:34:
         29:d8:2b:8d:33:e2:65:15:fd:db:f9:dc:ec:ca:7f:a1:c7:2d:
         7d:0f:7f:09:ae:1e:9a:86:70:ac:df:29:d7:08:13:e3:50:f4:
         54:5a:b4:b3:d0:00:94:d7:72:61:60:63:62:b3:24:d1:6d:6f:
         7c:a1:7e:1c:73:72:08:e1:58:49:a4:03:40:ba:59:90:b1:e4:
         ab:1e:a9:f0:cc:d9:9d:8f:3a:ed:15:eb:5b:bd:bb:57:c3:ef:
         2f:fc:3f:7c:09:ba:98:0d:94:8a:a8:34:f8:cb:be:77:5c:4a:
         ac:af:6d:79:a6:71:be:a0:07:d0:d9:fa:81:5c:36:65:d6:05:
         c7:aa:e0:d6:14:2b:f1:7d:e0:5a:4d:0b:a4:49:ae:a3:8c:f2:
         ae:2b:ba:35:33:51:aa:ff:e9:64:65:70:c2:11:90:38:0b:3d:
         e7:01:8c:87:10:01:1f:0d:44:75:4d:53:01:03:cf:9d:86:25:
         8c:09:ef:6c:90:c9:3e:00:37:c7:f2:2d:e3:f8:58:4e:40:90:
         5f:26:3c:db:b3:2c:14:89:95:24:6f:7f:f5:bf:ce:57:b5:04:
         76:93:68:02:9c:ef:40:78:d8:14:79:30:b1:b2:67:3d:3d:04:
         87:e6:28:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:02:36 2025 by rpki-client