Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
File:                     GODpo9IM-sbL48z3SrV4SndoKTM.mft (raw, json)
Hash identifier:          tkoUGdXaInU0OagzW5dkoNs56TNWN8ioVAcYCHzI5Wc=
Subject key identifier:   05:38:CA:65:C9:72:BA:0F:10:89:DC:FB:78:75:68:E9:F6:5F:F7:8F
Authority key identifier: 18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
Certificate issuer:       /CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
Certificate serial:       0196CD2A951176008E95E480B6DBB45F0D9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
Manifest number:          153C
Signing time:             Wed 14 May 2025 05:00:41 +0000
Manifest this update:     Wed 14 May 2025 05:00:41 +0000
Manifest next update:     Thu 15 May 2025 05:00:41 +0000
Files and hashes:         1: EgUed3OS5r6UcW0VzyUQOqijGyE.roa (hash: fxzBB+2/n6aM1AwbZDhuW1COKGh5iBae7DMl/0iQ9A8=)
                          2: GODpo9IM-sbL48z3SrV4SndoKTM.crl (hash: iwUIg2sBKIKYKslDVG6it56pIya4QMCw0hsXbi4BbDA=)
                          3: eWWR4vM0w5SZ0sBVPl9f9xfpWlM.roa (hash: 0jDZKCUWokK8TsjPgI0+fTiqYEgYJ/hp0vG/qzmnqKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 22:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cd:2a:95:11:76:00:8e:95:e4:80:b6:db:b4:5f:0d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
        Validity
            Not Before: May 14 05:00:41 2025 GMT
            Not After : May 15 05:00:41 2025 GMT
        Subject: CN=0538ca65c972ba0f1089dcfb787568e9f65ff78f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:be:a9:23:a0:87:9e:d4:e4:7b:38:e7:ec:38:
                    3b:5a:8c:e6:60:c1:93:85:9d:0c:88:86:1f:e7:c5:
                    bd:77:53:55:66:2d:e3:43:dc:f3:ae:27:27:c2:bd:
                    c7:00:81:ba:8f:aa:ec:53:10:d0:dc:b2:cd:14:9e:
                    1e:44:5d:9c:b7:ba:57:34:63:89:cd:75:82:b8:46:
                    da:80:f6:68:5f:8c:f0:79:07:50:92:12:8c:c6:b3:
                    e7:d2:6f:04:39:38:fd:ae:6b:f2:8b:6c:93:e5:1f:
                    54:6e:18:ee:5f:17:92:72:03:b1:2a:43:ab:23:a8:
                    56:d2:79:8c:c9:8d:9f:50:a4:c4:96:aa:38:a7:58:
                    3e:db:c9:94:10:c4:8b:20:d5:97:a7:c2:3d:52:14:
                    f4:fa:cb:69:dd:4a:0d:03:01:15:cf:45:b6:b2:3f:
                    86:cf:cf:8f:d9:2d:1c:94:80:7c:33:27:7a:81:e4:
                    26:18:0a:8e:90:0d:17:b2:13:64:f4:b8:87:20:8c:
                    b8:48:b2:b0:45:7e:b4:a2:42:88:b0:19:69:3c:02:
                    b3:5a:89:25:2d:3e:f4:b5:a3:7a:5f:36:7d:75:b1:
                    41:36:ae:bf:a8:a7:21:ec:ff:66:06:b3:8a:8b:af:
                    27:43:6d:13:18:12:8d:d4:08:ac:e9:8f:a3:74:b6:
                    04:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:38:CA:65:C9:72:BA:0F:10:89:DC:FB:78:75:68:E9:F6:5F:F7:8F
            X509v3 Authority Key Identifier:
                keyid:18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:7d:96:44:99:bd:4d:38:a7:d2:d4:86:da:5f:df:2a:4c:08:
         4b:1a:d7:af:29:7c:32:12:03:cd:9f:d7:7e:56:c8:f6:bf:55:
         ca:cc:ef:56:cc:be:ae:f9:50:41:68:a3:d3:27:74:52:50:a3:
         35:85:ad:91:4e:6b:fa:2a:2b:28:b5:a7:dd:64:c9:78:56:d5:
         52:70:6c:2a:01:12:a4:b4:f5:e0:a1:39:a2:4a:94:73:3c:e2:
         f2:ab:d0:3f:29:31:d9:d7:cf:9b:92:7a:88:aa:fe:01:2e:6c:
         c4:07:73:07:c4:df:57:90:bf:f9:b1:3e:2f:39:44:c1:8a:7b:
         45:9c:6d:fc:5d:38:52:2f:47:de:e6:88:bf:3f:f4:99:a8:bd:
         3d:19:a2:8e:f9:5d:90:19:90:b2:1f:24:3a:b2:4b:8d:9f:a4:
         19:29:64:b0:3e:2b:1f:fd:69:12:dd:1d:f5:bd:1a:55:60:68:
         f6:57:a8:d1:b3:50:88:04:eb:96:99:ed:6a:92:54:8e:0e:25:
         bb:27:7f:43:d5:45:5d:9a:07:47:ad:51:f7:a1:80:1e:ab:9b:
         46:b0:f0:91:d7:32:66:b8:99:a3:d8:09:5e:b9:d2:ab:fe:db:
         fe:de:f5:d2:29:3b:2f:20:3c:3a:11:0c:bc:98:0f:d1:ff:62:
         8d:4e:7c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:00:33 2025 by rpki-client