Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
File:                     mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft (raw, json)
Hash identifier:          541q9pyA7zEH+V4/5omM1f+wnHluEaPRG+FvOmggUlQ=
Subject key identifier:   D9:E5:B3:5C:9C:AE:C5:EB:F4:C7:EC:7C:3F:EB:58:1C:F1:75:EC:77
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Certificate issuer:       /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial:       0196C94D8151CF9ADA72308D67B3D9ED0C93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
Manifest number:          1587
Signing time:             Tue 13 May 2025 11:00:21 +0000
Manifest this update:     Tue 13 May 2025 11:00:21 +0000
Manifest next update:     Wed 14 May 2025 11:00:21 +0000
Files and hashes:         1: 99na7wV0wOq68_7vIbCrL9gfxjs.roa (hash: 42LNXKEAxEwEc7Szkj0BiLf8pgpR4M/aL88CA0G+dmY=)
                          2: 9pMjaJdgappxiU1Tk0UMIRy3SNc.roa (hash: KKwO3btWZ5ddNVsSe6VCRqppaOicRKCDauf9ToA7uzQ=)
                          3: OYrVr5kw4et8uhaEZ8VwQzkeYB4.roa (hash: NpQ1lKS5Avh90ZFGIapPAsKnyGXCoOi4nJyHyt+hdqs=)
                          4: XJWawR8jB0sxr2aaj0BxdLlY1eU.roa (hash: OfaOkDA8kMkezuzj9toK1yPhuFzQbXFRPWHnKS4CHQI=)
                          5: cNRaod0wXiYY9QZ7HGvg0HsWHOQ.roa (hash: b0HSVu4fm/x7OuI+LvVWiIL2lWBUvgVUFtG9IicvQrI=)
                          6: epU58EjYpMtSgrUzd3xlkI9EhKU.roa (hash: d2WOVeDIsDjpX00onNi7gIPb75WWaXv2cOi5GanZkh8=)
                          7: mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl (hash: cgZc4jhUJUp4Xd+cu4nbrFjApYG5SGP3jwePwWQPW+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 11:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:4d:81:51:cf:9a:da:72:30:8d:67:b3:d9:ed:0c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
        Validity
            Not Before: May 13 11:00:21 2025 GMT
            Not After : May 14 11:00:21 2025 GMT
        Subject: CN=d9e5b35c9caec5ebf4c7ec7c3feb581cf175ec77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:72:66:86:02:6c:62:cf:a0:93:78:18:1b:e6:
                    3d:9a:9d:03:09:7a:88:35:40:c0:ca:d5:33:60:9b:
                    06:fa:71:78:f7:01:f1:69:2d:32:9c:5c:cd:91:53:
                    14:e8:b9:1e:c3:14:ee:17:fe:f5:04:6a:c5:b7:ff:
                    ca:6d:c3:aa:da:41:42:94:fe:ec:0f:3b:62:dc:e2:
                    ed:b1:a5:3a:05:41:2b:2f:c7:80:7c:67:af:14:53:
                    31:c8:4e:22:32:09:ee:64:75:a3:ae:46:39:b3:41:
                    67:38:2a:6a:4c:5f:32:a0:ef:00:ce:09:1f:ed:8f:
                    35:27:38:5a:ef:e9:60:e2:f4:76:f0:cb:75:93:b4:
                    c9:ed:f9:1e:41:3c:ad:af:4a:52:86:79:33:a3:fe:
                    00:7e:81:35:3e:43:d0:1c:b7:a9:77:dc:e1:74:12:
                    13:ff:f7:0c:7f:d8:06:38:b9:5d:e0:a0:b4:54:83:
                    ee:00:0a:b3:47:c0:b1:a3:c1:17:b5:2b:59:78:c0:
                    7a:51:90:51:0e:0d:de:10:e5:cd:69:72:51:68:48:
                    ac:96:d1:11:35:ab:fe:16:f7:85:34:32:8e:28:9c:
                    76:a4:f2:af:57:dc:24:24:1c:de:c6:56:1b:d0:f2:
                    91:5f:e0:7d:07:e1:e1:5f:1e:fb:ba:11:ff:3b:4b:
                    b5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E5:B3:5C:9C:AE:C5:EB:F4:C7:EC:7C:3F:EB:58:1C:F1:75:EC:77
            X509v3 Authority Key Identifier:
                keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:a9:2f:48:7a:f5:44:81:80:bb:85:da:1a:2a:b7:08:b7:41:
         5e:32:4c:03:9c:93:ac:ef:6a:c8:4c:f4:86:ce:f2:3a:54:8a:
         6a:66:73:0b:ea:75:6a:22:a3:ce:1f:85:e2:e7:3a:62:55:b6:
         f0:d5:e1:c6:38:94:cf:13:22:a6:2b:9f:8d:f5:0f:c6:17:17:
         85:68:32:b3:ef:b8:51:23:3d:c3:f6:b7:4a:d2:36:87:16:9a:
         7c:db:0b:3e:34:b2:40:70:a8:9c:82:83:7c:cb:a5:dc:1a:1a:
         bd:e1:ce:26:61:2c:fc:86:0e:b2:0b:7e:8b:7e:52:b9:c0:4f:
         2e:c5:4a:30:6f:49:ae:39:28:7f:0d:6b:29:97:6d:ef:9d:42:
         ab:b0:28:ae:6a:14:db:8a:cb:c1:bd:1e:8b:eb:7e:5d:bd:13:
         bc:80:8a:a0:36:47:fa:7c:17:39:b5:99:64:82:9d:be:44:6d:
         dd:8d:80:da:2e:09:44:9d:c0:d3:36:d9:3c:ed:40:93:66:40:
         e6:8f:84:7e:71:01:7f:80:79:38:46:fa:cc:d4:10:db:41:46:
         57:e2:a6:54:a7:ac:a0:38:67:97:cf:c0:cc:96:f6:d9:5d:c2:
         98:ad:8d:75:cf:9c:b4:a9:b4:ce:99:00:cd:a2:db:6c:64:27:
         70:2d:9b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:09:49 2025 by rpki-client