Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
File:                     csoaXP9S6-LyK2adzCyQJ86guBw.mft (raw, json)
Hash identifier:          5JhlRJ/S/1KNfr4xomc7wwiwmokG7hdPkwh08YMO5xE=
Subject key identifier:   95:04:90:DC:8D:15:3A:BD:6E:C8:27:9F:09:6E:B3:C9:E7:06:E2:F5
Authority key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
Certificate issuer:       /CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Certificate serial:       0196A5E5B539E032FDF247AFF3485CF966A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
Manifest number:          148F
Signing time:             Tue 06 May 2025 14:00:16 +0000
Manifest this update:     Tue 06 May 2025 14:00:16 +0000
Manifest next update:     Wed 07 May 2025 14:00:16 +0000
Files and hashes:         1: I_-FRfZa9GeQgym8xYKEVr-rfgA.roa (hash: AmRbI2XP8GOvp3frMOHSnlH48LSP6GLhPNS9PY26J8Y=)
                          2: Uex3x3CWB9WPAXdRNKBIFJzJsn0.roa (hash: 2qFFx/ZZv0i+OiRQdPCciM9T0PW45kAKmFf1AT14lvA=)
                          3: csoaXP9S6-LyK2adzCyQJ86guBw.crl (hash: n/BgPr7aXCy63V9qVfHk22e2gY4jJZAqObLA+P2+oaE=)
                          4: rH_6QZmVa4_yNlZ_JVuN0_Vk3Xs.roa (hash: Z/fYNuFHcmnLVDSA1WLLI385MQXDkqW9Tw7vDgNOnAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:e5:b5:39:e0:32:fd:f2:47:af:f3:48:5c:f9:66:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
        Validity
            Not Before: May  6 14:00:16 2025 GMT
            Not After : May  7 14:00:16 2025 GMT
        Subject: CN=950490dc8d153abd6ec8279f096eb3c9e706e2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:47:cf:a1:9b:52:6b:2b:15:b3:f9:2d:3b:c8:
                    de:e7:57:dd:55:24:37:48:6b:1a:42:2c:76:1d:d0:
                    47:c0:b3:e2:9f:5d:8a:32:8c:e8:e8:8c:77:6a:df:
                    6f:f8:fa:ab:3b:da:0a:96:1a:36:d9:0a:ee:46:42:
                    c4:d1:f9:a9:1a:61:72:8f:87:b5:d7:01:76:88:02:
                    95:78:0e:b0:fe:40:45:6a:3a:79:ce:e3:2c:d9:73:
                    67:19:f5:d0:fe:98:01:20:d6:b5:f5:91:10:c5:47:
                    19:bd:51:b7:6b:45:cf:de:88:7d:dd:7a:4a:55:87:
                    90:fc:32:bb:2b:a7:1c:d4:2e:fd:df:c1:e6:e4:16:
                    37:bf:90:6e:20:5d:82:da:fb:26:11:ec:1e:d9:00:
                    e5:a1:de:c7:88:ee:c8:30:b9:44:d2:32:e4:9a:0c:
                    30:fb:46:50:d8:36:2c:dd:24:6d:6e:0b:41:5b:c4:
                    8b:e7:d3:7f:25:58:c9:30:da:14:e9:dd:05:ed:aa:
                    e9:f5:50:58:5f:85:f6:c5:9c:bf:60:33:40:8a:b3:
                    db:e3:21:a5:f2:7d:9f:33:27:bc:26:5c:de:e5:ae:
                    84:47:ab:8d:bd:5c:aa:c5:9c:77:b8:a8:d8:73:af:
                    7c:f0:e7:12:f2:af:2e:34:c6:bb:16:c5:9f:2a:26:
                    14:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:04:90:DC:8D:15:3A:BD:6E:C8:27:9F:09:6E:B3:C9:E7:06:E2:F5
            X509v3 Authority Key Identifier:
                keyid:72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:64:51:8c:21:fd:ac:a3:a6:ff:80:e4:ce:7b:76:fd:fd:d1:
         e7:47:3e:83:57:86:c5:f3:6b:7e:27:48:18:e4:21:33:6a:1e:
         2f:b8:ef:6b:22:96:83:33:c3:57:67:17:b7:e0:77:e1:cf:29:
         50:35:a4:16:d9:82:33:c5:87:fc:ae:4a:22:d5:f0:01:86:32:
         30:08:5d:3d:f4:8a:fa:e4:33:07:c1:53:96:ec:e1:fd:ec:e1:
         51:20:d8:08:f9:71:75:20:e8:a2:a9:2b:65:ca:ef:54:7b:a7:
         9a:27:15:b6:9b:15:f2:a5:79:d7:63:ca:0e:99:61:4f:36:fc:
         7a:11:a2:c4:95:ae:25:dc:e7:dd:7e:ea:02:70:2c:ec:ea:b9:
         a4:67:da:73:33:ac:b9:31:08:1b:38:a6:5a:14:03:ee:c8:75:
         b7:16:b9:aa:6f:62:d0:3f:dc:8b:1b:71:cc:4a:5b:ff:5c:60:
         a5:7d:40:6d:98:90:95:f9:15:44:00:64:46:c6:4a:15:53:f1:
         fb:c8:81:d6:4e:88:e0:7c:e5:49:20:85:d3:11:d8:38:55:34:
         5f:b4:4b:9c:86:27:c2:6b:34:db:7d:a1:8d:e0:7e:16:30:44:
         40:1a:60:17:60:80:14:f6:d5:8d:f7:5a:77:4c:36:30:d6:90:
         f2:72:63:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:21:10 2025 by rpki-client