Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
File:                     n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft (raw, json)
Hash identifier:          7IHTMV9UQ//Ni4WyUEQuNJzEVBELI9naXi2GLh9qm1o=
Subject key identifier:   98:A4:C3:ED:C3:5B:05:D2:C3:AB:45:85:15:5F:FE:5A:FB:6B:BF:E1
Authority key identifier: 9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46
Certificate issuer:       /CN=9fac2fdddabf20ea449870e1dcc0915e60148346
Certificate serial:       01969CE280998E44023BBC3708AFEDA4A8AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
Manifest number:          1525
Signing time:             Sun 04 May 2025 20:00:11 +0000
Manifest this update:     Sun 04 May 2025 20:00:11 +0000
Manifest next update:     Mon 05 May 2025 20:00:11 +0000
Files and hashes:         1: cy8YEy59qiwK_Fnvfydw8wHKMzM.roa (hash: 13AgIVf/9mtLdIXYsHWwtEN18P6MQ6JEfgaLpvph65A=)
                          2: n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl (hash: KSP3sz3um31mLO+RgT+jGq9lQVdKtXuqPehN8h70JS0=)
                          3: u3h3mvt8jO_1-9Tc1-ZpWXazLnE.roa (hash: gXd9C0jmc6JkjtwTfiNrXT+kcF/uwTHzTooWSRdETt8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 20:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9c:e2:80:99:8e:44:02:3b:bc:37:08:af:ed:a4:a8:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fac2fdddabf20ea449870e1dcc0915e60148346
        Validity
            Not Before: May  4 20:00:11 2025 GMT
            Not After : May  5 20:00:11 2025 GMT
        Subject: CN=98a4c3edc35b05d2c3ab4585155ffe5afb6bbfe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:01:0e:d4:4e:57:ea:53:fc:60:f9:3f:43:e8:
                    6a:b7:72:5c:65:45:05:38:7b:83:3f:86:b6:4e:54:
                    c7:a5:cb:db:df:ff:9c:01:bf:80:79:af:89:20:06:
                    fb:94:53:7f:24:04:f1:27:eb:80:d9:df:72:8b:ff:
                    89:42:c4:c1:2e:64:76:17:e9:b2:2f:e7:0d:86:33:
                    14:3a:66:92:ce:c2:85:ef:0c:66:69:66:74:18:61:
                    4b:37:e2:a6:8f:c3:83:f2:86:a6:b1:b6:82:cb:b8:
                    fb:12:04:ff:d2:d8:19:d8:13:94:16:ec:67:38:bd:
                    fc:77:b6:1b:c9:13:c3:33:c2:a8:d0:43:52:1d:3a:
                    ee:53:23:be:f1:01:47:9f:f9:fa:b5:63:e0:f4:ea:
                    71:23:4c:e1:ce:b3:7f:f9:a9:82:8d:15:ce:9a:c3:
                    2a:4a:fc:2f:44:9a:73:79:61:22:d3:de:dc:74:93:
                    c6:74:a2:c8:36:b6:3d:91:4b:59:f4:4c:e6:96:50:
                    ea:b7:59:28:77:1d:7a:60:08:4d:26:91:bf:9e:79:
                    b5:1c:5b:89:57:42:34:d7:42:c6:40:20:ba:c8:f9:
                    bb:3c:25:d8:0c:06:14:56:a3:12:96:e5:88:77:7f:
                    88:ae:2d:62:97:fb:06:ec:2c:84:f4:2e:2b:5c:33:
                    c8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A4:C3:ED:C3:5B:05:D2:C3:AB:45:85:15:5F:FE:5A:FB:6B:BF:E1
            X509v3 Authority Key Identifier:
                keyid:9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d3:0f:2e:ee:52:98:f4:6e:75:6d:75:6d:2d:6a:31:44:2f:
         b8:6a:aa:d2:d8:40:ad:df:67:a5:8d:8a:cb:3e:1d:39:7a:db:
         8c:c1:e6:2a:54:35:f1:13:56:6b:c2:16:a7:0f:5d:43:3c:89:
         17:46:71:a6:f6:5d:7c:f3:f9:7a:b1:ce:9b:b3:ad:60:89:56:
         b3:46:35:76:5b:0d:b7:d3:f4:d0:92:8e:26:c7:ba:91:9a:24:
         22:2b:d6:26:bd:52:7e:8b:9e:3d:eb:cf:db:4c:8b:8b:19:0b:
         16:50:8b:ba:ba:a4:2b:90:ec:da:42:86:08:51:10:f4:7f:03:
         6f:d2:76:fe:71:01:67:20:eb:e4:1d:f0:8c:35:23:9d:cf:58:
         d6:77:1e:b6:eb:41:25:2b:3f:8a:ac:2b:2d:a0:a1:79:59:d1:
         d2:25:63:57:7e:37:a8:70:09:cc:30:74:18:4e:a7:3f:60:c2:
         65:9f:06:4a:50:2b:72:5e:b9:59:a9:af:06:25:3f:a5:6d:ad:
         03:8b:14:8e:97:d1:fe:b2:55:b1:2a:1f:f8:48:f8:b9:a4:96:
         09:11:3e:e7:fe:ae:01:98:64:1b:93:bf:9e:5a:92:3a:2c:fe:
         a1:79:6c:5d:18:da:f3:22:59:63:45:ab:1f:5d:5f:5c:31:9e:
         ed:ce:a9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:26:52 2025 by rpki-client