Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
File:                     _SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft (raw, json)
Hash identifier:          /Bd0M2/cP/Hcb5TWsasZRkUOJNGvWgXShhtousMfStQ=
Subject key identifier:   7A:41:89:26:F8:99:74:CB:47:3F:BC:AE:01:64:DF:68:7A:D2:FE:38
Authority key identifier: FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4
Certificate issuer:       /CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
Certificate serial:       0196D8F79D719E350679E276BD48ACD39D07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
Manifest number:          1053
Signing time:             Fri 16 May 2025 12:00:28 +0000
Manifest this update:     Fri 16 May 2025 12:00:28 +0000
Manifest next update:     Sat 17 May 2025 12:00:28 +0000
Files and hashes:         1: 5ZcLxiewB6SlgnkXrkL_qV-6c70.roa (hash: GbaGUbv69G2XGzJlZWZreb/2hT1CRKa032XRQqRiLc0=)
                          2: I1O4inp7HBvWNe9o3Cdiqxo24PI.roa (hash: w0+4BIRKhD7XUvL36J282b0/EXDqyGM8URO+oQQ/ReM=)
                          3: QUq_as-wJbivzxLijTmqQSzAeeM.roa (hash: Obggdbq+FXYocjRAbiQV6ufwU9548OHhlSGKsE0Fnq0=)
                          4: _SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl (hash: vzfCToruF4cit/ecsKuVfKAI77tfyCRRM68rchFWQtg=)
                          5: fUAyjzobbYqY4LtTx9KW62S7ym8.roa (hash: IdzdGJHWpk15Q0jGSrpbWLOfiHsRudIY06wcbYibU3s=)
                          6: rSVe0qwmHRmRSbc-BqRXWgwo8xg.roa (hash: r3p05wO+xtEje8UL55zhFJYQg8/aaGUGyXfpX1tlFYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 12:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d8:f7:9d:71:9e:35:06:79:e2:76:bd:48:ac:d3:9d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
        Validity
            Not Before: May 16 12:00:28 2025 GMT
            Not After : May 17 12:00:28 2025 GMT
        Subject: CN=7a418926f89974cb473fbcae0164df687ad2fe38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c7:8b:f1:7a:0b:b5:89:58:73:73:ff:f0:bf:
                    44:e4:b9:47:2e:73:6b:8e:62:99:42:0c:5a:e7:48:
                    b1:86:52:bd:b6:04:b1:12:62:ce:db:2e:ba:a8:f9:
                    51:f4:60:24:d8:91:3e:8f:ea:e9:3f:23:1b:1e:de:
                    19:ca:52:74:d5:73:ad:99:70:f2:42:96:5e:16:7c:
                    4e:a6:b9:c8:14:32:65:e8:52:0c:4d:aa:5e:73:ef:
                    03:a9:0d:75:a1:95:b3:b3:fc:3b:55:0e:b4:41:6e:
                    a1:ff:ac:e1:42:fe:c2:e5:02:54:68:cc:d6:43:29:
                    f6:02:89:80:05:c3:c0:a7:9a:37:32:bf:82:1d:5e:
                    84:bf:8f:78:76:fc:a1:57:5a:44:e4:ae:c6:bf:bb:
                    11:64:35:a7:58:63:36:b5:48:ca:e4:59:82:cf:58:
                    5b:f1:2f:65:37:1e:cc:aa:1d:22:6a:67:e0:b8:6d:
                    39:2f:88:80:c3:e5:10:54:75:98:b0:12:27:0f:98:
                    b7:43:43:52:bd:1a:cd:b7:6b:b7:ac:c7:db:e8:74:
                    06:7e:90:0c:30:da:1d:65:0a:eb:c8:af:dc:40:5d:
                    d3:aa:1c:a5:0e:67:a0:2a:c3:ce:36:4e:04:3d:a0:
                    62:81:b6:f1:ba:06:72:56:55:5b:02:45:2b:b1:62:
                    59:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:41:89:26:F8:99:74:CB:47:3F:BC:AE:01:64:DF:68:7A:D2:FE:38
            X509v3 Authority Key Identifier:
                keyid:FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e2:11:93:8d:cb:ff:2d:d1:21:d2:91:10:a7:cb:d4:fc:ab:
         70:d3:d6:af:97:00:36:ee:4e:1e:30:9e:bc:86:91:72:ce:ed:
         7f:d8:bd:ac:90:b6:08:75:3f:99:29:9c:84:63:c7:c1:1f:ec:
         5d:c9:79:bf:e0:29:ba:d1:fa:01:b3:9d:9a:49:c6:9a:c8:2d:
         f0:78:86:74:df:b9:e1:73:66:58:79:71:fd:b2:c9:3b:66:7e:
         bd:d2:e4:20:6b:58:d5:47:2f:e8:77:bd:88:c7:56:ef:c9:0f:
         02:7c:5a:21:67:a5:d8:9d:e6:ce:58:2c:6c:6f:c1:7c:42:94:
         52:d3:c8:8e:f1:68:ba:f5:95:45:85:4e:be:68:de:09:f9:c5:
         bd:eb:44:15:53:80:ea:f3:8a:7e:97:fe:a4:7a:da:10:a5:04:
         b2:c1:77:f2:3f:8a:45:e2:da:61:a9:89:e1:55:b0:63:57:19:
         3e:07:11:08:37:2b:bf:2c:05:5b:37:b0:3d:d6:d4:0b:6a:3a:
         39:8b:c4:98:ef:4b:a8:14:f0:2e:56:47:c0:cb:e9:1b:09:29:
         95:bd:ed:e5:3a:c6:10:ff:a9:01:ad:c8:96:12:89:71:64:9a:
         4e:bf:fb:a1:d5:4c:9c:a4:d4:48:5c:b9:39:12:5b:b0:48:73:
         b8:bf:df:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 19:24:36 2025 by rpki-client