Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
File:                     7YAJUKMdzayqxWrbk2pCvrhF4ks.mft (raw, json)
Hash identifier:          RrcAmgYei4ox/eI/ecZTMxYLNd4UWjKWiZHgbDuAY8c=
Subject key identifier:   5F:C3:B4:28:29:AF:AE:B2:99:7E:85:4E:A6:2A:3F:F7:88:9B:A7:95
Authority key identifier: ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
Certificate issuer:       /CN=ed800950a31dcdacaac56adb936a42beb845e24b
Certificate serial:       0196B823AB134502561C41CD58C9F78A4931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
Manifest number:          153D
Signing time:             Sat 10 May 2025 03:01:07 +0000
Manifest this update:     Sat 10 May 2025 03:01:07 +0000
Manifest next update:     Sun 11 May 2025 03:01:07 +0000
Files and hashes:         1: 5MV2rdKN5gFzkLwT07F5rTi7omY.roa (hash: D3LvO+IMQRq6IdrMAHkY6QYNoiaJ3ZDYs8dNG78o/Fs=)
                          2: 6h2yqqYWrRghoIoxZYGFzpWfew0.roa (hash: U+lnqoe9GQk5UXj86Etet1S1TemuykTuT7gj4NeX2wA=)
                          3: 71BeoRLY37qqGRrW0q7PaZ4MISA.roa (hash: q87wHV6L3WsqVGDtFfCxv18cXyNSbCqzEF0eTOVfAv8=)
                          4: 7YAJUKMdzayqxWrbk2pCvrhF4ks.crl (hash: fgviOsOYmmOu9tPAb6uesjhqi658RwDq0PrHm0NGO04=)
                          5: Z2fOpxeOdQMYHdkDGfltSVuJwJQ.roa (hash: cNSmYsaFbWz1KHK5w6io+60UGsIvpGDu7K4HhPw9GkE=)
                          6: iXWiAu38fSPYWYABMk3KTWR8J94.roa (hash: PeV/ss1h89xDLD9aBvw1HJFSN2Rx7428f2qqc6I2rMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:23:ab:13:45:02:56:1c:41:cd:58:c9:f7:8a:49:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed800950a31dcdacaac56adb936a42beb845e24b
        Validity
            Not Before: May 10 03:01:07 2025 GMT
            Not After : May 11 03:01:07 2025 GMT
        Subject: CN=5fc3b42829afaeb2997e854ea62a3ff7889ba795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:79:75:58:55:77:06:f3:15:c3:60:14:e6:ff:
                    f7:81:31:4d:7b:a7:65:bc:b2:ca:b4:07:61:11:5d:
                    94:33:74:9b:26:99:d0:44:d2:ec:74:f7:8a:5e:fc:
                    06:f5:01:bd:a5:e7:19:a4:ad:e0:e1:ef:6f:46:bd:
                    6e:4a:33:96:49:d5:7b:ec:54:21:1b:ef:b0:46:c4:
                    4f:c1:2b:65:5f:b3:c4:97:c6:65:ca:75:88:8a:b5:
                    7d:85:52:5b:44:88:60:ef:29:ac:2d:a2:21:5a:16:
                    07:e9:73:6f:0f:be:29:74:ed:32:89:cf:5d:0c:cc:
                    4f:79:20:ea:c4:d0:d4:0f:89:17:19:85:67:8c:e2:
                    c0:19:f8:8d:23:8b:f1:f6:85:ea:43:84:60:57:2b:
                    3c:57:ac:9f:81:ac:83:09:6d:a6:4e:46:ef:aa:45:
                    21:8a:62:6e:4a:7f:70:ca:e8:b0:a3:66:26:b1:47:
                    da:a0:5d:19:95:92:73:1c:9b:85:f1:7a:62:a4:ba:
                    21:84:5f:46:33:49:31:e6:af:ce:2b:96:5f:11:dc:
                    59:b4:34:67:ed:4e:53:94:be:61:5b:9e:3d:a1:ac:
                    97:fb:92:17:f1:9d:db:5b:d2:26:e2:7b:50:34:ce:
                    10:9e:f7:1a:59:c3:d6:36:76:a1:97:dd:9d:9a:5e:
                    4d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C3:B4:28:29:AF:AE:B2:99:7E:85:4E:A6:2A:3F:F7:88:9B:A7:95
            X509v3 Authority Key Identifier:
                keyid:ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f2:b2:97:58:4a:fb:3a:de:8d:0a:12:c1:b2:14:d0:ab:a4:
         54:5f:66:8d:53:f8:19:03:97:d4:44:48:93:18:33:a2:e1:67:
         31:f3:96:b1:3f:cb:a4:d3:ca:16:80:89:8f:0b:3c:e7:10:ed:
         1a:b6:76:7a:07:b6:48:f7:bd:cf:ec:7f:44:a9:19:0c:2d:53:
         68:ed:c4:15:f5:ef:bf:35:6d:ad:7f:f4:65:c9:2b:62:1a:fd:
         0c:0f:8d:6e:f5:27:ba:fa:bb:c8:bb:dd:6c:4d:25:85:d2:a4:
         99:76:06:cd:63:77:2d:e9:f5:3b:5b:0e:29:55:87:3d:6c:28:
         b5:54:22:f0:f6:9e:3d:ed:5e:6e:6b:f5:95:dd:b3:2a:6a:3b:
         c4:84:c2:84:bc:7c:7d:09:39:ed:cc:f1:ae:28:f9:45:83:fa:
         91:f6:93:ef:d1:34:57:56:db:54:a2:32:1f:9f:ee:fe:8e:fe:
         0d:87:20:e6:d0:67:fd:cf:e9:62:46:49:df:24:40:19:82:81:
         32:d1:7a:ef:3f:46:24:f9:54:06:09:72:f4:7e:f4:6e:83:6c:
         5a:6b:86:88:28:59:5f:f2:bd:4e:91:e4:ee:8a:d3:e3:4d:94:
         ab:a9:70:a4:65:c2:11:98:99:62:2b:1e:64:81:8c:81:fb:3d:
         af:79:8a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:55:54 2025 by rpki-client