Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
File:                     yUcK5Bju3dazna6eehd6Gcd5nEE.mft (raw, json)
Hash identifier:          wArRvhUT9kAEXZ7BmKURpRlDMKYBMWpINlrM5GN3ENw=
Subject key identifier:   19:62:23:43:71:9D:CB:8C:10:8F:8D:ED:E1:02:7F:82:D9:79:C2:4F
Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
Certificate issuer:       /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Certificate serial:       0196A3C099654508E39F398923E1EC01E47F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
Manifest number:          1527
Signing time:             Tue 06 May 2025 04:00:30 +0000
Manifest this update:     Tue 06 May 2025 04:00:30 +0000
Manifest next update:     Wed 07 May 2025 04:00:30 +0000
Files and hashes:         1: CIsZyO4sYlxS6zxs93wo-C0_kOw.roa (hash: ioxln7YvRG7zaRY74N5lo8NJZPbsX7Lowl9YoqVb2QM=)
                          2: SLGZR5HlGlUvyxXb4J9dlFoOmHA.roa (hash: ItBZnQTRFfvhdaqeW1Co9+W+Nd7SvqU9wrygJFtBPMk=)
                          3: jX1iMEMhj6_WdXTUBq0GlWaaV20.roa (hash: 8QCHzWOckFZKqXALiiMy/qW6wfPGm8V2LBqLIdFNZH8=)
                          4: yUcK5Bju3dazna6eehd6Gcd5nEE.crl (hash: OvYpRE+jgsgAHsGO3mdSRH/8y7KnwdQd+/VvlO07xBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:c0:99:65:45:08:e3:9f:39:89:23:e1:ec:01:e4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
        Validity
            Not Before: May  6 04:00:30 2025 GMT
            Not After : May  7 04:00:30 2025 GMT
        Subject: CN=19622343719dcb8c108f8dede1027f82d979c24f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3a:9e:48:d1:40:31:08:c0:e4:27:9e:ae:f5:
                    0e:55:e3:9c:3f:b8:47:22:87:cd:c3:46:0b:38:18:
                    ab:a4:86:d6:02:88:75:c8:83:cb:83:e4:1b:dc:cc:
                    76:76:69:85:d9:5c:f6:a1:ef:69:05:63:35:28:c2:
                    aa:22:fd:b2:3c:bf:b9:6c:35:c5:b7:dc:ac:d2:41:
                    5c:5f:74:9c:6a:e3:53:50:7b:8b:1c:f0:cf:46:94:
                    c7:98:a0:f7:e1:37:45:82:7a:54:e3:73:dc:68:ae:
                    3e:56:71:25:f5:2e:e0:5e:d6:56:f5:e6:e1:b6:21:
                    5c:13:76:97:98:9d:83:4b:c9:97:88:91:50:95:b7:
                    21:f7:5b:15:31:66:a0:53:47:da:ef:74:81:38:6e:
                    2e:91:19:c8:cf:4d:62:7c:60:bf:16:03:cb:b7:7e:
                    d8:a5:85:c9:64:15:5e:46:ab:f0:30:5f:81:9d:18:
                    16:c0:1f:ee:cd:bf:7b:f2:4a:bf:58:90:4c:4a:7b:
                    7e:d5:78:9e:42:01:1d:1d:be:93:64:6b:30:b3:25:
                    4f:ee:ac:97:24:df:31:02:2d:5d:f7:c1:a8:a7:ad:
                    5f:26:3f:f6:b0:87:47:8b:f1:c9:ba:02:05:b8:e0:
                    87:d4:fc:c7:bc:7f:5b:ed:42:3d:b1:36:61:ee:90:
                    59:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:62:23:43:71:9D:CB:8C:10:8F:8D:ED:E1:02:7F:82:D9:79:C2:4F
            X509v3 Authority Key Identifier:
                keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:35:3f:a2:d4:21:d5:30:0d:2f:51:60:e9:d8:0b:f0:1f:bf:
         41:6b:3b:17:bf:6e:8e:64:70:54:23:86:9d:b6:12:a8:5f:f7:
         e1:37:a6:26:d3:3f:65:4b:c9:32:0a:ae:8f:42:bb:99:84:c5:
         cb:4c:38:e9:7a:0f:73:95:b4:87:76:ff:44:d9:e7:6f:c1:04:
         eb:32:9a:4f:cc:cc:d4:c8:96:e2:b8:ce:43:b7:72:46:45:e0:
         e8:45:f9:ee:23:18:d3:d3:19:c0:87:20:7e:6e:9b:2c:92:0c:
         d1:93:d7:cc:6b:06:46:55:bc:e5:20:d7:19:ea:bf:f7:0d:21:
         7c:b8:fb:b7:2b:47:91:7c:47:80:44:79:67:e4:22:33:18:97:
         89:08:39:c1:e0:cf:7c:d3:de:35:83:57:25:9d:08:7e:e8:00:
         73:98:bf:09:1c:32:67:e7:dc:fb:53:83:f4:a6:b3:1d:57:e6:
         5b:c4:33:88:42:2c:0a:28:54:1a:dc:f4:a7:f2:c5:16:70:7c:
         bf:6b:61:26:90:6f:cc:43:8a:20:d0:40:73:71:8d:31:e9:51:
         fd:60:56:b8:7a:23:01:0f:68:f2:d3:21:fc:c2:82:e4:c5:36:
         69:4a:1f:1b:ca:67:e6:f0:98:57:4b:d7:35:1c:44:95:4d:9f:
         68:ae:ac:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:48:25 2025 by rpki-client