Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
File:                     sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft (raw, json)
Hash identifier:          mggvCsXQT1xA2CaIAjUOqUdraiHlL30jNDvtv70K6Ek=
Subject key identifier:   AB:7F:77:68:A6:34:A2:05:96:06:C4:F0:66:F3:D1:F5:0A:2C:7E:04
Authority key identifier: B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE
Certificate issuer:       /CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be
Certificate serial:       0196AEE902CF4670B31B866B004F5CD93FD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
Manifest number:          152B
Signing time:             Thu 08 May 2025 08:00:28 +0000
Manifest this update:     Thu 08 May 2025 08:00:28 +0000
Manifest next update:     Fri 09 May 2025 08:00:28 +0000
Files and hashes:         1: Cl-s_kzYlAqMj9xfZRjzzsyjoOI.roa (hash: zKH1LTs9+Z8Dai2nZia/AYU5dJurOcYDxOkVkYs9o3M=)
                          2: sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl (hash: AO/q9A1VeMTR4qHYTOZJz1HV1I4ZENggvgv4nEbTa9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:e9:02:cf:46:70:b3:1b:86:6b:00:4f:5c:d9:3f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be
        Validity
            Not Before: May  8 08:00:28 2025 GMT
            Not After : May  9 08:00:28 2025 GMT
        Subject: CN=ab7f7768a634a2059606c4f066f3d1f50a2c7e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:82:cd:4f:b8:75:73:60:b2:df:1f:c8:27:96:
                    14:f2:1e:27:c2:b4:c1:f5:5f:74:cf:b6:56:2e:db:
                    f5:37:e9:35:ad:af:d4:8a:88:6d:79:5f:e5:3d:c6:
                    bc:c6:fe:00:6a:6d:be:bf:b2:20:d7:19:ab:79:c5:
                    6a:92:d6:a7:53:5d:bf:de:9d:43:17:c4:5d:82:f0:
                    a8:54:02:ed:08:0f:a5:9b:b9:a9:87:56:20:eb:d8:
                    58:64:9a:81:24:78:ce:73:28:40:bc:fa:95:80:cc:
                    14:32:34:c0:e4:af:87:25:a6:64:1f:a8:c3:78:09:
                    18:11:10:8a:3f:9e:95:df:32:9e:65:44:28:39:64:
                    d3:4b:d3:74:e4:bf:dc:72:f2:37:83:c9:4e:aa:0e:
                    dc:58:05:e7:a7:57:bb:6d:b7:cf:02:4a:f1:9c:d3:
                    00:a4:5c:42:62:73:17:e4:19:a9:c5:90:ef:1a:da:
                    b5:d6:df:5f:c0:0c:75:40:d2:2d:a3:c7:24:47:09:
                    ae:45:26:a4:73:f3:ea:94:05:39:6e:f8:18:82:8d:
                    97:24:e8:02:eb:a0:1d:f1:b2:86:3a:1b:c5:f7:af:
                    9a:29:9d:3f:d7:d6:da:c0:0a:01:11:d5:91:e2:16:
                    19:71:36:67:85:61:35:13:df:ac:ec:e7:25:b2:09:
                    e8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7F:77:68:A6:34:A2:05:96:06:C4:F0:66:F3:D1:F5:0A:2C:7E:04
            X509v3 Authority Key Identifier:
                keyid:B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:bb:46:a1:18:cd:c5:12:3c:be:4a:27:48:19:e0:ab:ad:2c:
         eb:33:2e:a2:4c:90:5f:11:ce:d7:76:4f:90:5d:27:3b:e2:47:
         e0:24:cf:b4:ec:52:d0:8f:f6:33:33:7f:6a:11:28:da:7a:ae:
         40:ba:74:13:01:1f:5e:c2:20:e0:c3:35:4e:c6:1f:73:bd:ff:
         b5:df:41:c0:23:d6:a7:6e:ac:91:05:4d:e2:e3:db:76:da:d2:
         6c:54:25:db:d1:16:e8:78:02:01:f6:25:a1:17:00:1e:33:43:
         90:ca:59:e3:d7:f1:fd:d6:bd:d7:c2:40:cf:bf:23:ce:9b:18:
         29:f6:b2:a0:74:66:eb:3d:f0:98:9b:a5:94:7d:5a:59:95:b7:
         9a:42:04:11:68:53:6c:cb:25:4c:d9:47:32:41:dd:01:7e:a6:
         cd:32:5a:b2:66:07:de:20:40:34:d9:c8:c3:3a:1f:72:1e:73:
         96:ec:a7:98:90:ea:fa:02:e4:fb:53:22:fd:68:4d:6c:b2:aa:
         6b:c2:e5:ad:65:7f:d0:1b:78:dc:6a:fe:1c:56:ab:84:38:58:
         ae:63:76:a1:d4:24:2d:4d:c8:26:f6:ab:c9:d4:1c:75:9a:48:
         71:e6:b2:36:27:fc:3c:0f:d2:70:0f:e4:dd:6d:0b:df:47:ee:
         3f:30:42:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:08:06 2025 by rpki-client