Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File:                     a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier:          S4BpPccPCK+JQAScTCVa4zNAMZlB8UcvtayMuM17b9o=
Subject key identifier:   E1:C3:34:2C:BB:F5:9E:A1:B3:2A:07:F9:66:75:83:71:7A:5E:B3:3A
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer:       /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial:       0196C728A27873149E4744B7C881EBC935DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number:          1539
Signing time:             Tue 13 May 2025 01:00:51 +0000
Manifest this update:     Tue 13 May 2025 01:00:51 +0000
Manifest next update:     Wed 14 May 2025 01:00:51 +0000
Files and hashes:         1: 139lyeNlCTZU0BOy4AWB3XIegPQ.roa (hash: VzrpaxikQ2FR1JamVqwQwq75MdkFdQ6cyhvfG8bUdXQ=)
                          2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: 8yxsBsoE0OImAHrqcqOoGw5MRACDEE3LiyKSC0agjE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:28:a2:78:73:14:9e:47:44:b7:c8:81:eb:c9:35:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
        Validity
            Not Before: May 13 01:00:51 2025 GMT
            Not After : May 14 01:00:51 2025 GMT
        Subject: CN=e1c3342cbbf59ea1b32a07f9667583717a5eb33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:41:d6:b3:61:2d:35:2c:00:ec:28:78:14:52:
                    f0:dc:ff:bf:9d:41:0c:c2:3d:12:20:a5:7a:32:03:
                    ea:88:56:2a:57:e4:41:44:be:e5:9c:50:6b:f7:90:
                    3e:5c:76:e7:3e:9a:20:62:39:cc:27:a6:dc:aa:83:
                    0b:f2:49:22:2a:38:9e:bd:53:df:0d:d4:eb:65:77:
                    80:31:71:af:f5:fe:a2:ce:33:a1:79:57:2e:4c:57:
                    3c:3c:62:8f:a2:b2:af:ed:88:08:86:03:4f:41:08:
                    7f:a7:c7:99:be:81:b6:cb:a5:04:b9:4c:25:02:c5:
                    d0:49:ee:ae:46:3e:ab:7f:97:40:43:9f:49:b4:47:
                    17:26:05:77:e6:04:eb:32:cc:d7:25:82:4b:10:91:
                    b6:7b:0e:ac:41:d3:40:ea:62:69:80:ef:dd:3a:3d:
                    54:ae:97:a6:3c:66:cf:14:aa:b1:1d:06:95:12:20:
                    d5:e8:9c:19:c4:de:33:98:99:25:6e:6a:ec:09:8d:
                    a1:38:27:b3:8c:ca:7c:a4:f8:41:59:da:5a:49:05:
                    49:e2:b7:9f:93:c9:4d:d9:22:8d:41:9f:af:44:31:
                    53:3b:16:76:aa:ef:a8:8f:98:e8:92:c1:df:b9:ed:
                    e1:ea:7b:92:c9:c5:c2:f0:b1:a6:a9:62:7c:33:c3:
                    ff:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C3:34:2C:BB:F5:9E:A1:B3:2A:07:F9:66:75:83:71:7A:5E:B3:3A
            X509v3 Authority Key Identifier:
                keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:34:3d:34:6c:2a:0c:1e:51:69:72:b9:e8:0c:71:e0:5a:4f:
         ac:1c:fd:67:8c:66:3f:aa:4e:6f:e1:a3:68:47:b7:f3:bd:54:
         7b:87:e8:82:8a:f3:63:1f:37:6b:07:74:38:b4:1e:0a:16:54:
         aa:be:0a:dd:c4:41:22:ef:e7:07:5a:24:5b:b6:d3:95:3c:8f:
         8e:b7:87:79:f9:86:63:81:f3:52:9a:14:8a:c2:13:fc:10:cc:
         4d:67:2b:66:10:31:94:a7:c1:a3:c8:cc:2f:f1:a5:1f:2c:d6:
         23:79:00:50:79:13:ed:5f:fa:34:bc:2d:70:06:69:8e:a7:91:
         7e:23:2c:fc:07:92:7d:11:e3:59:21:e3:01:5f:a7:6d:b1:90:
         d7:0a:f9:08:38:48:b6:a6:36:28:b1:58:5d:b7:e7:56:66:1e:
         92:2a:e5:0a:77:40:5c:79:3a:28:7f:78:f1:e8:20:4e:5f:a6:
         e6:c2:e4:38:9f:77:54:05:b5:d3:c2:7d:5d:20:67:e4:34:9a:
         24:29:02:27:4e:cb:aa:6f:29:be:bc:9f:5b:e3:6b:28:50:cf:
         f4:b1:69:32:39:d4:f3:71:99:eb:52:e0:9c:c5:45:dd:16:89:
         c8:71:e5:2f:2e:7c:9b:91:3c:98:c0:03:ae:d5:18:aa:b9:7e:
         ab:91:48:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:26:03 2025 by rpki-client