Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft
File:                     wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft (raw, json)
Hash identifier:          1F1PhhkW9KEbs9krdJIB1oMss0yjjmSfJM7H0H+yi2I=
Subject key identifier:   86:C5:12:7F:2A:97:02:6A:7D:C1:81:9F:28:F1:7C:85:07:A7:41:57
Authority key identifier: C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1
Certificate issuer:       /CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
Certificate serial:       0196B634ECE6783501B04EC0FC307EE8EBBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft
Manifest number:          1531
Signing time:             Fri 09 May 2025 18:00:43 +0000
Manifest this update:     Fri 09 May 2025 18:00:43 +0000
Manifest next update:     Sat 10 May 2025 18:00:43 +0000
Files and hashes:         1: BQLlzRf92AV-wOpCiU3Uf7zFDTE.roa (hash: ojPLMpm1/7UXMtqHbqCurY3+N3TkMNGJ/j/f6zcsUls=)
                          2: E00rNsoiT3py_3yapmHFtC_Nhrg.roa (hash: NbpIiEieVkToVn1q+xbEvBZtrUTnRwlkypf+PLwHZU0=)
                          3: Vk7acJCttlxBVWzc1q7a4nWM7rQ.roa (hash: jqcFx2BzSJp7wY2CXpCRm4It9qRY3jR3QXLHSWI1gbo=)
                          4: W7hm1v1BZSRkI-g-Q988i-QfQmg.roa (hash: tTl/U0i8KKl6mpPXvqkEhYGwVtb5LDrDTJXxu7tcm3E=)
                          5: wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl (hash: yng84tbJy0kmCh6VHoEjHnG/cTYg5KgFI6geJkaeq0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 17:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:34:ec:e6:78:35:01:b0:4e:c0:fc:30:7e:e8:eb:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
        Validity
            Not Before: May  9 18:00:43 2025 GMT
            Not After : May 10 18:00:43 2025 GMT
        Subject: CN=86c5127f2a97026a7dc1819f28f17c8507a74157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:68:41:36:10:6d:dc:e9:7e:46:1e:ba:80:86:
                    0e:96:2b:fa:bc:1a:d3:aa:a4:ac:a8:34:08:83:c4:
                    af:ce:6c:8f:e3:c4:12:d8:e7:b1:33:2b:3a:7b:6a:
                    cc:c3:f3:58:f1:a4:00:b1:c8:d0:6f:b8:83:c1:68:
                    77:d9:ef:95:a9:50:88:0a:39:26:c0:7a:a4:12:f1:
                    0c:09:00:ac:42:8e:6b:75:56:1d:3f:ea:b1:29:88:
                    8c:17:04:72:83:81:bd:34:0a:5e:39:66:04:05:d9:
                    65:e2:9b:c2:65:7b:63:c3:fc:6a:2c:c8:da:7d:55:
                    d5:09:b3:67:3f:02:f8:9f:f0:c4:74:2c:90:6f:64:
                    8a:2a:c9:66:54:b3:1e:10:b0:17:f2:a1:e5:8e:27:
                    04:5c:b2:0d:8c:16:9a:29:c6:8a:ed:d0:71:6c:5f:
                    80:41:01:e5:83:e8:39:74:e2:3e:be:f2:65:ae:52:
                    58:23:b4:6f:9d:5f:d2:03:13:d8:60:05:6c:12:73:
                    61:27:d3:81:a4:18:53:ab:6c:f0:54:f5:26:50:9f:
                    97:22:e3:a1:66:90:39:04:dc:8d:77:e1:e4:90:03:
                    5f:b7:a6:e9:7e:66:73:fb:e3:55:dc:bb:9b:42:bc:
                    b1:92:3d:39:e3:bc:e9:60:14:d3:f8:28:d2:3a:40:
                    44:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C5:12:7F:2A:97:02:6A:7D:C1:81:9F:28:F1:7C:85:07:A7:41:57
            X509v3 Authority Key Identifier:
                keyid:C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:75:65:43:3e:36:3d:d6:46:06:5b:7c:da:c8:be:c3:13:db:
         6e:8f:35:2a:11:3a:9f:3b:97:ba:22:0e:6e:ed:7d:4f:0f:41:
         9d:e3:3d:5c:4b:9c:7b:97:b9:ce:7b:8d:90:2a:a5:bf:52:19:
         91:a9:fb:a8:e0:13:e7:dd:be:fa:90:e6:30:8a:ae:0d:a3:58:
         83:75:22:dc:c1:81:e9:e0:41:35:65:16:63:3e:e9:e9:5e:08:
         e7:a7:1e:ce:c7:ff:10:b7:eb:e5:f2:96:a0:b0:51:13:0d:aa:
         4b:6a:b6:f4:bf:b3:69:0a:b7:ed:41:9f:a9:25:e2:6f:77:82:
         4f:bd:61:5d:01:04:fd:19:c6:5d:4d:f0:19:90:62:0b:0b:6f:
         e0:1c:12:b8:b6:43:ae:bd:77:ad:c9:c8:07:a3:26:e1:75:97:
         93:98:d6:d4:9a:4e:ee:76:62:79:9e:a8:3d:95:f6:5c:7c:ce:
         e7:f1:0e:1a:de:4b:cb:e0:82:5a:14:4b:90:20:b8:3a:1c:28:
         89:0b:a7:fa:fd:44:09:16:65:5a:aa:ef:e0:e5:0c:9d:01:eb:
         a9:e5:d7:a2:ce:8b:fd:9c:e1:e0:9a:54:5f:fd:6e:2e:70:46:
         54:79:63:32:ef:b6:01:cd:9a:d7:94:3f:c9:bc:63:9c:da:86:
         85:fd:42:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:54:13 2025 by rpki-client