Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
File:                     m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft (raw, json)
Hash identifier:          KC8tghlRaM1dh8/0g4TfBYhU/RqtYGrJhvs3Qvf5mqQ=
Subject key identifier:   FB:FE:24:27:D0:02:F3:88:E3:67:4D:0C:2C:DF:33:9C:F1:37:BB:F2
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Certificate issuer:       /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial:       0196A35325BE86E66C66023377083D38D823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
Manifest number:          1528
Signing time:             Tue 06 May 2025 02:00:57 +0000
Manifest this update:     Tue 06 May 2025 02:00:57 +0000
Manifest next update:     Wed 07 May 2025 02:00:57 +0000
Files and hashes:         1: 1TalR7Afli-hXkmIqf9328FI3Fk.roa (hash: CZU1GRNs7a/ZLVQIh1+1KE9CTeVWWUwOxmLShJ7hoBQ=)
                          2: 1rOZrsi2VH15nsMPM1hcZLORVXs.roa (hash: iSIJhNQhJCt3984hIwFcXBjIv6TT10z6x01UJ9CZjZw=)
                          3: SF3VU5SVWzi0_2Xar-2YOdcK-gc.roa (hash: AuIY2iLIo2qAdBJbw78kdAZId1WsZdROE7KvRyYurC8=)
                          4: m0Rt5yA8GGtQzeIweywdCKZ3vPk.roa (hash: 1a8qCx4A/hh4MAoCIXUYRzaVBoJjd0SdneNnyPupOv8=)
                          5: m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl (hash: WF8vwOxiAklYlnyRClze1DPa7AeNKBlRQcTbf/AaVA4=)
                          6: qEuf4JoFbNqWgmvGk1XHQxSlk4w.roa (hash: FprxjmSrJVIdrJmDZ/hiSKkUv6KnjJr3J8MVoY0gd6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:53:25:be:86:e6:6c:66:02:33:77:08:3d:38:d8:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
        Validity
            Not Before: May  6 02:00:57 2025 GMT
            Not After : May  7 02:00:57 2025 GMT
        Subject: CN=fbfe2427d002f388e3674d0c2cdf339cf137bbf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:7c:63:5b:6b:9c:b3:1b:e6:06:64:7b:af:b0:
                    93:87:51:26:84:3f:58:77:29:44:92:dd:45:d1:1b:
                    14:de:6d:1d:1e:7c:32:2c:e2:24:59:6d:16:8b:bf:
                    52:1c:27:d7:b4:64:35:37:f7:15:ca:a0:e7:82:0d:
                    ec:d8:51:57:7f:4c:9b:de:4b:b6:bf:67:a6:38:c1:
                    47:34:1b:d6:ee:33:de:e9:58:5a:2c:d3:21:57:42:
                    a6:28:07:c5:10:9e:b2:37:6b:94:ca:2b:72:12:c4:
                    a0:80:ae:fb:30:a7:6d:7a:45:12:8e:13:bd:31:00:
                    3e:30:27:11:5f:54:ee:57:8e:2f:a9:ca:ff:db:f3:
                    97:e0:8c:51:db:17:83:40:36:e7:de:50:c3:66:67:
                    0b:3f:2d:ba:39:31:f5:bb:87:d9:ab:bd:09:26:a5:
                    a7:2e:ce:a2:64:b5:47:50:93:0f:30:a9:62:18:36:
                    63:9e:7a:30:84:81:a0:59:64:59:9d:b2:ca:1b:40:
                    b9:4d:dd:fa:a4:0b:2a:1d:fa:4f:10:f3:cc:9a:60:
                    48:04:02:12:a0:b6:3e:2f:7f:85:87:81:e7:09:d8:
                    4e:26:f0:d2:92:a1:55:e7:85:d5:94:a2:48:68:22:
                    4b:b5:b4:ed:f6:b6:f6:ab:93:bd:97:b6:26:8b:12:
                    49:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FE:24:27:D0:02:F3:88:E3:67:4D:0C:2C:DF:33:9C:F1:37:BB:F2
            X509v3 Authority Key Identifier:
                keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:c0:c8:ef:45:32:ff:b6:19:9e:70:dc:77:a2:ef:51:da:6c:
         14:14:ad:33:5a:1b:dc:34:72:83:0a:2e:4d:9c:34:b7:40:e1:
         8c:bd:45:e8:8c:b6:ce:9e:86:a9:36:03:03:b7:01:70:85:e0:
         27:75:76:c5:bc:ba:ab:ac:75:d0:93:f0:ea:0b:4a:53:26:5d:
         e1:6d:52:0c:62:4c:25:c7:c2:f1:b6:b6:6c:a2:c5:74:13:22:
         18:2c:77:80:79:72:63:e6:04:46:1d:e1:8e:15:e4:2a:dc:20:
         e9:bf:48:ca:88:d9:6d:b4:6f:47:01:46:08:aa:3c:df:ad:2a:
         31:17:ae:6c:15:33:7e:a8:95:e5:de:f1:02:52:36:f1:df:c6:
         c3:1e:75:e6:ec:aa:63:9d:16:7d:b9:f3:4c:b9:92:7c:56:53:
         5d:f2:02:df:18:dd:ab:46:5e:8c:ba:67:65:d1:f1:7c:c2:65:
         37:33:67:3a:35:5f:5a:60:a0:ce:55:cb:d9:a6:ac:8b:82:09:
         60:60:03:99:8f:7f:8f:75:ba:9b:7c:77:3f:4c:8a:ad:b9:a3:
         b6:99:76:c5:c7:ae:88:96:59:12:a1:5e:42:14:4a:a1:a8:bc:
         3c:de:e6:e7:4a:fd:ef:a2:e8:8a:e3:d3:c6:79:44:3a:04:34:
         54:d8:80:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:38:41 2025 by rpki-client