Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
File:                     MdqeNbdw4uaB91bNfSCBKoLhFhE.mft (raw, json)
Hash identifier:          qYxPuGwoSfOYY+5Oapoj8LJZbVrVmWmUccDLmhkpr1A=
Subject key identifier:   EE:59:AB:5E:06:E4:D5:B5:A6:0B:BB:03:6E:21:3D:DA:8B:6C:42:49
Authority key identifier: 31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
Certificate issuer:       /CN=31da9e35b770e2e681f756cd7d20812a82e11611
Certificate serial:       0196C8A8C38CD23F9563F7BE3C0424BD1FED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
Manifest number:          153A
Signing time:             Tue 13 May 2025 08:00:25 +0000
Manifest this update:     Tue 13 May 2025 08:00:25 +0000
Manifest next update:     Wed 14 May 2025 08:00:25 +0000
Files and hashes:         1: 5cSVF2_nio6952U-LXaO6EaByvM.roa (hash: W1RYT1KINzg4/aDaZcRwx3Kyxg4anoPRdOWZGqifkgo=)
                          2: MdqeNbdw4uaB91bNfSCBKoLhFhE.crl (hash: BWaJ2NuceYZThwgWFYwznZhgXG9ECygdsVXQvUxmVBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:a8:c3:8c:d2:3f:95:63:f7:be:3c:04:24:bd:1f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31da9e35b770e2e681f756cd7d20812a82e11611
        Validity
            Not Before: May 13 08:00:25 2025 GMT
            Not After : May 14 08:00:25 2025 GMT
        Subject: CN=ee59ab5e06e4d5b5a60bbb036e213dda8b6c4249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:86:eb:60:83:02:ef:c6:8a:f3:b3:3a:99:68:
                    8a:23:4e:b6:0e:28:24:f9:9a:21:d2:a4:06:52:f8:
                    dc:87:55:d2:4d:a9:c2:61:92:55:1a:49:d1:00:3a:
                    79:84:0a:a1:43:c0:39:06:0a:8c:e6:4f:62:50:62:
                    68:e6:d9:5b:c2:b3:b3:30:28:63:c1:35:69:d6:11:
                    a6:44:69:79:51:fa:ab:63:8a:3a:7c:9a:49:13:d7:
                    2c:74:77:49:09:88:5b:11:8c:3c:15:c0:e0:46:97:
                    26:9c:4a:2f:df:47:bc:30:6a:56:6b:ae:ef:89:4e:
                    74:c5:dc:8b:55:54:1f:5d:13:f0:53:09:f1:6d:98:
                    e9:73:93:3e:bb:38:c1:e5:1f:9b:cf:13:b9:12:06:
                    7a:ce:e5:08:45:77:42:0e:d9:6e:e6:56:29:80:3d:
                    42:d6:9f:4d:2a:86:f9:f2:6b:89:6f:8b:be:d9:61:
                    61:8c:10:4b:94:fd:b4:d0:5b:2c:f0:70:10:f0:6e:
                    c2:9c:7a:31:d4:0f:f5:59:a1:d0:f6:3c:b1:53:4f:
                    da:86:bb:db:ce:24:ce:96:0f:3d:43:f7:a2:04:99:
                    ed:13:ad:74:64:3c:1a:a8:37:09:c9:af:a9:16:3f:
                    fa:fa:b0:3b:25:78:f3:e9:de:90:eb:80:de:c1:b3:
                    be:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:59:AB:5E:06:E4:D5:B5:A6:0B:BB:03:6E:21:3D:DA:8B:6C:42:49
            X509v3 Authority Key Identifier:
                keyid:31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:24:cb:f0:f1:ac:ef:e1:cd:79:80:20:35:08:f1:63:2e:35:
         f4:ba:b6:20:cc:3a:e2:0d:04:a8:10:12:b3:c2:bb:04:77:c1:
         f7:fb:3f:38:a5:3c:3b:36:b6:a1:9a:37:19:bf:ad:a2:a7:23:
         56:0c:0e:4a:cd:14:88:5f:17:03:f5:15:51:6b:d9:c6:4f:a3:
         d9:0c:ae:a5:cd:34:e7:20:f2:02:6a:86:39:86:75:f9:df:57:
         a7:7a:c6:a6:5a:8a:02:00:14:0c:20:17:67:d3:6b:13:d4:63:
         56:4c:4b:c1:f8:f6:57:96:c2:ca:49:13:97:3f:17:14:52:f7:
         0c:ef:43:79:69:b3:d7:ff:c3:6a:3f:db:be:30:3d:90:ae:6c:
         5a:ff:bb:0d:86:22:64:ad:a2:c7:a4:a9:9d:2d:db:d0:8b:73:
         2b:82:7f:96:d2:80:91:76:ef:93:64:1d:c9:8f:a0:22:dd:a6:
         81:ea:3c:1d:30:ed:c4:d7:55:9e:e1:a2:8c:d7:26:d9:21:31:
         cf:39:d8:03:ac:80:3a:64:f5:fb:c5:63:08:95:1d:1e:6a:e3:
         9f:19:cc:a9:ee:30:34:38:54:29:7a:41:55:ed:b5:a1:5d:16:
         35:02:3b:c4:29:c6:6a:e3:3f:d2:af:f5:a3:3c:a1:0c:0d:9c:
         38:7d:b2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:18:52 2025 by rpki-client