Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
File:                     k1AwYeGuUD7GPZcLMIdd2T_6u98.mft (raw, json)
Hash identifier:          tTnZARBpEGDBfsvxHDIQYiNrBbLE4pwgkf/6h7axxKc=
Subject key identifier:   35:C2:87:A6:B1:ED:49:53:40:BD:41:0E:FE:98:51:7F:DC:0F:FF:43
Authority key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
Certificate issuer:       /CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Certificate serial:       0196A8E7333125C6CCB0FD9CB5986661925B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
Manifest number:          1255
Signing time:             Wed 07 May 2025 04:00:46 +0000
Manifest this update:     Wed 07 May 2025 04:00:46 +0000
Manifest next update:     Thu 08 May 2025 04:00:46 +0000
Files and hashes:         1: PLlM-caQciClvP4vmCR1thJm2Qg.roa (hash: 483jEz1mqdgxRO/yMJ0BYxcE+ZWZtXLMbpw6xeoN81k=)
                          2: UGR0Nm7XgEo_C52g4hZe_Rs5ZcQ.roa (hash: LA6rXbOmVl2jO/KpnJDcjc8gvW16w8N7yWXEbyRFi7Q=)
                          3: WkwzoKAp7V8ZhXL1g15aK61O6bQ.roa (hash: s5hrnFxpg0nBPQ3K+9u43Zz76gYas2owW8dLskXtTU8=)
                          4: i10NWUSGAIWexuZ8PjNhBDIKbUs.roa (hash: 1db21KiR5bFTQidbbCI1S4Ch0ZkfRZfQJSvHB/2+tIw=)
                          5: k1AwYeGuUD7GPZcLMIdd2T_6u98.crl (hash: KPx1a6S370q6ZaHJbuNXixMWLOHbhZjLu9HLGAX3Ee0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 04:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a8:e7:33:31:25:c6:cc:b0:fd:9c:b5:98:66:61:92:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93503061e1ae503ec63d970b30875dd93ffabbdf
        Validity
            Not Before: May  7 04:00:46 2025 GMT
            Not After : May  8 04:00:46 2025 GMT
        Subject: CN=35c287a6b1ed495340bd410efe98517fdc0fff43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:72:1a:e9:30:02:ef:18:9c:2b:47:55:e8:cf:
                    56:09:e6:46:0f:cd:9f:9d:25:54:cb:0a:68:7b:e5:
                    8e:32:96:59:86:58:1c:df:c2:3e:19:b7:77:bf:4f:
                    08:4c:4c:19:fc:4c:e6:3c:06:2e:52:43:9c:41:7f:
                    8b:76:00:8f:49:65:25:b8:9c:f0:1f:57:6c:b5:da:
                    9d:fd:53:6a:db:99:9b:fd:c3:ce:68:00:56:e1:1f:
                    92:88:8e:5f:54:0b:28:ca:bf:36:f4:42:03:50:6d:
                    45:0c:f8:0a:b3:f3:38:6f:99:0a:58:49:cb:66:a4:
                    a1:c2:0c:44:aa:d8:bc:f1:a9:29:88:ba:9c:c1:04:
                    4d:64:8a:27:d2:39:e1:ce:90:e9:86:42:21:db:41:
                    6e:16:4f:b1:53:6b:81:af:6a:80:da:31:c4:f2:04:
                    03:2e:97:ea:41:a7:f5:79:2c:29:d4:8b:ae:c2:75:
                    8b:2f:13:10:92:44:b5:9e:63:55:ee:08:d0:11:6c:
                    52:4b:b9:e0:c3:12:75:cd:cf:c8:5b:5f:ed:eb:65:
                    be:a5:5c:9f:d3:56:40:87:df:84:86:b9:3d:1c:d1:
                    d3:16:5e:d5:a6:b9:c1:2d:9d:9d:cc:0d:e6:d5:2c:
                    31:bb:9f:3f:64:36:8d:cf:ae:dc:88:a6:53:db:0b:
                    c1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C2:87:A6:B1:ED:49:53:40:BD:41:0E:FE:98:51:7F:DC:0F:FF:43
            X509v3 Authority Key Identifier:
                keyid:93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e8:e7:e1:78:ee:fe:4b:96:cf:16:1a:50:de:06:43:73:26:
         3a:a7:43:ee:a8:77:88:f5:53:b5:8c:42:58:89:dd:c6:c5:5b:
         10:14:ff:05:23:4c:fc:1b:03:aa:8d:aa:19:0f:d6:7d:c6:6a:
         7b:dc:09:36:a3:76:89:b1:3b:17:0c:74:6d:51:be:9d:7a:64:
         3f:9b:51:d5:a3:a5:d3:d2:d5:84:5b:fc:3d:85:a1:56:32:2b:
         e0:2e:e4:0f:88:0a:74:b1:1a:d0:cf:b4:01:85:c9:5c:9f:07:
         04:11:a2:36:d2:ad:88:83:18:8b:30:82:3b:11:9f:1c:be:25:
         01:69:2d:59:0c:a3:4a:d4:45:28:f9:0c:df:dc:b6:b7:34:64:
         9d:3e:bb:a2:42:4d:4d:b4:f7:ea:dd:75:20:31:21:99:24:b6:
         e9:3b:0e:8a:7d:37:c8:74:d7:35:9b:12:cf:01:48:e6:d6:c9:
         15:25:ea:89:2a:60:01:29:06:65:c5:ec:61:eb:5e:df:6d:fc:
         9d:aa:e0:69:31:b6:d3:63:f1:0a:40:92:29:57:88:e7:37:b4:
         b7:19:d4:0d:e6:ce:c0:0c:be:9a:27:80:ff:f2:d8:1f:b5:f0:
         79:60:8b:e6:f7:bd:0a:c1:de:43:f8:a5:3d:57:48:43:54:82:
         d3:bf:27:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:24:07 2025 by rpki-client