Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
File:                     ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft (raw, json)
Hash identifier:          oswhJCJRNfJlbjKAFjxjhoWC0LSqaXpU/4162gAu4Fo=
Subject key identifier:   5A:60:60:2D:96:89:9E:0E:27:10:54:E0:4C:40:8C:B2:AF:82:0A:F3
Authority key identifier: 00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
Certificate issuer:       /CN=0032534e8d560d73553c632bba10344a7c816614
Certificate serial:       0196BC002E0BB866A23C937563BE4D7C2401
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
Manifest number:          132A
Signing time:             Sat 10 May 2025 21:00:50 +0000
Manifest this update:     Sat 10 May 2025 21:00:50 +0000
Manifest next update:     Sun 11 May 2025 21:00:50 +0000
Files and hashes:         1: ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl (hash: yuKBDFfDcN0QBTMrNzAw2quxJwpmd9ur5usMcYRR8EM=)
                          2: OnXC0EMmctW1l-eN0LPWNOjUqPw.roa (hash: k0QnDPc78XQxy2Jh6N0H9Na60K6yINLRvcu8aefMv80=)
                          3: SdvawK2l2QMTxWUsBzsvDK2l55Y.roa (hash: 0IwztZlDbvlCLqvgLhsygToSdfiJSQpbte+efGKPWYs=)
                          4: Yes96KlqbG0mr87JhVnZBvHYB_g.roa (hash: n9jcRd3MdFn9mVFhJ/Pv7xaxOHOW7HhKsR2CUBypqZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:00:2e:0b:b8:66:a2:3c:93:75:63:be:4d:7c:24:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0032534e8d560d73553c632bba10344a7c816614
        Validity
            Not Before: May 10 21:00:50 2025 GMT
            Not After : May 11 21:00:50 2025 GMT
        Subject: CN=5a60602d96899e0e271054e04c408cb2af820af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:9b:05:d2:ca:76:ab:e9:03:38:51:0e:3d:
                    ba:03:7a:15:0e:41:bf:a2:e4:8f:19:5d:66:3f:9b:
                    a7:5b:13:37:02:c2:ae:e7:cd:de:c8:91:68:f6:6e:
                    98:80:06:4e:06:b8:21:aa:35:8c:93:e2:05:9f:fb:
                    b8:d7:c6:af:55:08:c5:e1:a1:b6:ce:ac:d0:86:01:
                    1f:1f:11:8a:a2:26:cd:25:0c:db:90:27:ce:c1:c5:
                    75:d2:a1:2d:73:ff:ea:f6:09:53:b2:aa:53:c8:12:
                    20:76:50:07:00:01:b3:3a:14:6c:90:f6:aa:f3:68:
                    d1:13:b4:e7:c4:e5:63:2b:61:18:fd:70:b7:21:03:
                    04:28:89:6a:8e:1e:fa:d6:87:a6:77:02:b7:15:b7:
                    73:61:27:d5:74:13:00:27:08:32:c2:54:75:b8:97:
                    9e:35:fa:49:78:14:bc:ea:bc:4e:92:4f:53:be:ad:
                    78:c8:35:1d:dc:3e:dc:23:09:27:03:f4:1c:01:42:
                    c4:74:4d:3c:1b:46:a5:1c:10:f9:7f:b1:fa:22:36:
                    95:8d:e3:60:9e:0e:40:e9:ff:9f:a1:01:9e:f8:9e:
                    63:95:54:ac:a5:2f:dd:a3:13:00:a5:65:70:3b:4f:
                    98:84:58:5f:aa:d8:67:3a:0c:3c:2d:e2:68:d8:62:
                    74:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:60:60:2D:96:89:9E:0E:27:10:54:E0:4C:40:8C:B2:AF:82:0A:F3
            X509v3 Authority Key Identifier:
                keyid:00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d5:61:e0:71:93:1a:77:79:9a:01:f8:61:9e:ed:5b:9b:3f:
         bf:b4:9b:4d:26:4c:40:2f:d9:2e:da:e8:5b:32:01:91:eb:36:
         cc:b8:01:4f:6f:e4:9a:ba:52:72:d8:98:72:63:53:f2:a1:10:
         b3:97:0c:f4:c1:a6:35:a8:07:aa:58:39:1e:b4:2a:0e:c1:e7:
         45:d5:c4:14:21:c4:a0:fd:2c:82:59:44:d4:87:98:63:44:90:
         54:b7:e6:c7:92:30:4d:e7:65:eb:2a:de:4f:5a:a2:97:06:ca:
         73:9d:4e:94:29:3c:a0:ef:d3:73:45:3a:87:c8:7d:62:86:0a:
         73:50:1e:64:2d:8c:72:c3:71:d2:7b:d5:92:fe:fa:31:0f:b6:
         1e:e0:96:4d:75:f1:92:cd:ae:4c:22:6a:43:23:4e:01:d9:22:
         df:f4:b3:9c:5d:f0:07:ca:cd:0d:ee:ee:c7:ff:88:b6:15:32:
         61:ee:36:10:05:61:bb:0a:14:60:89:88:aa:40:cd:67:c2:ce:
         38:e3:86:a6:6d:e8:3a:28:8a:3f:a8:95:68:16:58:82:01:0a:
         6d:0d:bf:a7:7d:aa:7e:40:c7:03:df:dc:0a:8d:47:fc:af:5a:
         37:6a:a3:5b:b8:88:f9:1e:1a:f0:81:a1:f5:6d:2d:c9:19:66:
         63:f3:53:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:10:16 2025 by rpki-client