Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File:                     2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier:          //QHFW09UNwIzERo1oY5vBwkWL07eS9WfceUJA1zel0=
Subject key identifier:   A1:E9:8F:06:AF:8F:25:C5:50:A8:18:7D:46:E6:8A:EF:2A:FE:08:67
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer:       /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial:       0196B3D93C14F984F092DA39FB90EE8B3CF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number:          152E
Signing time:             Fri 09 May 2025 07:01:20 +0000
Manifest this update:     Fri 09 May 2025 07:01:20 +0000
Manifest next update:     Sat 10 May 2025 07:01:20 +0000
Files and hashes:         1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: pjN2IBHp457IQtc69Rgsh4lw+aUTlvdNA7DpBDPz4rU=)
                          2: GOXBS-Rw3HoRkpT0tYtP2KL7EpM.roa (hash: ldPZi3nrSd+rsW5kOyvPmQNRmXMd2lIXfH1+hHWV7hQ=)
                          3: ZH9eOQBS3yZ2mNrRcAi8MSmUqK0.roa (hash: FuScQMcfDGwx602mjPNY0OCTclXZkY7f5k+RJSk2RAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b3:d9:3c:14:f9:84:f0:92:da:39:fb:90:ee:8b:3c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
        Validity
            Not Before: May  9 07:01:20 2025 GMT
            Not After : May 10 07:01:20 2025 GMT
        Subject: CN=a1e98f06af8f25c550a8187d46e68aef2afe0867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:8b:60:34:8d:26:5a:5b:43:bf:8b:ad:5d:8f:
                    bd:d3:3a:3d:3b:b0:f7:8f:0f:ba:5a:4e:0e:e4:ce:
                    dc:13:f7:d7:eb:87:63:7b:e9:91:8e:dd:12:b5:2a:
                    01:85:37:0a:96:79:4a:fa:90:52:75:98:b5:cb:80:
                    69:b9:b4:6e:cd:80:a6:ac:3f:62:f6:54:7c:90:59:
                    9a:32:38:a0:11:32:20:aa:df:34:ef:fe:53:64:e6:
                    86:aa:ec:d7:1a:25:fc:da:57:37:ad:c5:5d:18:b6:
                    c1:91:45:fb:31:af:1f:2b:a6:7a:eb:53:74:c0:31:
                    f0:f2:6e:05:7e:3e:c0:3b:01:eb:72:67:cf:0b:91:
                    25:13:3a:e7:0e:b0:eb:fa:ff:07:94:9d:85:3e:5d:
                    4d:2b:ac:b5:ca:70:d7:9f:5a:16:97:d3:7e:69:3b:
                    cb:c7:ec:23:9e:3d:77:36:b3:29:1b:bf:87:f1:28:
                    be:b1:b0:b6:d1:1d:17:1c:9d:0c:46:0d:21:a4:0c:
                    9e:07:c2:2e:13:54:d5:81:67:42:4a:f6:64:0a:fc:
                    35:d2:06:62:ba:c5:a0:82:a1:78:3d:9e:7c:91:e3:
                    9e:69:9b:9e:ef:48:e4:d1:8a:57:72:98:cd:6f:12:
                    e8:b9:8a:ca:73:2b:ef:c2:c9:37:61:5f:f4:d2:d9:
                    c9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E9:8F:06:AF:8F:25:C5:50:A8:18:7D:46:E6:8A:EF:2A:FE:08:67
            X509v3 Authority Key Identifier:
                keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:1e:21:50:7c:65:2c:51:7e:5e:2d:66:6e:e0:01:de:c1:af:
         00:01:3b:cd:f9:21:d2:f3:25:20:8f:32:a1:a1:d8:40:df:9e:
         0c:71:d0:bb:9b:fb:de:31:74:00:71:bd:c0:27:53:2a:41:3d:
         5b:20:1d:b7:75:34:e1:58:53:5f:93:6e:90:89:ba:23:e9:8e:
         82:62:e2:d1:2d:c8:12:b8:ce:35:bc:c8:3a:1a:e7:61:2a:65:
         62:35:32:f0:92:90:d4:98:58:fc:a4:50:38:a8:78:5e:08:5d:
         fa:2f:b5:87:cf:d1:4b:56:16:5d:6d:2c:3e:9c:8a:39:30:2c:
         7c:11:49:0a:92:ac:73:bb:8a:cf:7e:6e:57:34:e2:df:9a:14:
         c0:6b:e6:d7:9d:9e:b9:41:0e:35:20:a5:17:8a:e2:dd:0b:ce:
         a9:37:3e:dd:fa:ef:54:1b:fd:6b:24:26:0f:d1:2d:b9:65:e2:
         4a:ca:97:9e:e6:c7:12:45:90:6e:9b:ae:78:f2:5a:c6:f3:aa:
         be:9d:27:11:45:a2:04:9f:d8:22:2b:a5:fb:f7:65:39:e2:ac:
         f5:20:cf:72:e9:9a:c2:2f:6b:4d:00:87:1f:ae:74:09:b1:43:
         a0:7f:f5:71:6c:74:fb:e1:c6:6a:cf:e4:c5:9c:2f:cf:a9:b4:
         a6:4b:f5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:34:33 2025 by rpki-client