Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
File:                     U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft (raw, json)
Hash identifier:          WZU3/5h8rmCt/fWHIulljHLZ8ei3ptQHCd1zNh1Uj4Y=
Subject key identifier:   56:E0:45:5B:38:AB:EA:6F:D7:3F:8D:C1:CB:11:BA:FF:AB:CA:FF:3E
Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
Certificate issuer:       /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Certificate serial:       0196BF37DDAD4FB9ED2C9CFEEDCE387722AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
Manifest number:          1537
Signing time:             Sun 11 May 2025 12:00:31 +0000
Manifest this update:     Sun 11 May 2025 12:00:31 +0000
Manifest next update:     Mon 12 May 2025 12:00:31 +0000
Files and hashes:         1: 7FIS9JXLBhSn9Xd80njFKcjrU5c.roa (hash: YIkfZDnE728Jfdsal+Cj/SDX4JnmcF1VCDJGwCdL40A=)
                          2: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl (hash: q1cOMkKifwo4ktgfx5w9Oa9RiaeWCgPQjhIcDDop67U=)
                          3: znlbEhSL3OBIUicM0zTghSzFWq4.roa (hash: /UTNLfQ+6CNoZrCfqNv3q7AcPtlfut7ROp1orn1wCLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:37:dd:ad:4f:b9:ed:2c:9c:fe:ed:ce:38:77:22:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
        Validity
            Not Before: May 11 12:00:31 2025 GMT
            Not After : May 12 12:00:31 2025 GMT
        Subject: CN=56e0455b38abea6fd73f8dc1cb11baffabcaff3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3f:28:b4:9d:2b:88:d5:df:c5:a8:ff:85:28:
                    c0:e8:c1:d9:50:97:20:3f:28:79:a2:f3:12:2b:23:
                    43:25:06:b5:b9:3d:af:f2:64:c9:20:13:74:88:7e:
                    f8:32:a2:de:67:df:03:55:21:ed:b1:dd:54:80:17:
                    ae:9f:49:22:d5:7e:04:4e:85:2c:36:ab:90:c5:0a:
                    4b:03:2a:a1:59:c8:8b:cc:43:4c:e1:58:62:7a:c4:
                    d2:29:5c:23:15:cc:5b:76:62:ee:fd:39:77:42:25:
                    c7:76:43:3f:85:74:b6:87:c0:7b:e8:32:ae:bc:67:
                    9b:25:2f:77:3d:5f:32:85:f6:99:a8:e3:eb:e2:b6:
                    8c:b9:ce:7f:5d:57:27:41:23:45:6b:bd:3b:ce:ac:
                    6d:fb:45:61:3c:bf:45:68:5b:28:9b:b4:71:6c:2d:
                    e9:75:34:22:81:9a:d6:0e:eb:ee:f1:c6:23:c7:2e:
                    16:d3:a0:38:14:68:25:4a:c9:5d:d9:53:43:86:7f:
                    aa:dd:15:69:9c:6a:13:fe:40:df:10:15:c0:64:87:
                    80:d7:ce:6a:41:df:a0:82:73:4e:03:77:d6:2e:d5:
                    0a:f8:ac:7b:27:c4:ea:b3:b9:22:65:e6:d4:e9:e7:
                    38:7b:d3:31:1f:00:d3:87:a0:4f:8d:73:b8:8f:33:
                    28:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E0:45:5B:38:AB:EA:6F:D7:3F:8D:C1:CB:11:BA:FF:AB:CA:FF:3E
            X509v3 Authority Key Identifier:
                keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:20:68:3d:1c:d1:00:4f:8b:19:77:9f:40:f3:ca:11:62:30:
         20:cf:71:65:86:12:da:43:2d:8c:10:4b:33:d5:8f:7f:d0:d0:
         16:92:a2:bc:d8:80:87:f4:3b:0f:c3:d4:1e:86:a8:56:b5:b0:
         2a:a1:1f:f9:d9:20:1f:f2:f6:94:f9:44:c1:ea:f8:28:ed:bf:
         ff:19:3d:ed:6c:27:38:d6:42:36:c0:e5:6b:f5:bf:a3:e7:13:
         bf:46:5a:f5:58:48:09:de:df:55:65:02:0e:16:16:0b:9b:43:
         f5:4f:4b:8a:1f:02:2b:89:8f:08:77:6f:22:96:94:4b:48:4e:
         fc:ab:6e:71:0f:a7:99:b3:a8:f1:60:6f:51:3b:ca:4c:45:4e:
         ca:5c:72:ce:fd:27:a4:e0:9c:19:e9:c6:cf:a6:44:16:05:7b:
         bd:8d:ec:61:30:60:e7:0b:18:b5:66:e9:c9:34:2d:4d:ca:1b:
         eb:6d:71:d1:ff:44:d5:79:a0:1d:91:5b:b0:d3:55:ab:14:cd:
         62:e2:a7:2c:f3:3e:1a:79:47:17:bc:b4:76:3b:50:d7:a3:aa:
         e6:88:b4:4e:84:b8:5f:0e:3a:17:07:76:4b:f9:02:87:e4:f1:
         e3:5c:8a:20:0f:a8:bb:35:b2:a6:a8:98:e3:3a:ad:b4:6c:c6:
         aa:a7:c4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:44:46 2025 by rpki-client