Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
File:                     m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft (raw, json)
Hash identifier:          1mrN21z580Nh2drwYihvMvPm5qsvTmQBdFfTlfEd+Hc=
Subject key identifier:   00:F8:B5:0E:F2:CC:BA:D5:5C:36:ED:D0:A5:A4:4A:D6:8E:18:FA:EE
Authority key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
Certificate issuer:       /CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Certificate serial:       0196AA9E67098B82731FA1EDE192049492BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
Manifest number:          152D
Signing time:             Wed 07 May 2025 12:00:29 +0000
Manifest this update:     Wed 07 May 2025 12:00:29 +0000
Manifest next update:     Thu 08 May 2025 12:00:29 +0000
Files and hashes:         1: 5XHrLiIM2y02izeT50u3RQeElIc.roa (hash: m1/SMtGStEqNpySfHpmo6F8175M2nkwVOpWEiQdkpBo=)
                          2: ejmalSfr1tk53rbyCCEzLQB9ZzM.roa (hash: g7L2imx6UGUuOAuG6UHNk4qxo7a783+bs7b/1OA2UdA=)
                          3: l0wAbULeVazPwYlU9T-Fs3m4VN0.roa (hash: DZ6o3hO1cP2UGjoUI60lf4xxGDkyAXhO8s2og9CadCc=)
                          4: m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl (hash: zd40GzblpBg69WRKK6egJB+XSdUZWhKvNoF4DxqIGmk=)
                          5: wk5e4hIcd56Z58a_bsc7eOFpvEo.roa (hash: rW3zDMHLagp1fBqXsKbxwNvVG019sDcCbQQDsBMyiNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:aa:9e:67:09:8b:82:73:1f:a1:ed:e1:92:04:94:92:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
        Validity
            Not Before: May  7 12:00:29 2025 GMT
            Not After : May  8 12:00:29 2025 GMT
        Subject: CN=00f8b50ef2ccbad55c36edd0a5a44ad68e18faee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ec:19:a4:e8:a8:23:e2:ac:a7:e8:a3:00:9a:
                    77:a7:fd:eb:79:57:dc:73:b3:d8:bc:ad:bc:57:f8:
                    42:db:0f:44:03:a4:00:c2:e1:db:fb:41:1c:dd:43:
                    63:c5:98:73:45:06:ef:05:cf:4f:33:1c:8c:fa:a5:
                    9a:35:f3:cd:41:cf:36:42:3b:d7:1a:ce:bb:e8:b3:
                    86:12:37:2c:b0:25:0a:8b:a9:46:a7:0d:88:24:10:
                    aa:cb:9f:d6:65:2b:88:2e:e2:10:24:5a:c4:67:43:
                    6c:e5:1b:0c:e4:d2:f2:49:0d:de:62:fa:a1:80:29:
                    c7:13:38:17:b5:5f:cb:25:e3:4f:9f:93:36:ad:56:
                    b1:8f:9e:ce:ce:e1:b8:bd:7f:45:bb:85:7d:62:b4:
                    e5:9c:64:a6:0b:ec:7d:a5:a2:56:15:d7:0a:ef:df:
                    0f:a5:64:d6:d9:f7:f0:ae:20:12:22:e5:92:eb:1b:
                    3e:e6:4a:1c:d7:99:bc:7a:23:a1:83:f3:0e:9c:bc:
                    4c:8b:29:c9:11:01:b9:91:04:bb:78:d0:66:ed:a4:
                    ed:20:b8:7b:2e:7c:94:ab:39:d0:f1:04:3e:a6:66:
                    ef:87:64:c6:97:7b:f0:36:87:48:10:0d:8b:7b:6f:
                    f7:62:75:56:0e:b5:60:12:2d:bb:7c:1c:f9:75:d1:
                    9b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F8:B5:0E:F2:CC:BA:D5:5C:36:ED:D0:A5:A4:4A:D6:8E:18:FA:EE
            X509v3 Authority Key Identifier:
                keyid:9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:e9:e9:ae:ca:37:aa:15:a3:84:a7:61:95:95:35:94:16:77:
         ec:41:56:71:58:eb:cc:a2:18:3e:79:69:77:51:90:65:63:2d:
         8f:7e:27:3c:95:a5:fc:dc:89:4e:75:be:69:07:31:2b:61:ba:
         d0:38:45:05:31:3d:d3:44:d0:86:26:45:3d:f3:cb:77:9f:56:
         b2:ed:76:b9:43:41:59:f9:50:3d:c5:43:54:75:29:65:c7:74:
         a5:bf:b0:ee:2c:77:87:a6:ea:ce:10:93:3b:1f:b0:d4:06:25:
         9c:6d:78:98:3b:ee:23:8b:50:d3:7f:c3:79:c4:c5:aa:75:41:
         f6:a8:63:64:fd:c2:0e:24:ae:40:5b:58:52:98:cf:7a:2c:02:
         a8:1d:ff:42:f1:9e:3a:88:e8:98:74:8c:d0:4a:b9:9f:3a:9e:
         17:f1:7e:0b:b6:7e:8c:f4:e1:58:22:7a:4f:fc:b0:dc:09:84:
         dc:aa:3b:a9:98:4c:f2:11:20:db:d0:57:72:46:1d:82:48:76:
         0e:45:c9:b9:6d:62:c6:07:b2:f1:4f:09:c7:3c:cf:7d:98:a0:
         5d:b7:13:5c:46:17:5f:7e:09:03:9e:64:64:c9:54:ab:56:8c:
         4c:1e:52:9f:8d:1b:f1:30:5c:01:04:28:c2:eb:00:01:40:0c:
         04:a3:eb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:31:21 2025 by rpki-client