Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
File:                     d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft (raw, json)
Hash identifier:          H5GBnlW1CZvfH+bO4ItzDh3SWp7Mf6bSsUlBaICeO4U=
Subject key identifier:   39:49:D4:A1:06:E2:19:CF:68:9A:76:DD:DF:6E:4E:3C:DC:B2:66:B2
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Certificate issuer:       /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial:       0196B9DA5763B165E518BBDEF477AE747C2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
Manifest number:          1534
Signing time:             Sat 10 May 2025 11:00:16 +0000
Manifest this update:     Sat 10 May 2025 11:00:16 +0000
Manifest next update:     Sun 11 May 2025 11:00:16 +0000
Files and hashes:         1: 8sj8akoHRTPz11r3jLvMNT_NbaE.roa (hash: P2s2WOOKeXdgHhsxpLmfEClu5cRmFqEQjIJDZyeuzkg=)
                          2: WGokscrqIFlveSQ3XENDC_qxhbE.roa (hash: +LF+EeNcjsZJ5uw2CKGcqJlYFeUGcZcbeYs75HR4O74=)
                          3: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl (hash: bjcEUE1yXP4F+SzzF6B8TBY5BrhxBCw7b7s8CpMftOw=)
                          4: dnAa52jzMLokgprr8j83t7M0O7A.roa (hash: RXb076NQLFmuO+ZHzSd4Sn5TggUypoGBas2+Hq6jEsg=)
                          5: wIY_dvatExTHxCY_kuzX-QET3Ok.roa (hash: kjV0Ojugy4LwLs+YAfKt1FqrpFMJ2uDqQ/zPE3W7Ris=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 11:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:da:57:63:b1:65:e5:18:bb:de:f4:77:ae:74:7c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
        Validity
            Not Before: May 10 11:00:16 2025 GMT
            Not After : May 11 11:00:16 2025 GMT
        Subject: CN=3949d4a106e219cf689a76dddf6e4e3cdcb266b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:86:7b:44:bf:e7:aa:70:88:e6:b4:0b:fa:4b:
                    7c:bf:36:cb:0a:3f:6f:5e:00:13:14:6a:5a:d2:4b:
                    6e:94:59:03:c8:81:83:d3:a2:54:23:67:88:96:66:
                    de:a3:c0:2b:6b:d4:d1:a6:09:0e:e0:75:d6:08:43:
                    cc:7b:f1:dc:ce:03:9e:34:36:8c:99:14:e5:42:f7:
                    f7:71:16:2d:2b:fe:35:98:67:12:44:c6:28:d5:fa:
                    ac:2c:24:cd:6f:4f:ca:b5:b5:42:57:4f:be:1d:24:
                    ed:58:9b:e3:87:3a:76:10:e2:45:3e:02:e0:80:96:
                    62:fa:0a:59:c5:06:f9:8e:86:7b:8f:69:2d:ce:ad:
                    66:a3:81:cc:50:95:0e:68:40:0d:e0:30:c1:bd:1b:
                    37:dd:ee:a2:bc:05:91:08:7c:8b:77:30:c4:36:18:
                    44:4e:1b:42:dd:69:c0:37:99:43:79:6b:1a:69:ff:
                    bb:ec:70:55:fd:52:fd:6b:fd:02:8b:21:9e:d4:ac:
                    ac:05:26:7b:35:5d:47:9c:b2:57:b3:c1:95:19:33:
                    bf:d7:9d:86:f0:62:cd:b3:8c:45:71:a4:3a:42:b5:
                    f4:5d:b9:a1:0b:20:ff:ca:92:ae:04:5a:58:5a:f8:
                    84:48:0d:07:d5:e1:4a:9f:b9:5b:c6:90:0b:57:4c:
                    41:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:49:D4:A1:06:E2:19:CF:68:9A:76:DD:DF:6E:4E:3C:DC:B2:66:B2
            X509v3 Authority Key Identifier:
                keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e0:82:0c:44:08:45:fa:bd:64:54:70:a0:fa:c1:cb:3a:86:
         b4:4f:56:04:58:96:8d:5e:6d:77:2d:ef:eb:ca:e3:93:e9:05:
         15:d9:9c:7d:5d:37:e1:98:dd:c4:6f:1f:24:0e:c5:98:7f:93:
         88:97:89:5a:85:50:c8:b7:45:40:b2:59:23:5b:7a:a6:35:d8:
         12:31:a3:c3:60:fe:61:9a:72:8f:0e:f1:08:83:67:eb:7d:c0:
         f4:89:1c:38:0c:30:d8:43:f8:8e:57:ad:2f:26:c6:dc:91:eb:
         5a:f2:2a:16:26:17:07:c2:0c:40:12:e4:81:d6:dc:fa:ac:86:
         65:ef:7e:dd:99:33:77:5c:d8:a8:db:04:c4:0e:11:9a:a4:2d:
         08:56:e4:c9:a3:2f:ba:a6:44:1a:4b:65:79:ac:e7:3f:19:57:
         3e:26:ad:6a:96:cd:7b:fd:ec:29:c7:5c:8b:2c:f4:b2:23:dc:
         51:f6:39:b0:3a:8e:f2:84:e9:59:05:fe:6f:a6:cc:b4:4c:95:
         c3:f7:32:d0:bf:6d:b4:b9:40:51:7b:95:ca:1b:da:f3:01:13:
         64:52:77:fa:bc:c0:68:ad:a8:c4:90:67:04:01:d1:70:28:f1:
         01:38:d8:a3:c0:6f:a7:64:12:6b:84:98:43:ad:fa:ce:e0:28:
         16:27:69:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:36:42 2025 by rpki-client