Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
File:                     F__x54w3SZ1y0Qi6co7wKbfw5_M.mft (raw, json)
Hash identifier:          3a3p5xhSh2cx8f6Se2LwiXa/T+FwKP16LetnQnESXJk=
Subject key identifier:   59:DF:BB:DB:F9:65:87:74:35:66:DB:64:73:62:AA:42:21:2F:3A:3F
Authority key identifier: 17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3
Certificate issuer:       /CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3
Certificate serial:       0196AEB21353020FEBD8DE50F030ACF79BDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
Manifest number:          152D
Signing time:             Thu 08 May 2025 07:00:28 +0000
Manifest this update:     Thu 08 May 2025 07:00:28 +0000
Manifest next update:     Fri 09 May 2025 07:00:28 +0000
Files and hashes:         1: F__x54w3SZ1y0Qi6co7wKbfw5_M.crl (hash: lHFP8WEt0MskC4IYySVJ1GnWE5MuCXmaj/rh26UJHn8=)
                          2: IY_YnCkvvSHp9GfIvU2RPaUcTbw.roa (hash: DyBmKVyEULzTcgLEO9H1ApnqiTxiBMTx1NS1xEQhss8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:b2:13:53:02:0f:eb:d8:de:50:f0:30:ac:f7:9b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3
        Validity
            Not Before: May  8 07:00:28 2025 GMT
            Not After : May  9 07:00:28 2025 GMT
        Subject: CN=59dfbbdbf96587743566db647362aa42212f3a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6e:86:ba:59:f2:67:2f:63:a4:8a:e0:be:ab:
                    96:06:a0:75:91:7d:4b:03:8e:af:3f:8a:23:e6:b5:
                    21:1e:e8:ce:0f:91:0e:bd:63:dd:54:e0:ed:22:cf:
                    5d:40:04:19:6f:b4:e9:99:01:96:51:04:f9:85:ad:
                    48:33:c8:51:61:ea:c0:4c:f1:fd:23:59:28:c8:69:
                    42:3f:6f:05:bb:bd:c5:e4:05:11:35:80:b0:15:4f:
                    c0:d3:b9:18:a3:a2:fa:04:06:72:f2:b2:3c:67:e1:
                    f1:ff:f9:91:ec:aa:dd:59:c8:cb:0e:ce:12:cf:fe:
                    f7:fd:75:ed:a6:03:e1:8a:a5:02:67:a2:70:4d:30:
                    6c:97:5f:a0:2d:a5:40:93:90:df:4f:e7:64:d9:94:
                    49:ea:94:0c:d2:4a:a8:66:86:01:8d:fa:06:15:05:
                    24:11:5a:28:42:f9:46:22:56:19:ad:f7:86:eb:91:
                    fc:0e:0c:74:bb:13:43:8b:5c:f2:8c:6c:a7:c4:cc:
                    57:cd:3e:bb:f4:c8:69:5f:cd:68:94:ab:6c:f7:c2:
                    ab:ae:73:32:80:b2:b1:96:c2:7f:4a:a9:19:dd:c3:
                    bc:05:43:dd:31:47:46:e3:c5:29:68:9b:01:41:a1:
                    a8:75:72:4b:c1:46:58:ca:ef:1d:5f:15:fd:e2:a3:
                    10:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DF:BB:DB:F9:65:87:74:35:66:DB:64:73:62:AA:42:21:2F:3A:3F
            X509v3 Authority Key Identifier:
                keyid:17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:52:ad:a9:92:24:d6:74:93:fe:c9:c2:38:cd:33:fa:ec:c8:
         7c:3a:1b:08:53:da:c1:fa:74:96:c4:fb:4a:1e:a7:12:69:73:
         10:1d:c7:07:b5:e6:7b:ce:39:f9:7d:68:8e:19:1c:1b:ae:35:
         66:c9:92:96:ef:4b:b6:d7:76:19:e5:26:fe:cd:cb:b9:ab:51:
         52:5e:61:35:86:16:07:df:65:9e:12:e5:fa:ac:a9:59:0d:66:
         65:e5:12:d3:e2:f2:8a:c2:d9:09:d0:80:6f:37:ef:15:09:7d:
         95:05:26:71:d5:50:cf:aa:ea:4f:32:c9:e1:db:72:e4:bb:96:
         ed:29:0f:92:80:ab:1b:79:60:a0:71:e5:19:62:ef:cf:ff:12:
         50:84:27:e7:23:d3:a1:31:a7:cf:98:8c:44:58:69:1a:63:bc:
         9e:7b:7e:41:b7:c9:38:b7:60:7f:bf:8c:40:dd:cb:48:56:c6:
         ef:6d:10:4e:ee:7a:35:d8:a5:9e:2c:f8:23:c8:55:ff:7a:13:
         84:a0:37:04:7f:d3:ea:9b:ab:42:60:63:cf:d0:2a:c1:0f:6f:
         5f:62:a5:a6:83:3b:07:85:ec:a1:de:6e:10:8f:fc:45:b4:70:
         37:e0:cf:17:20:e8:3e:e8:20:fc:8f:27:49:52:60:88:4b:cb:
         cc:2c:81:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 17:22:25 2025 by rpki-client