Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
File:                     E38zct9XyBSrqLUakHhh2SueT1U.mft (raw, json)
Hash identifier:          m2KUpwfd7RhB5W9RUPnTMXIH+hG623p1p4j89242msc=
Subject key identifier:   52:29:AE:D3:B0:52:0D:15:D3:E2:A3:97:86:C9:A4:1D:69:46:95:36
Authority key identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
Certificate issuer:       /CN=137f3372df57c814aba8b51a907861d92b9e4f55
Certificate serial:       0196BE25A441F2E6D43953E370A21572F946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
Manifest number:          1537
Signing time:             Sun 11 May 2025 07:00:59 +0000
Manifest this update:     Sun 11 May 2025 07:00:59 +0000
Manifest next update:     Mon 12 May 2025 07:00:59 +0000
Files and hashes:         1: 8gvSRkioiol7AtclW0w3QDNdRw0.roa (hash: pAF2HpC02c8LxHhm/ivKqiw2U8OBqawxXoZZFN2vllM=)
                          2: E38zct9XyBSrqLUakHhh2SueT1U.crl (hash: XdxmsabpWfTOJh6VAtrEYIjtODseS0n/Gt1uHgV6JjQ=)
                          3: VqJZEln3bccahadYDW0ePgV1gdw.roa (hash: CgpHiF36vVgykBJlcL4O9MnI1LRoTpD9E00VJ7RhYwg=)
                          4: wQk6P3JazTtfJ7Qbak1iF7pmDzU.roa (hash: yyhyj8+uWZT4ObCsZinsPoUAt/nN+0r3AmItPKtF2y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:25:a4:41:f2:e6:d4:39:53:e3:70:a2:15:72:f9:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137f3372df57c814aba8b51a907861d92b9e4f55
        Validity
            Not Before: May 11 07:00:59 2025 GMT
            Not After : May 12 07:00:59 2025 GMT
        Subject: CN=5229aed3b0520d15d3e2a39786c9a41d69469536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:8e:09:02:d5:94:4a:dc:59:72:80:44:b6:
                    ad:ef:36:61:00:ff:b7:91:2c:b4:bb:0d:b6:d2:24:
                    90:a7:59:cd:e9:d8:7c:fb:04:3f:2f:46:1b:6f:06:
                    a5:8a:25:ca:f9:e7:f0:13:d9:31:f0:0d:ba:8b:85:
                    b0:95:b0:7c:8d:22:45:4d:49:95:d4:21:2f:9f:2d:
                    2f:86:ee:fe:89:0b:db:05:d8:d1:38:41:69:59:19:
                    e9:da:15:26:fa:f5:26:7b:da:dc:b9:59:0e:ba:73:
                    4b:e0:e8:4f:47:f4:87:1f:b4:a7:d9:f4:d6:ce:7a:
                    bc:37:6f:d1:cf:d1:93:93:f1:fc:79:51:a7:50:9f:
                    6b:6b:ee:78:d7:c9:d2:c4:eb:fe:41:cc:6c:84:64:
                    27:b5:4f:62:07:72:c9:24:5e:21:05:8f:ea:e9:d9:
                    91:61:35:32:8b:c6:b4:2a:40:18:19:26:4d:39:52:
                    03:42:96:f5:28:a3:75:99:9f:cb:57:ac:74:23:a5:
                    65:37:7d:59:bd:9e:1f:63:11:2a:49:98:6f:d7:00:
                    ab:54:a2:df:92:71:bc:ae:65:90:95:e6:61:06:f9:
                    05:4a:4d:d6:32:db:f6:f4:23:ea:98:13:bb:74:4a:
                    e3:34:bd:5c:64:5c:a8:25:6d:e9:c0:89:c8:ad:1c:
                    aa:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:29:AE:D3:B0:52:0D:15:D3:E2:A3:97:86:C9:A4:1D:69:46:95:36
            X509v3 Authority Key Identifier:
                keyid:13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a7:35:cb:2a:ba:56:95:2e:80:c9:2f:93:7f:6d:6d:c8:57:
         b9:6c:ff:65:a4:ba:b0:5f:a2:46:cc:80:b0:6f:47:61:f1:93:
         0f:f5:ca:ce:58:fd:28:27:5e:58:60:52:6e:d4:1f:81:9c:c5:
         f5:a4:d6:f0:4d:d9:aa:da:e0:64:75:99:fb:52:42:8d:82:e5:
         92:18:f9:8f:64:5b:42:03:0f:13:a3:ca:be:5e:e4:e4:ad:cd:
         15:b9:75:77:75:1b:53:a1:10:d2:30:d7:8a:54:75:3f:83:ba:
         74:bc:fb:86:5e:81:59:f8:61:b0:7d:85:88:c1:7a:e3:43:2d:
         05:d6:d1:6b:ca:54:b8:e5:05:23:0c:59:b1:57:df:75:48:e1:
         84:90:39:f8:25:50:37:5a:5d:ab:8e:2d:d4:05:90:a9:d2:df:
         60:da:41:ab:53:5e:56:02:3c:68:ca:91:e4:ca:ef:9e:04:92:
         64:f4:e2:e6:33:2f:83:fa:d6:d2:5e:da:37:dc:61:94:1a:ac:
         8c:af:88:4d:61:e7:26:7d:c9:cd:74:ce:05:46:35:ac:6b:0f:
         b7:ad:80:76:cb:c0:f7:19:23:b8:ca:9a:c9:06:42:d1:f0:dc:
         46:74:87:9a:85:a9:3b:16:a4:b6:1b:9c:d8:60:b5:cb:e3:1c:
         7b:b0:9f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:20:42 2025 by rpki-client