Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
File:                     K5KAl9yfiaejqKKWp4pPnQy84X8.mft (raw, json)
Hash identifier:          uDuRZQhk8QpKKApGI0CGHZe4RZjegAGgvubQ/mnc0gU=
Subject key identifier:   18:50:EE:6A:B5:A2:01:04:95:73:06:99:71:AC:07:16:5D:4E:69:F7
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Certificate issuer:       /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial:       0196BB922DF79CDFEC5A7A2B2E15A30F1619
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
Manifest number:          153D
Signing time:             Sat 10 May 2025 19:00:41 +0000
Manifest this update:     Sat 10 May 2025 19:00:41 +0000
Manifest next update:     Sun 11 May 2025 19:00:41 +0000
Files and hashes:         1: AmmERHoFL94GmD-TNoEsdCRoLA0.roa (hash: biK301TWdWY9asw86ndZF9AzE6I4gnsLDy1ooUih+WA=)
                          2: K5KAl9yfiaejqKKWp4pPnQy84X8.crl (hash: GZTA7hKdZexxqofsjKu5ncxjJ0zD+Zo14wyNFRZyLqc=)
                          3: Yir1wFnAK-DFdW1gJQQBqKeL_rg.roa (hash: /+asFMl4xLs7yAsL3JI4lb0AzpjlX5T5v9MFr+IdWAw=)
                          4: uUIHLpHOzvZGAd44SZTSJe8l41g.roa (hash: fYWeKpFER5K7DmZGk625fBtbp6QjScVAI5NXZ5fqiWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 19:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:92:2d:f7:9c:df:ec:5a:7a:2b:2e:15:a3:0f:16:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
        Validity
            Not Before: May 10 19:00:41 2025 GMT
            Not After : May 11 19:00:41 2025 GMT
        Subject: CN=1850ee6ab5a201049573069971ac07165d4e69f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:82:ec:08:ed:a0:22:8d:5d:4f:e3:39:1f:4a:
                    45:e4:77:fa:0c:fc:04:fc:42:4b:96:ce:60:9f:04:
                    2a:b5:c8:e4:24:b8:ba:2f:57:2d:c1:46:73:76:02:
                    c6:ff:da:9c:09:6c:a9:c7:a8:15:fa:9a:63:20:47:
                    5f:bc:7a:11:e6:ea:2d:dd:d7:dd:70:06:5a:99:6e:
                    ed:67:ec:1b:a9:d2:d4:08:af:c0:f1:56:ed:7f:f0:
                    5b:fc:58:86:57:34:67:07:8a:0c:02:af:06:cf:04:
                    df:46:d1:b7:42:c7:e2:11:d3:8d:95:d1:57:72:c2:
                    c5:55:bd:a8:74:00:eb:82:60:5a:d1:35:aa:69:ef:
                    14:95:34:01:9c:08:5c:82:30:5c:12:b9:96:f7:89:
                    da:2f:49:a5:3c:48:5a:0d:65:94:51:3a:9b:39:f0:
                    05:b4:43:8b:a5:83:b0:9b:1a:fa:6e:9f:5d:f1:59:
                    3d:87:61:e3:ea:29:42:99:58:c8:95:63:a6:d0:cb:
                    d9:60:5b:0b:4b:79:17:5a:46:71:9f:6e:f8:5e:5b:
                    19:ea:0a:1c:61:a2:de:8c:9c:27:e8:b2:63:2c:cd:
                    18:f7:99:92:8b:50:16:56:04:9f:18:31:88:de:87:
                    18:64:6b:23:6f:74:07:5a:02:60:e5:97:1d:05:73:
                    fd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:50:EE:6A:B5:A2:01:04:95:73:06:99:71:AC:07:16:5D:4E:69:F7
            X509v3 Authority Key Identifier:
                keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:92:74:4b:a0:70:d6:68:a9:1e:c8:1a:2e:9b:18:ff:38:a3:
         a9:37:10:d7:ad:58:c8:7e:a2:77:3e:ab:3b:bd:2a:af:9f:ed:
         86:db:ed:f1:a7:19:50:25:f9:ba:a3:8c:72:95:98:ca:43:1f:
         f9:99:8d:3e:1f:30:10:38:fa:75:59:9c:8a:4c:59:3b:f6:28:
         b5:50:e2:a4:31:d9:af:a1:24:ff:76:1a:f6:df:56:ab:bf:09:
         dc:27:69:e2:e6:81:dd:fb:95:32:00:6e:9b:21:2d:ac:08:70:
         83:29:1b:48:9e:68:c6:4a:fc:fd:2a:39:e3:98:a6:82:a2:6e:
         9c:d7:36:cb:ad:be:cf:a4:da:17:ca:e7:fa:de:44:62:18:65:
         a2:1f:4a:ac:ea:4b:e2:dd:25:a6:8c:a7:76:3a:6d:e6:51:d1:
         0f:a2:db:b8:3e:0d:e2:a0:c3:5b:25:ca:a6:46:4e:37:75:48:
         83:2e:d8:4d:66:04:73:8d:dd:a3:63:f4:66:fb:73:8d:1d:cb:
         72:9d:d4:8e:df:a1:e4:56:62:a7:52:f8:79:0e:d7:b7:d6:a9:
         f3:10:ea:b1:65:e5:43:ca:ff:6b:04:38:77:9e:d5:8c:ef:db:
         f2:48:89:07:c8:3f:c2:cd:d6:7a:27:3d:a0:c4:4f:fa:6e:3a:
         d0:e6:16:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:29:53 2025 by rpki-client