Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
File:                     fGlngv8SGuWm2dXPo4R5dotr8L0.mft (raw, json)
Hash identifier:          uaqC9lZNNqv3tOtVguGuJ7fZXX5u19059q1bijL2Onk=
Subject key identifier:   DA:D7:75:D5:37:D0:E5:67:59:6B:1D:E0:0D:E8:2D:45:4D:80:FD:EB
Authority key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
Certificate issuer:       /CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Certificate serial:       0196B1456EF7887ED4B230DE06478E806A73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
Manifest number:          152B
Signing time:             Thu 08 May 2025 19:00:39 +0000
Manifest this update:     Thu 08 May 2025 19:00:39 +0000
Manifest next update:     Fri 09 May 2025 19:00:39 +0000
Files and hashes:         1: FkfRw3W5o9Q1hKL9_PjFqCq05Ws.roa (hash: 4MwvD7fZGQpgep7jIHcd6bM5rp3atmrIP2OsHiljfxI=)
                          2: fGlngv8SGuWm2dXPo4R5dotr8L0.crl (hash: pCLp6kmOrHbZdyz0zc0z+E9lBsinBOUd8I9iNmChtXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 19:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:45:6e:f7:88:7e:d4:b2:30:de:06:47:8e:80:6a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
        Validity
            Not Before: May  8 19:00:39 2025 GMT
            Not After : May  9 19:00:39 2025 GMT
        Subject: CN=dad775d537d0e567596b1de00de82d454d80fdeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:67:07:ca:09:d2:e7:70:0e:ef:5e:c3:88:6d:
                    d5:21:2c:36:31:1d:81:28:4b:69:d5:17:84:7c:3e:
                    d9:d5:f5:aa:99:b9:35:0d:97:47:41:e1:15:33:d4:
                    b2:b1:da:c1:3a:17:03:5b:a1:38:0e:df:91:70:31:
                    77:3f:f9:63:69:85:36:d2:47:5b:8d:fb:71:a5:25:
                    1f:69:58:d3:75:dc:bc:9b:9c:bf:81:f9:d5:2a:d2:
                    de:49:4a:07:d0:41:d5:1a:3d:ed:79:40:39:a5:ae:
                    c2:62:b4:e0:0b:a7:67:b5:8a:5c:3e:38:c0:b9:60:
                    7a:dc:89:4d:af:04:c3:f8:86:60:19:d4:b7:a6:6a:
                    e5:53:a2:9a:85:5c:26:13:43:50:ef:56:b1:d2:d6:
                    bb:8a:5f:25:8a:32:66:80:2a:e2:28:d9:e6:4b:e5:
                    0f:50:b6:88:e3:7c:e3:2c:e5:24:29:ac:21:4e:01:
                    67:1f:aa:c6:59:29:c1:5b:e2:0d:41:ce:bd:9e:01:
                    44:49:e0:85:5f:0e:5f:d3:39:16:83:f4:18:8c:45:
                    81:0d:63:87:1d:cc:03:34:d3:84:d9:a9:49:b9:e5:
                    9c:68:6a:4b:07:f8:fc:e4:fc:e0:fe:93:b7:d7:92:
                    5a:1f:d0:29:e5:0e:7d:8f:e0:07:10:32:50:05:36:
                    4f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D7:75:D5:37:D0:E5:67:59:6B:1D:E0:0D:E8:2D:45:4D:80:FD:EB
            X509v3 Authority Key Identifier:
                keyid:7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:6f:6e:41:71:c8:cf:b5:ba:bf:9f:e8:ab:b0:3b:94:8d:ab:
         59:f1:54:68:66:95:ce:92:54:01:41:06:53:2b:a7:5a:01:57:
         16:73:09:d6:72:f2:2b:01:bf:51:a3:1f:a4:87:0d:1a:5c:d6:
         e2:6d:8d:82:a6:ba:c2:de:36:fe:ca:16:db:dc:79:58:c6:3b:
         fe:68:99:2d:b7:14:bc:c5:cb:09:93:03:2e:36:51:df:ee:dc:
         db:36:16:6e:1c:5c:ba:af:fe:15:2a:23:b1:ed:e9:c2:d0:77:
         6e:33:7a:c1:40:fd:f8:ef:c6:28:5e:b7:63:c6:cd:6c:6a:b4:
         b7:48:71:1e:a0:6f:3a:90:e1:40:0b:fe:20:74:c0:bc:de:90:
         5f:9f:90:34:35:ac:89:84:18:6d:66:cb:f0:e9:93:0c:76:d9:
         08:00:ed:b8:1f:ef:d8:ae:fe:94:76:39:1f:41:ab:32:a0:24:
         16:44:50:1c:92:a9:53:a2:a9:42:2c:96:f4:c0:a2:ee:8c:f5:
         3b:82:70:2e:92:2f:15:59:11:38:5e:d6:09:b4:66:a0:ba:c4:
         1f:85:4c:3d:c3:c0:6c:d0:b3:ae:cc:f0:a0:a7:2f:b5:bc:d5:
         a8:fc:fa:a6:1c:2b:48:48:0d:07:a4:ab:d5:71:28:3b:a0:6e:
         ed:65:1e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:54:52 2025 by rpki-client