Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
File:                     KZWUToTcN7pqQtaLseK5pEIehKQ.mft (raw, json)
Hash identifier:          x4qPZsmj1ESe+N6zRWZrpC0rvDmSb+CJXQZ5QS8XV18=
Subject key identifier:   53:78:69:A4:2A:33:50:71:53:26:80:07:9F:E2:72:B4:85:5A:3E:F0
Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
Certificate issuer:       /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Certificate serial:       0196B558B0B1400C3ADB872E5E118B311F22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
Manifest number:          152F
Signing time:             Fri 09 May 2025 14:00:10 +0000
Manifest this update:     Fri 09 May 2025 14:00:10 +0000
Manifest next update:     Sat 10 May 2025 14:00:10 +0000
Files and hashes:         1: 5zGonyGbziYUvusSh8Q5DC8llVk.roa (hash: S1qJmZBpZMGg2baTrfrvnMFHCPji28boUDCTeMahmcM=)
                          2: Iy-azWAI6KWrOd6xINfWkQK0mmo.roa (hash: WW8+TBzRLpV7fj0dmKJQYyc2cjZjFlGMNCS3c3X42Q8=)
                          3: KZWUToTcN7pqQtaLseK5pEIehKQ.crl (hash: 7aq4uaQ1JjobqZLg8heSXqfA00KkMO4uweNlhpKQ7IA=)
                          4: SkUUShcqahf4Ud48xHWiKU08GtI.roa (hash: FRMGmcPu5n4tT7AA3DByB+9obpA4BvNTbGm4L5aAqOY=)
                          5: k-lfK2Nu0bBTBeFW46-yt6JkICk.roa (hash: muqDHPsC+eweSCrdqAGPB3SXVNwkzBd2weVA2/7oxMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b5:58:b0:b1:40:0c:3a:db:87:2e:5e:11:8b:31:1f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
        Validity
            Not Before: May  9 14:00:10 2025 GMT
            Not After : May 10 14:00:10 2025 GMT
        Subject: CN=537869a42a335071532680079fe272b4855a3ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7e:e8:52:40:7a:cc:06:f8:0e:23:7b:99:57:
                    ca:c1:42:33:61:ea:fa:83:94:69:f9:2f:86:86:9e:
                    3e:78:2f:f6:ec:da:a5:37:e6:19:03:20:82:71:d3:
                    9d:58:52:a6:cc:73:c6:e1:d1:29:9d:ae:9f:1a:89:
                    69:b4:e0:53:25:a5:54:a1:40:39:e8:40:f3:e6:f0:
                    47:17:30:31:2d:6f:c4:62:3b:8e:48:8a:81:63:5f:
                    d6:32:72:d9:b9:70:4f:dd:36:b1:1e:11:44:e7:4c:
                    a5:b3:4a:c8:bd:ff:4a:cf:81:0f:c8:3f:19:55:de:
                    87:d3:42:64:4a:21:54:14:0c:ea:80:c1:e6:14:4d:
                    12:95:55:a1:87:9f:75:9f:e8:43:bf:53:e9:a8:6c:
                    0e:69:a1:77:83:2a:11:3c:6b:4f:4e:e5:01:86:78:
                    53:87:2c:eb:21:c2:1c:65:90:ce:c5:f4:6c:91:78:
                    54:9c:dd:55:69:fb:7d:f6:b5:a6:74:eb:ca:d7:10:
                    15:19:78:2f:e7:b4:a7:c9:15:02:55:12:75:bf:1b:
                    d1:68:f0:1a:4b:db:43:6e:6d:62:dd:9b:fd:a3:b5:
                    74:45:60:6d:67:d5:fe:fa:21:e5:bb:fc:c9:24:71:
                    97:ad:e0:07:10:7c:27:ae:29:c6:c1:aa:57:7c:b6:
                    c9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:78:69:A4:2A:33:50:71:53:26:80:07:9F:E2:72:B4:85:5A:3E:F0
            X509v3 Authority Key Identifier:
                keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a7:d4:4f:53:34:95:77:10:5f:0b:7e:f9:21:89:d6:8b:6f:
         52:ad:13:af:9e:70:1e:86:77:04:5d:fc:79:16:1c:64:20:83:
         49:d4:98:f6:a1:1e:1c:70:4d:26:ca:f2:19:3a:91:4c:d1:eb:
         32:f8:b5:c1:b8:13:a4:d9:0b:d2:50:a0:8c:1b:27:17:c6:cc:
         2e:0e:f2:72:1c:25:c2:62:81:41:55:38:42:a0:57:c1:c5:41:
         34:d4:6e:55:3f:01:be:7e:9c:b4:e1:3b:be:8a:46:f4:a4:a9:
         1b:bb:cf:b7:e6:34:8c:bc:d2:ea:44:8e:4a:43:fc:2a:53:10:
         aa:46:b5:cf:cc:de:3e:c3:be:1c:d2:b4:17:76:f2:77:b4:6a:
         5e:8d:79:2c:81:10:19:13:4b:8b:c3:93:07:91:59:12:ba:36:
         33:83:55:97:68:4a:ed:fb:1e:4d:d5:c6:46:fb:36:ec:3b:ee:
         c3:2b:9f:1f:c3:b9:62:c3:38:46:d4:d6:6b:3a:3f:b3:e0:bb:
         8f:3b:ba:51:8b:e0:4c:c9:71:c0:31:cd:47:e8:09:c6:5a:21:
         ff:30:25:30:7a:7b:5c:34:76:a4:3a:c0:6e:8d:a9:fc:25:25:
         f9:ed:04:58:29:ae:7b:8a:1b:e1:9f:84:c9:a2:b2:cb:9b:84:
         22:a1:d5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:48:27 2025 by rpki-client