Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
File:                     mlJqc86Pn2LBShGi6pE-wnPVjEY.mft (raw, json)
Hash identifier:          QLvWEaYsj/jNHuIA4jbhEWJoP2XUuHuD7uLXPtBl2gc=
Subject key identifier:   80:E2:68:57:0A:D5:45:99:39:87:65:93:E9:EB:48:3E:1A:08:65:F7
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Certificate issuer:       /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial:       0196A72F7B4F7D549D6D73AAB0A3CA510E9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
Manifest number:          1533
Signing time:             Tue 06 May 2025 20:00:28 +0000
Manifest this update:     Tue 06 May 2025 20:00:28 +0000
Manifest next update:     Wed 07 May 2025 20:00:28 +0000
Files and hashes:         1: 37xCCUhytigOkbo8skkNphl6CDo.roa (hash: EZZOllbO3rU0Aq71pT+LnxPWU1OR5RUdYC5xtbHlqV0=)
                          2: EzlaPz9ay6RZ4KUo_Zx1lcWyYyE.roa (hash: 8mVwmiELeQwOp0IzUJ7CNWnPRJxXboTOfv7waHdL35E=)
                          3: HmloYPhthfBI7_3S01XoeHMHM_0.roa (hash: zT7e2sKU35SC+6Uf05YzOC00VreFA+3zPNOd9kp3exg=)
                          4: aBb_QnqfCmFuIbPpQn9d7-oaQds.roa (hash: 9cT2/7QK1Jv3/LAJrIXNohZ9zwR8FjnbBcxZKBheYgE=)
                          5: bJE571Es9mWytmWy8Hm2hU0LvwQ.roa (hash: G4ykv8ElUqNocIC2Di9TU9f+tq6JYb2XSPQUlNwbQs8=)
                          6: jNEc9JKntfCRYR_UowBHCVGcgfU.roa (hash: wUVreTUUoleXZY0NQI3FxCnAa07OL9N5o1BFPoQRf+k=)
                          7: lPFksRdLJVDV0BeRSYCopl0nK1A.roa (hash: Z/l2sT/TM2PqTeCwRcYw3ZHE/PJvSKLQBMiM2PLHoBk=)
                          8: mlJqc86Pn2LBShGi6pE-wnPVjEY.crl (hash: 4odnB+/LqqrftvVeGi2U0nN+sZIgTTnqlz8lAOWq2Po=)
                          9: xovZOIhlPZ45N9oOxx7_NSJCrEw.roa (hash: JeeMpjw12qOmA0b+WEGyWZXkSEOnUNh26ITmvmBxXbk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 16:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:2f:7b:4f:7d:54:9d:6d:73:aa:b0:a3:ca:51:0e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
        Validity
            Not Before: May  6 20:00:28 2025 GMT
            Not After : May  7 20:00:28 2025 GMT
        Subject: CN=80e268570ad5459939876593e9eb483e1a0865f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:ae:5c:ba:fb:e4:f6:03:bf:2e:32:47:c7:
                    b4:63:25:2e:68:a0:42:d8:09:32:5d:e1:98:1e:41:
                    ea:02:c5:a4:e5:2f:a8:94:22:02:15:e5:14:9b:d4:
                    a7:92:71:a9:66:57:23:9a:e2:42:55:03:7f:82:84:
                    62:d1:d3:e1:37:f4:f5:2f:ac:85:ff:c4:db:20:32:
                    22:af:6f:a6:a8:7b:3d:09:0f:47:c0:82:9e:44:08:
                    a2:a7:2f:68:4c:42:e2:eb:1a:a2:5e:cb:e0:41:f5:
                    e2:2b:89:e4:69:54:92:e1:2b:0b:fd:bd:98:07:8b:
                    70:74:76:fe:98:42:81:c3:61:a9:a0:63:5c:97:37:
                    38:6e:e4:22:b9:67:38:3c:99:02:92:0a:d7:58:bd:
                    2c:57:c6:9e:a9:b4:12:4d:1a:8a:90:fd:c2:ba:12:
                    b2:0d:a7:8f:37:76:f9:7a:a6:71:f9:a4:fc:f5:13:
                    f8:fc:1b:72:db:2d:be:2f:ef:c5:27:0c:49:66:85:
                    47:81:72:ce:ab:4c:8c:66:2f:f2:6b:25:5c:62:6f:
                    84:4b:af:7a:be:79:21:8d:7e:61:66:6b:15:0e:cc:
                    19:f7:f8:68:a0:8b:bf:db:ac:fc:59:68:17:f5:59:
                    dd:00:32:98:ba:02:e8:e3:b1:04:04:35:9b:bc:b4:
                    01:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E2:68:57:0A:D5:45:99:39:87:65:93:E9:EB:48:3E:1A:08:65:F7
            X509v3 Authority Key Identifier:
                keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:04:8f:42:7b:be:aa:6a:0e:5f:a0:71:3d:35:31:14:f0:e1:
         77:da:ea:b0:b9:a2:f8:16:dc:67:0b:af:0e:4d:b0:5e:04:7e:
         fe:b0:45:6b:fc:66:37:5a:54:7b:38:36:6f:c3:47:71:6f:3d:
         03:5d:36:cb:45:81:80:31:29:30:fa:16:e5:67:ec:c9:d6:f2:
         80:2a:40:ac:4e:01:13:71:53:03:3e:fa:d1:f7:57:49:83:1c:
         33:f5:ea:2c:d8:08:f5:3c:75:01:5f:81:9a:10:9c:44:d9:71:
         93:94:3a:70:b7:55:8a:6b:8e:f4:27:73:47:80:5a:1e:4c:60:
         53:b6:c6:1b:71:03:2e:2e:d0:01:4b:28:9e:50:b4:e2:80:8b:
         0d:b1:1f:50:00:f9:0d:9f:d4:2b:fd:60:8e:f4:f5:a4:4e:12:
         0f:99:a8:6e:65:0a:07:58:db:66:a7:d6:72:71:de:6d:d2:7c:
         45:3f:60:3f:a0:ba:39:ce:98:4a:ab:5c:d5:fa:c8:d9:a7:48:
         e8:0c:71:ce:35:22:f5:bd:59:49:8b:a8:b5:78:ac:1a:97:e6:
         3d:be:ea:f5:29:f1:1b:d7:94:1b:f8:5a:39:df:6b:d9:be:88:
         04:ee:9d:8b:ea:76:a8:1e:1d:90:e5:f6:5b:f3:82:6b:41:3e:
         37:16:c9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:16:56 2025 by rpki-client