Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
File:                     1i15SeaYRB2-mrxWCcSerKc8l5Y.mft (raw, json)
Hash identifier:          sQ8ITeD8mshxMkXcotHyfE4u0MM3yraXQ37SpXdNXCQ=
Subject key identifier:   A5:34:85:F5:AD:06:FA:B1:25:20:1F:DE:78:78:E3:4C:05:62:73:28
Authority key identifier: D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
Certificate issuer:       /CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Certificate serial:       0196C15D7FEB6B416AFE3CAD6CE88FA160F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
Manifest number:          0EA2
Signing time:             Sun 11 May 2025 22:00:52 +0000
Manifest this update:     Sun 11 May 2025 22:00:52 +0000
Manifest next update:     Mon 12 May 2025 22:00:52 +0000
Files and hashes:         1: 1i15SeaYRB2-mrxWCcSerKc8l5Y.crl (hash: /+n2go9YfZ+FctznS0PTauKVwQZL6c4eVcIMLYgQRz8=)
                          2: d6njcJAvU5XAKbAJO-1stP-sI3c.roa (hash: Qb51F1ZjPbC9UkzfA0CmXmJOGj7X7JIQuEBdAlbn5BM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:5d:7f:eb:6b:41:6a:fe:3c:ad:6c:e8:8f:a1:60:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62d7949e698441dbe9abc5609c49eaca73c9796
        Validity
            Not Before: May 11 22:00:52 2025 GMT
            Not After : May 12 22:00:52 2025 GMT
        Subject: CN=a53485f5ad06fab125201fde7878e34c05627328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:71:aa:67:41:8a:3f:10:41:bb:b0:24:38:98:
                    42:84:df:69:1f:71:30:69:a8:54:e7:04:95:3a:6f:
                    f3:31:0c:a8:f0:21:4b:4a:e8:58:21:46:db:37:12:
                    20:47:0b:50:1f:fe:8e:6d:8e:c3:87:58:1d:cc:a0:
                    fb:77:b4:95:db:23:db:9c:eb:69:1e:ac:d6:b3:3a:
                    2d:1a:d2:14:b2:43:1f:19:f2:bd:21:fb:58:c1:8e:
                    da:50:3f:37:95:a6:bf:54:29:8c:a3:ac:08:de:e5:
                    21:2b:c9:10:b8:04:34:7f:50:bc:25:0d:43:b3:25:
                    ad:ef:45:d8:f6:ae:89:2c:38:9a:a3:9a:1e:5a:b7:
                    f8:8e:fd:54:e8:27:f8:30:24:4c:46:6a:3c:5f:b1:
                    0d:06:76:ac:fd:61:1d:96:a0:45:ec:d5:84:b8:de:
                    b0:ba:7d:41:52:e9:cd:81:bc:64:be:ef:23:cb:4e:
                    82:78:51:1d:30:a2:0b:7c:c2:73:59:c6:b6:5a:e4:
                    d9:98:6d:b1:a2:5c:e8:da:bb:98:87:4d:58:80:2d:
                    e2:93:3d:e6:4d:d9:cf:a9:09:ab:59:4e:cb:56:0c:
                    81:ea:f2:34:58:55:d6:76:9c:0c:e0:69:5d:6b:fc:
                    8b:ba:c3:fa:10:13:49:ab:24:67:15:01:2a:ef:bb:
                    01:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:34:85:F5:AD:06:FA:B1:25:20:1F:DE:78:78:E3:4C:05:62:73:28
            X509v3 Authority Key Identifier:
                keyid:D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:42:ce:7b:42:ae:53:6a:25:9e:f9:85:4e:1f:9f:29:38:26:
         95:6d:1a:bb:be:76:5b:17:32:65:58:e4:ad:99:44:cd:7c:65:
         bf:dc:2b:d9:97:4c:d7:73:5f:b3:2f:73:5d:c8:de:2a:5a:e0:
         42:ad:12:93:1a:3e:98:dc:26:14:10:00:23:5e:b2:4b:5c:a5:
         6e:a1:7a:4b:36:7a:24:ac:9b:dd:71:f7:e1:cf:50:58:c0:29:
         8c:3d:f3:40:00:52:f9:81:e4:bf:19:97:b9:38:72:f5:17:62:
         22:f7:51:9c:cb:50:73:71:f2:65:f7:62:60:3a:fc:38:19:ab:
         ce:f3:fe:2e:99:d3:89:c4:21:d3:69:9c:03:aa:af:78:be:8b:
         44:6f:4b:28:66:24:cf:04:7a:9f:9f:a1:ef:1c:5e:4d:62:59:
         b4:9f:ae:06:c4:79:82:e8:7f:4c:08:3e:83:c5:c2:f4:3a:18:
         7c:06:67:a0:b2:c6:5d:4e:79:a4:9e:16:ed:70:3f:cd:8a:f9:
         c0:52:65:27:51:b7:ef:ce:cc:d2:f5:ba:52:b8:d1:10:7e:12:
         1b:c6:12:e3:f5:3c:f2:0e:b5:d1:ee:97:c0:67:1a:ec:31:90:
         1b:e0:f0:35:71:69:ed:86:3d:b5:ea:4f:2f:88:f7:c7:78:16:
         88:e8:11:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:16:57 2025 by rpki-client