Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
File:                     fUd7pApydSv1DkLAADdl5NdHPkY.mft (raw, json)
Hash identifier:          5Ct7ZvXA/GJa4uveTicL1nK5XYynRr4PcK+LP8WtYBo=
Subject key identifier:   DA:A3:44:C7:52:C5:8F:E9:86:21:ED:A7:E0:48:2B:03:D6:67:E1:E7
Authority key identifier: 7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
Certificate issuer:       /CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Certificate serial:       0196B1EA20EDB5C74B079952141FA2C75353
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
Manifest number:          152E
Signing time:             Thu 08 May 2025 22:00:33 +0000
Manifest this update:     Thu 08 May 2025 22:00:33 +0000
Manifest next update:     Fri 09 May 2025 22:00:33 +0000
Files and hashes:         1: fUd7pApydSv1DkLAADdl5NdHPkY.crl (hash: awJwKeW91wXD9sRdYsGTFoDWuSKMnEVtxCkTl7TlNBw=)
                          2: txL1fO8y0T0j5IS_C5y7fOIOxHU.roa (hash: kwDxX3obWOhODfrryMMC7f740mdS1jAQgVwH1EYVsHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 22:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:ea:20:ed:b5:c7:4b:07:99:52:14:1f:a2:c7:53:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d477ba40a72752bf50e42c0003765e4d7473e46
        Validity
            Not Before: May  8 22:00:33 2025 GMT
            Not After : May  9 22:00:33 2025 GMT
        Subject: CN=daa344c752c58fe98621eda7e0482b03d667e1e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:22:4b:9d:80:cb:b9:44:3f:6d:10:cc:ac:33:
                    52:f1:0c:9e:81:6b:22:38:5a:1f:a3:2d:3e:03:09:
                    88:67:8c:68:2b:03:82:4f:a6:31:f6:03:58:0d:d8:
                    3b:29:9d:7b:7e:d6:02:22:c7:a4:b9:3f:59:14:33:
                    33:e0:70:1d:63:54:f0:5e:6d:76:53:80:27:7a:c9:
                    9d:74:49:d2:83:be:df:b0:1a:23:6a:a1:d2:0a:39:
                    35:f4:d7:34:a3:22:39:bc:6b:f4:f0:c5:04:74:84:
                    ac:7c:30:5f:da:f0:ac:b3:29:51:ba:22:96:38:51:
                    28:e4:3f:2d:32:be:7a:7e:ae:d8:77:10:21:6e:db:
                    f6:99:4b:19:ab:de:f3:90:70:e7:50:fd:cb:39:2b:
                    c2:db:dd:61:72:d3:ab:a1:85:d6:c0:37:1c:88:84:
                    b1:97:70:fe:91:c5:e6:3f:67:00:87:ad:28:54:db:
                    d4:dd:b9:93:1d:86:72:6a:bd:c7:a2:e8:26:f0:7c:
                    39:9b:1c:c6:73:2c:99:ff:44:2d:0e:01:9a:08:20:
                    28:70:13:82:32:31:6e:ed:de:7b:b3:34:82:69:7a:
                    74:9f:5f:b7:08:32:72:64:df:3b:e0:c6:1e:17:68:
                    f3:49:aa:03:e4:81:fa:9d:e4:8e:93:9b:6c:f5:d9:
                    39:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A3:44:C7:52:C5:8F:E9:86:21:ED:A7:E0:48:2B:03:D6:67:E1:E7
            X509v3 Authority Key Identifier:
                keyid:7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:45:f6:f1:1d:8a:b7:53:89:c7:d2:9c:ad:ad:c4:ca:c9:b3:
         a3:26:13:f6:6f:e3:8a:10:fc:ac:25:4a:a2:ca:bd:b6:51:05:
         e9:a3:ac:9b:d3:76:54:da:8c:f6:63:00:10:ef:9f:b4:b5:24:
         26:a8:24:45:33:41:7e:50:fb:45:4e:87:90:1c:20:35:f3:1b:
         07:f7:3f:8f:66:d3:17:ec:e0:20:69:0b:99:d6:ab:01:e7:3d:
         a2:fe:be:12:6d:c8:d7:f3:de:35:3e:fa:48:3b:8d:c0:b6:ed:
         11:2d:eb:6a:7d:e7:7d:a5:b7:c2:03:9e:7a:53:6e:9d:8f:b7:
         5b:5c:b1:05:cb:23:da:86:7d:18:e9:cf:ed:44:79:94:bc:49:
         fc:fe:0e:47:30:ca:7e:9d:04:b6:24:5b:cc:33:97:a3:2a:85:
         70:ab:66:48:b8:96:0f:a8:11:ff:08:e9:d0:47:50:0a:45:87:
         dd:b1:1a:0f:b1:5e:bf:ad:22:09:8d:7e:7a:25:18:ee:73:03:
         1f:a7:b3:5e:d9:60:1c:4b:bb:73:7d:88:6b:b5:1f:24:4f:64:
         b4:0e:56:ac:a4:3e:ac:36:fa:18:0a:d2:5c:af:57:7a:b3:c7:
         4f:45:d8:90:6e:27:41:2f:d0:62:11:27:7d:1d:bf:d7:de:7c:
         c1:d2:f8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:07:24 2025 by rpki-client