Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
File:                     D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft (raw, json)
Hash identifier:          TCB+dEfxlqCrSuTheaxX8CMpfJo/BlY5JLnaSeBeESQ=
Subject key identifier:   1B:7E:89:0C:5A:B2:1A:78:15:C4:8C:91:3E:34:95:14:C1:B2:C9:91
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Certificate issuer:       /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial:       0196A4662F13DF01BED1B1955744DC493F14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
Manifest number:          1546
Signing time:             Tue 06 May 2025 07:01:22 +0000
Manifest this update:     Tue 06 May 2025 07:01:22 +0000
Manifest next update:     Wed 07 May 2025 07:01:22 +0000
Files and hashes:         1: 22MFoiE6iwEXKG4ff-0g9Nk9e6k.roa (hash: 8ZAHeiN8JfpnEbf0xNsrPzSUL91MdaXwePhbLZYQBGY=)
                          2: 63R1CqkRJzCBTqXm_kqr_6UGOC4.roa (hash: QovmpL/thOh4yKhjTn4FNfnRr6OXEgupogya3Oy9KUE=)
                          3: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl (hash: 1tvlN1cW3n65IbYHCLiT/6CfwuB9YLWULgSKdcb+p+0=)
                          4: kGkGzImsb5Dv_nGgCWEXgWNc7do.roa (hash: x9SmJ5GmGF/t3I5NSMgnwkUR+oRC+nVpi/mDc40npw4=)
                          5: qF-2BgBNvB9Rp0K_VFhuwpTNLrY.roa (hash: h4z+iViHaDAdXrYk5TZebHBt4+M5KGpzETHGgdp4Ztc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 07:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a4:66:2f:13:df:01:be:d1:b1:95:57:44:dc:49:3f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
        Validity
            Not Before: May  6 07:01:22 2025 GMT
            Not After : May  7 07:01:22 2025 GMT
        Subject: CN=1b7e890c5ab21a7815c48c913e349514c1b2c991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:48:3e:27:7f:4b:fe:5d:9e:ab:b9:4e:c3:16:
                    e8:b4:c3:25:2f:fe:c1:94:87:85:95:85:a1:a5:28:
                    f7:8e:0b:01:c0:d1:e1:73:93:6f:37:20:36:bf:e6:
                    8e:67:1f:9e:17:7a:39:45:16:96:da:54:3f:b7:6b:
                    93:f6:0e:aa:62:ca:be:2e:8a:17:7f:2a:8d:fe:94:
                    d5:96:c1:76:84:17:40:88:6b:39:94:85:52:55:a9:
                    28:f4:ef:18:be:81:2e:7d:ba:2b:a8:8e:98:d6:9e:
                    fd:21:e5:85:b3:1d:5f:be:40:1f:3b:c0:d2:b9:5d:
                    ed:ce:09:4b:7c:bd:3b:ce:17:c7:4d:2d:31:b4:cb:
                    2d:b5:1b:55:cf:40:6e:01:ab:11:65:3e:fe:df:62:
                    91:01:23:1b:db:25:f9:af:7f:34:90:9a:8c:76:ab:
                    e8:a4:f7:c3:83:a0:2c:1b:88:43:7d:bd:a5:55:71:
                    f1:5c:de:43:6e:c3:03:c7:b2:82:f7:3d:78:4c:c4:
                    ca:7a:ee:4f:af:56:b2:15:58:4c:57:c0:b3:38:84:
                    26:65:c7:51:55:ec:60:fa:e1:08:5d:70:77:ab:30:
                    b2:f9:d9:39:c6:30:45:40:ec:a6:8c:e9:27:4c:55:
                    28:f5:e8:ab:20:e5:46:4c:91:9c:9c:42:dc:e6:d0:
                    43:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7E:89:0C:5A:B2:1A:78:15:C4:8C:91:3E:34:95:14:C1:B2:C9:91
            X509v3 Authority Key Identifier:
                keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e3:be:d0:42:bd:af:61:2a:a3:46:85:d9:21:f8:43:fe:54:
         8a:3a:ca:a2:f2:2e:66:2a:1b:2c:19:27:1a:90:49:82:70:58:
         ff:c8:ac:6c:80:de:ec:ed:d5:83:9f:36:f4:93:6a:d6:60:db:
         37:73:b4:4f:7b:a4:32:15:f0:18:26:64:de:bd:d2:42:41:c9:
         95:ab:74:7c:84:83:82:2f:bd:d0:86:96:60:ea:52:01:6d:8a:
         26:30:35:9d:71:26:77:1d:77:9d:e9:fd:af:c0:9d:f8:3f:53:
         d2:ec:94:4e:b2:80:55:46:39:04:24:92:cc:9e:48:3a:ff:09:
         df:87:88:88:b3:68:81:14:cd:47:19:c0:92:b7:13:7b:11:02:
         eb:45:75:bd:15:18:03:93:8e:e6:a3:fd:68:8d:55:17:ab:00:
         a5:7a:09:52:e1:b3:5c:e4:f9:dd:51:74:9c:96:0b:96:04:95:
         df:dc:5e:db:9f:8c:54:8b:55:f8:54:04:e3:76:94:0d:9a:8e:
         40:a0:14:09:2f:83:89:51:db:49:3a:a6:bd:86:ff:26:bb:80:
         e7:74:7c:cf:2a:61:12:ee:91:b0:7b:d8:8f:cb:a8:3d:cc:2b:
         06:3a:37:0d:6a:30:a0:d1:b9:f0:40:7b:9d:8e:a9:88:ba:a8:
         17:2e:1c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 15:41:52 2025 by rpki-client