Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
File:                     Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft (raw, json)
Hash identifier:          JFuHa9f4azJbY/uDQ8PLCiGPmA9NG5Wrgb8mPT/gIro=
Subject key identifier:   1F:E0:A2:AD:99:67:2E:57:A8:64:5F:B7:28:E3:E1:EC:9F:6D:8D:AB
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Certificate issuer:       /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial:       0196B634CC35B727648A423A9339D42001CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
Manifest number:          153D
Signing time:             Fri 09 May 2025 18:00:35 +0000
Manifest this update:     Fri 09 May 2025 18:00:35 +0000
Manifest next update:     Sat 10 May 2025 18:00:35 +0000
Files and hashes:         1: 6QBVEiLusjnuHnwecVMK9Kg-WII.roa (hash: OapSvDTUmzDRZu9Q3KlIrLgI0CjCfgxrem8xot5UiSo=)
                          2: Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl (hash: NwVOmy10c1YjygfSseQZRPtlh8HSI9tY+u/242P+ssY=)
                          3: GiC40GdnPgHbIqIbDNeP-spJi-M.roa (hash: Xd4LHWf6P2V0nuixtM1f8JXOI9EnPVM3k32pXeFOXiw=)
                          4: JeT3PicL3j6wpeXRT3s8FrJpy3w.roa (hash: tjXOPJYxlFtc8BfVkznJC0Nu37PcV0Dt33rxJApZ9kY=)
                          5: L5lOWtMXwmLYho3Arxcpd76R5sw.roa (hash: XM0Za1PmkukhwAWipMkx42usukTFibdWlbabSAWWgH4=)
                          6: Lwic0o2gw3k82wpfSkPa-wUg5Aw.roa (hash: pZ1a8TMxYqDEEa657nYARi2g7u3tXGj01SXvh3eUl1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 17:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:34:cc:35:b7:27:64:8a:42:3a:93:39:d4:20:01:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
        Validity
            Not Before: May  9 18:00:35 2025 GMT
            Not After : May 10 18:00:35 2025 GMT
        Subject: CN=1fe0a2ad99672e57a8645fb728e3e1ec9f6d8dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e4:08:6e:58:60:ff:50:f2:b6:32:d0:a3:12:
                    e4:22:44:18:0d:5c:0d:b5:8b:7a:0d:e6:65:ca:8a:
                    89:27:b1:46:ee:bc:9c:3a:c0:46:df:df:ce:2b:7c:
                    2a:5b:78:6f:d3:56:91:4d:ea:48:fb:5f:c0:32:30:
                    39:68:17:f0:86:78:6a:4f:c8:b3:df:91:65:de:6f:
                    c9:b5:b2:41:62:59:85:36:4d:ae:9d:30:99:d6:14:
                    27:17:fa:c9:da:ea:95:49:e3:0b:3f:bd:aa:74:b5:
                    bc:1f:ed:cf:f9:a7:0c:cc:17:e9:42:14:5b:68:51:
                    c0:18:77:81:75:a1:2b:b3:23:78:d0:f5:ff:4e:a4:
                    32:45:87:17:00:f2:b2:d9:45:4e:0f:b6:4e:31:1e:
                    1f:57:d6:1e:9f:3d:60:15:41:18:d8:32:99:96:09:
                    b4:09:21:3a:12:d5:b7:c1:3f:fe:1c:40:70:08:f4:
                    c4:12:16:52:20:61:92:aa:95:4b:75:62:82:d3:d8:
                    57:1e:34:e1:4c:49:be:12:f8:74:93:e4:7f:11:7f:
                    b8:a6:e4:a6:9b:80:89:62:0c:7c:04:9b:d4:51:e9:
                    1a:1b:34:c1:7f:b9:2d:a5:f4:2c:7b:e0:11:cf:f2:
                    79:74:12:6d:f5:54:23:24:e4:1c:93:ca:a8:79:65:
                    65:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E0:A2:AD:99:67:2E:57:A8:64:5F:B7:28:E3:E1:EC:9F:6D:8D:AB
            X509v3 Authority Key Identifier:
                keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:b2:40:38:19:1b:7f:2f:c2:35:28:fa:fb:fe:60:75:88:b4:
         23:1f:c0:04:1c:2c:6a:62:9c:3d:1a:f7:61:38:24:8b:7a:0a:
         ab:01:2c:a3:2d:31:78:8b:bb:aa:f2:0e:da:1d:f5:6b:15:06:
         1a:4a:4e:cf:ec:0e:5e:a9:21:ed:6a:95:16:02:eb:a7:74:11:
         d4:27:1e:0b:ea:f0:29:ab:e7:91:16:75:65:65:69:59:28:68:
         17:6e:f9:39:a9:fb:81:17:51:9d:a7:a0:fe:70:39:30:f8:e9:
         44:17:94:42:70:61:da:b7:6c:86:ff:9f:f3:1d:96:2f:9f:f4:
         a7:a1:8e:84:92:4d:ff:4f:57:c0:d0:b2:b7:1d:61:5c:d4:fe:
         7f:22:f6:b4:8e:5e:62:2a:1c:da:55:b0:78:bf:46:90:8d:81:
         b1:18:b2:b1:ff:dd:b6:b1:af:f7:bc:68:e4:f6:bb:d0:a5:f1:
         0a:e2:a6:5b:04:9a:32:e5:45:6e:c3:b1:8d:d7:fb:c5:2b:2f:
         d3:42:9b:e3:67:78:ed:28:d1:fc:f7:ec:d9:74:9e:27:69:c3:
         27:64:64:e9:6b:c3:38:31:55:6f:4e:43:c3:db:7d:7f:b9:53:
         8f:a0:53:72:b2:20:27:96:6e:f4:a4:b3:4f:09:61:ae:ab:58:
         27:77:56:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:15:51 2025 by rpki-client