Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
File:                     2S5c30xU_4aM6JUxXqtY8tiGUMI.mft (raw, json)
Hash identifier:          q1TRakj/jrzOxMlhlqzYDyauLgwikiCnMBZoQRA7Cfk=
Subject key identifier:   D9:BD:C4:61:A5:57:AD:B3:D4:3B:BB:82:E4:3D:34:AB:72:48:D4:7F
Authority key identifier: D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
Certificate issuer:       /CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Certificate serial:       0196BD499CA8E1F04B5741F4AB2EE5C9818D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
Manifest number:          1534
Signing time:             Sun 11 May 2025 03:00:40 +0000
Manifest this update:     Sun 11 May 2025 03:00:40 +0000
Manifest next update:     Mon 12 May 2025 03:00:40 +0000
Files and hashes:         1: 2S5c30xU_4aM6JUxXqtY8tiGUMI.crl (hash: tZngTmM0rTcsOM2nHvZE6/lBGY1qPnNvl8TnH4umREY=)
                          2: uU6zg4YH1264IiROqTWMjBqhAVA.roa (hash: OWnA1HPfhWIThBzmOjCNNoLbJUm6FK12YolmGLT6gvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:49:9c:a8:e1:f0:4b:57:41:f4:ab:2e:e5:c9:81:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
        Validity
            Not Before: May 11 03:00:40 2025 GMT
            Not After : May 12 03:00:40 2025 GMT
        Subject: CN=d9bdc461a557adb3d43bbb82e43d34ab7248d47f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2c:1b:96:10:26:9f:80:85:e2:f3:62:14:0a:
                    e9:4f:8e:7e:42:7e:42:ca:e4:e4:80:fd:e2:b9:56:
                    c6:d9:ba:5e:f7:fd:8a:e8:5d:31:99:81:68:95:76:
                    f9:f3:29:b7:87:75:21:d7:5c:e0:d1:fa:27:f3:e0:
                    a8:85:3b:30:27:26:fa:03:4b:eb:bb:fb:4c:d8:78:
                    1c:bf:ca:bf:fe:c5:5d:6c:a7:8e:d0:5f:bf:5c:8f:
                    ec:2b:1b:60:90:13:26:dd:9a:88:51:ed:2d:e5:fe:
                    78:39:9c:ba:22:b2:32:65:0d:10:72:f3:7f:d6:00:
                    43:16:d8:e7:09:9d:74:16:09:95:3b:fc:72:28:05:
                    cf:e6:52:0f:23:de:1d:a5:b3:fb:43:f4:79:9c:08:
                    53:c3:74:cc:ab:e6:ea:45:bb:dc:b7:ea:db:43:de:
                    b7:85:94:2c:d6:35:aa:0a:4e:07:e7:3e:fc:94:5e:
                    62:86:f3:3d:df:3c:4c:b8:ac:c4:9d:5f:b6:a9:ff:
                    a8:13:3e:e9:89:8c:a5:dc:fe:33:0a:a6:d7:80:27:
                    d2:55:3d:8f:fa:b5:fc:01:a8:4b:c4:58:a7:8b:0a:
                    de:f8:68:16:48:fc:3e:78:2c:0c:4d:44:7b:dd:cb:
                    20:da:66:b1:d6:e8:20:f0:1e:8c:24:ae:05:25:55:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BD:C4:61:A5:57:AD:B3:D4:3B:BB:82:E4:3D:34:AB:72:48:D4:7F
            X509v3 Authority Key Identifier:
                keyid:D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:df:c7:32:38:5c:85:04:5f:62:5e:fd:55:19:51:55:4e:47:
         ec:d0:1d:2c:d5:b2:4e:06:c5:f9:df:86:17:1e:9b:bd:67:ef:
         ba:82:1a:47:6b:83:8d:f8:ef:d0:aa:9b:d8:b2:a6:94:56:4f:
         a0:d5:4e:34:d5:ab:37:a2:59:e9:83:4e:da:3e:7a:0c:4c:29:
         32:8f:76:50:c6:1b:d3:69:33:03:c6:22:3f:66:3a:1f:ff:c2:
         71:e3:fc:77:55:e8:18:ae:f9:3f:b8:25:63:21:f2:a1:91:50:
         f6:f3:41:67:c5:00:9f:a1:70:cf:39:2d:0f:72:54:56:30:4e:
         41:9c:98:85:01:4d:9a:ee:22:89:27:45:ff:31:83:f7:fa:23:
         be:ba:cd:71:2f:d5:87:01:2c:e1:2b:62:31:f1:b9:fe:8e:51:
         4e:7f:95:64:a6:99:f1:75:e2:f7:f4:60:cc:0e:01:cd:4f:42:
         a2:59:3f:b2:ad:60:89:09:3b:75:c2:2a:d9:c5:62:79:dc:b4:
         6b:12:08:8f:78:cc:b2:ab:9f:60:9e:ba:82:97:c6:3a:e6:95:
         7f:5b:47:9a:56:a8:e9:12:e9:55:78:14:b1:37:2a:18:92:1f:
         0a:df:0f:8c:ac:cd:72:6e:ed:4d:56:3f:b2:ba:5e:89:0c:c9:
         c6:6f:0b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:34:25 2025 by rpki-client