Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
File:                     st8cE314lMzbp2jOuXHE099Z_pY.mft (raw, json)
Hash identifier:          Q6RErk2+K0QP0kFdnw/hroqW+q9/vXq286Sx0A3t9k4=
Subject key identifier:   CE:24:E3:88:83:8E:37:65:1D:D7:E1:AC:04:C3:A3:1D:8B:A7:CF:B8
Authority key identifier: B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96
Certificate issuer:       /CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
Certificate serial:       0196BE92FD0B733845EE9153515DCEBF9356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
Manifest number:          1537
Signing time:             Sun 11 May 2025 09:00:25 +0000
Manifest this update:     Sun 11 May 2025 09:00:25 +0000
Manifest next update:     Mon 12 May 2025 09:00:25 +0000
Files and hashes:         1: st8cE314lMzbp2jOuXHE099Z_pY.crl (hash: dSDW7qeLqvZv8Iy5gDRMR9sRj43oE/q1Rsmp8CI6K2k=)
                          2: utentqqy5GUX6xjOO70Zx55fsK0.roa (hash: Z4JeWyzB0L9+u00qmx46AQ9h8ajUGAFCIAhK67ja97c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:92:fd:0b:73:38:45:ee:91:53:51:5d:ce:bf:93:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
        Validity
            Not Before: May 11 09:00:25 2025 GMT
            Not After : May 12 09:00:25 2025 GMT
        Subject: CN=ce24e388838e37651dd7e1ac04c3a31d8ba7cfb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:45:a1:6f:4c:7a:8c:1f:9f:e1:e1:c8:14:6c:
                    8e:e3:2c:79:95:b3:b9:1f:b4:14:be:2c:56:e7:57:
                    33:93:e3:cd:51:d6:69:cf:00:f8:db:de:ae:16:43:
                    fb:a2:82:a1:dd:60:43:a6:04:55:4d:f1:40:e9:0c:
                    c0:a5:38:a8:e8:5b:e9:c0:a2:85:4a:94:e9:96:dd:
                    42:ac:dc:e4:cb:72:ad:55:a8:cf:ec:eb:ff:5a:4c:
                    40:ae:ef:20:fb:3c:e3:f3:a5:0d:93:ed:31:19:76:
                    d6:dc:a0:13:e4:f0:96:5e:8a:27:ec:55:76:2e:1a:
                    77:6f:56:c7:ab:b0:e8:ee:28:20:51:6b:30:f2:39:
                    c8:61:62:f0:e7:22:76:f1:51:78:c0:c0:50:fc:dc:
                    a0:5e:c5:29:06:7d:49:b5:4c:fb:0e:90:46:e1:bb:
                    96:c6:e0:a2:23:7c:23:5e:67:80:1c:6e:2c:b4:16:
                    be:c3:68:f9:cf:37:9e:e0:e1:c4:d2:d1:92:ee:98:
                    c7:8a:ed:6e:3b:ef:16:c3:eb:08:e7:e0:59:40:ff:
                    a1:3a:14:c4:58:23:62:04:d1:10:31:c9:26:57:6a:
                    10:bd:8c:b5:5b:8b:2c:e1:53:e9:68:bc:6a:02:8f:
                    99:cb:36:91:d1:88:40:20:44:89:e0:8e:f8:ed:4d:
                    bb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:24:E3:88:83:8E:37:65:1D:D7:E1:AC:04:C3:A3:1D:8B:A7:CF:B8
            X509v3 Authority Key Identifier:
                keyid:B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:7e:93:c9:8d:0b:3c:79:35:59:61:a7:c4:19:80:c6:7e:ae:
         48:dd:78:1d:68:9a:1f:e7:42:61:4b:80:7f:94:74:b0:2f:92:
         6d:0c:48:4a:59:58:a1:4c:f6:f2:65:96:18:75:4f:56:b1:ad:
         3e:7a:d8:ec:f9:9e:47:6c:a0:87:6c:cf:10:38:b9:7a:f3:2c:
         fa:75:1b:81:59:f0:5d:9f:f6:65:26:08:2b:1f:50:29:c6:2a:
         88:d5:a3:20:2d:9e:6b:97:33:68:93:aa:14:ce:2d:cb:02:ee:
         7e:0c:3c:00:1e:2c:08:b2:b1:e7:09:3d:26:ad:fe:9a:43:68:
         69:db:f9:4f:95:17:83:cd:e6:04:29:ba:f3:c7:85:f9:1c:0b:
         4e:f3:05:b3:b5:56:ad:f3:e1:2b:58:ca:d1:9c:c5:98:b9:b1:
         50:a7:19:94:91:1d:cf:be:2a:dc:fb:97:d7:f9:89:de:a0:ff:
         7d:8e:1b:b3:49:a8:59:16:54:7c:fc:1d:27:51:c0:cf:e0:e8:
         c9:34:cc:cd:0c:91:ad:32:25:a0:94:64:80:81:78:04:54:88:
         99:23:28:f7:70:38:e2:61:f2:8f:4d:0e:d5:15:8b:06:91:9f:
         75:8d:28:12:fd:0f:40:8a:76:57:6d:16:bf:ea:df:04:68:2a:
         fb:2f:1b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:30:05 2025 by rpki-client