Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
File:                     In6Vgaaaz4EZMg4TeYV6UTvSONs.mft (raw, json)
Hash identifier:          I/VI8+K0pd/IUy5gaRKhpMuOthuyN5buaV9aahHmvh0=
Subject key identifier:   3E:13:43:72:7D:51:3B:27:6D:4F:0A:41:49:74:9F:6D:98:5B:0C:3F
Authority key identifier: 22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB
Certificate issuer:       /CN=227e9581a69acf8119320e1379857a513bd238db
Certificate serial:       0196C5710F9F6F2BBF393EE6077173926B2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
Manifest number:          1539
Signing time:             Mon 12 May 2025 17:00:43 +0000
Manifest this update:     Mon 12 May 2025 17:00:43 +0000
Manifest next update:     Tue 13 May 2025 17:00:43 +0000
Files and hashes:         1: In6Vgaaaz4EZMg4TeYV6UTvSONs.crl (hash: KYMjeJhzwKzVLHSk4KYt1LY1rrE+SpVw3UqeWxtq0Y8=)
                          2: zDiyPljIfQJSHZqDPkKU2sChvrg.roa (hash: y+GAtv4wxCnxVitUPOmEF1JPji3zVCOq+ijeYGfAYfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:71:0f:9f:6f:2b:bf:39:3e:e6:07:71:73:92:6b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=227e9581a69acf8119320e1379857a513bd238db
        Validity
            Not Before: May 12 17:00:43 2025 GMT
            Not After : May 13 17:00:43 2025 GMT
        Subject: CN=3e1343727d513b276d4f0a4149749f6d985b0c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bc:33:29:46:0a:22:95:b1:0d:b9:37:ed:21:
                    a2:2b:af:bb:be:ad:27:e2:47:d5:ad:d1:56:0f:f4:
                    77:fd:e3:49:39:f3:ac:60:f3:fd:44:5b:a4:8b:de:
                    67:08:99:b6:ec:1a:e9:41:1c:ce:2d:3b:84:d9:c2:
                    d6:57:45:c8:80:4f:08:27:12:2a:15:ec:c7:aa:76:
                    3a:58:7c:a7:31:fb:71:c2:c0:8d:4e:8e:3f:9f:d1:
                    a0:e7:58:96:5b:26:24:0d:d4:7c:4c:f4:8d:07:94:
                    6e:24:b8:3e:8e:e3:5f:96:d6:7d:9c:26:35:12:ab:
                    e9:37:01:c1:1e:4b:45:6f:fd:ee:dd:c5:e0:ed:d7:
                    8e:26:be:8f:7f:c7:13:a4:3f:75:ac:ed:ad:64:dd:
                    06:68:c3:56:d2:d6:bc:8f:8c:b7:99:4f:d0:35:47:
                    86:80:06:73:e5:cc:9b:32:bd:83:9d:67:73:d6:7b:
                    ea:2b:83:a8:d7:a2:ac:3b:a0:02:17:ce:4e:1a:ee:
                    54:02:96:99:0e:7d:48:de:7c:87:b8:b4:da:9f:5d:
                    73:5c:f3:f4:60:b2:46:47:d2:f2:ba:43:c3:d0:93:
                    7c:dc:7f:7b:18:77:74:c5:23:4f:9f:7b:88:0f:50:
                    d9:28:44:2c:81:d5:ee:bf:95:f5:0b:a8:75:5e:9b:
                    16:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:13:43:72:7D:51:3B:27:6D:4F:0A:41:49:74:9F:6D:98:5B:0C:3F
            X509v3 Authority Key Identifier:
                keyid:22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:df:89:4c:a3:b5:1d:f9:b7:4c:e8:29:5f:ef:e8:3f:8d:07:
         cd:03:8a:4a:76:07:c9:6b:1d:80:b8:06:3f:6f:1a:60:14:67:
         8f:dd:63:56:6f:c3:fe:50:3d:a6:48:67:fa:b2:91:c5:8e:d8:
         91:23:67:8b:ac:6d:b4:5e:a6:1c:01:d1:aa:0f:bf:ed:68:27:
         2d:73:72:69:28:0b:f1:3e:a5:0c:e0:41:84:22:b1:5e:b4:44:
         77:84:84:2c:8f:9a:d9:07:31:7c:4f:8b:44:29:c1:90:dd:5a:
         f4:0c:59:db:83:71:5b:fb:84:bd:59:71:ac:b0:95:54:9d:c9:
         b9:1f:c6:13:ff:11:47:04:ac:c6:d0:35:32:d6:1b:3f:b8:71:
         2f:36:d9:29:dc:93:2c:11:68:3d:2f:6c:7b:45:c4:4c:36:9a:
         2b:4c:03:32:c5:93:2e:38:a7:e7:c4:71:59:33:4a:0c:0b:06:
         ce:40:55:11:b8:f9:12:75:3a:da:8b:26:4a:b4:bb:3a:b4:89:
         2a:14:82:07:ee:27:1f:b6:e3:8c:69:7e:9c:d9:13:68:9a:a7:
         7c:b2:53:fd:82:06:fa:52:92:a9:e9:a2:d7:95:ef:33:fc:61:
         da:29:ec:50:b3:f4:90:f2:4d:85:92:9e:49:60:53:2e:8e:14:
         04:1a:6c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:05:28 2025 by rpki-client