Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.mft
File:                     c-9Luv3HPlPAmdTVLpye_6g3m08.mft (raw, json)
Hash identifier:          mudbekLkKTPhk6+j5WhOvOv6L+kPheyiO+O1KBmKNbs=
Subject key identifier:   B5:15:D1:E5:B1:8C:80:0C:60:92:31:56:59:8D:07:77:38:EE:22:D3
Authority key identifier: 73:EF:4B:BA:FD:C7:3E:53:C0:99:D4:D5:2E:9C:9E:FF:A8:37:9B:4F
Certificate issuer:       /CN=73ef4bbafdc73e53c099d4d52e9c9effa8379b4f
Certificate serial:       0196BF6F2D1B664AB2174498BAB4AB25BA05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c-9Luv3HPlPAmdTVLpye_6g3m08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.mft
Manifest number:          1159
Signing time:             Sun 11 May 2025 13:00:56 +0000
Manifest this update:     Sun 11 May 2025 13:00:56 +0000
Manifest next update:     Mon 12 May 2025 13:00:56 +0000
Files and hashes:         1: 9pCer8puLnj5hC-8qZh7MHueqPs.roa (hash: IUzgUbYlTvAtwHST9A9dU/nYKg0FWPtCZLzU6KzN7aI=)
                          2: c-9Luv3HPlPAmdTVLpye_6g3m08.crl (hash: +ZpCeKdPZX27oMt4u7LFs0rVKItaLtdGcY5meForgbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c-9Luv3HPlPAmdTVLpye_6g3m08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:6f:2d:1b:66:4a:b2:17:44:98:ba:b4:ab:25:ba:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ef4bbafdc73e53c099d4d52e9c9effa8379b4f
        Validity
            Not Before: May 11 13:00:56 2025 GMT
            Not After : May 12 13:00:56 2025 GMT
        Subject: CN=b515d1e5b18c800c60923156598d077738ee22d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:56:95:7b:98:48:aa:bc:1a:70:cf:77:57:be:
                    fa:3d:f5:5a:81:61:ba:0b:50:17:55:eb:4c:0b:50:
                    1f:7f:28:01:cd:a5:bf:23:96:25:a6:b6:85:ec:75:
                    5d:95:84:51:bd:23:d6:29:02:94:4d:34:e2:89:2a:
                    e8:7a:27:9d:8b:0e:92:0f:82:10:95:25:f9:89:67:
                    31:63:bc:83:93:7c:80:c9:79:28:4d:34:6a:0e:3d:
                    2f:b2:71:cd:e2:f7:b0:31:71:b8:38:90:85:9b:2a:
                    bf:2e:7f:f3:0e:a5:9f:8a:16:03:04:c2:77:0c:86:
                    67:aa:0e:4a:5e:64:e0:f1:94:04:5c:a6:a7:07:e6:
                    4e:ed:a1:20:90:e6:a7:80:ec:9c:f8:63:34:8d:1c:
                    f8:2d:18:41:53:8e:b5:af:d9:d7:8b:43:9c:7d:24:
                    b3:42:34:79:51:d1:8b:10:c3:43:b7:cb:e8:c5:5a:
                    2e:fb:12:a6:48:8b:47:02:d8:8b:e3:31:7c:62:32:
                    99:95:8a:e0:0f:b7:91:b8:40:15:38:24:49:59:f4:
                    bd:9e:12:f2:1d:c6:ca:c3:3b:58:ef:87:5c:30:8b:
                    bb:4b:b4:3d:a3:91:4e:7f:53:64:3a:98:e4:b3:7c:
                    84:93:61:cc:af:65:1e:4c:05:b2:6a:fb:20:53:e2:
                    81:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:15:D1:E5:B1:8C:80:0C:60:92:31:56:59:8D:07:77:38:EE:22:D3
            X509v3 Authority Key Identifier:
                keyid:73:EF:4B:BA:FD:C7:3E:53:C0:99:D4:D5:2E:9C:9E:FF:A8:37:9B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-9Luv3HPlPAmdTVLpye_6g3m08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/362a4d-9ae6-4012-b5b8-2cc753e53955/1/c-9Luv3HPlPAmdTVLpye_6g3m08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:70:b0:49:b4:b3:c7:fd:a8:93:90:0f:01:ed:61:44:45:1e:
         b7:0b:73:db:6a:e2:3d:7f:85:fa:6b:51:a7:bf:e3:76:67:01:
         8e:71:9b:e7:8c:5a:b0:ed:33:62:9f:6b:e6:a4:70:fd:bb:d6:
         e1:e3:59:22:8b:1b:d5:7a:69:2c:a0:b6:c7:fd:b3:a1:5c:0e:
         f2:48:71:93:01:12:22:91:5a:0b:54:37:3a:5f:18:ef:33:3e:
         67:c7:f0:b4:57:37:36:0e:de:50:59:1f:44:b0:8f:78:83:36:
         55:d9:7a:2c:fd:a7:65:98:da:5e:9e:52:36:1c:7a:43:8f:0c:
         ba:9f:bb:ff:79:8e:d1:79:2a:41:ec:74:fc:1d:68:00:6b:a4:
         7d:64:bd:b0:00:bd:34:9d:04:ca:ea:6c:20:56:ad:bb:94:3e:
         53:8d:59:36:39:88:d8:71:d0:c6:95:af:ab:c4:d6:62:bb:90:
         c0:4d:f7:27:0f:20:d2:7f:79:73:93:df:2a:56:bb:f1:37:98:
         54:e1:12:83:9c:93:a3:bb:7c:10:6a:af:1e:ef:72:47:5a:c9:
         aa:d8:66:d7:9d:6b:69:d5:2c:5d:38:0e:70:d5:8b:f9:53:50:
         b0:51:68:bd:21:5f:ba:fd:cf:93:df:b4:aa:43:1d:c8:77:32:
         6c:2f:88:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:40:09 2025 by rpki-client