Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
File:                     tYe8Eust4poQJrj1a-jUafL1jPM.mft (raw, json)
Hash identifier:          AZnE+ODJZKIiii/OF7y3MvDIqm59rRNw+no3JDOeHN0=
Subject key identifier:   26:FA:E8:D1:AC:F0:87:B0:9B:EA:37:F2:C4:55:BD:02:E1:C5:98:E2
Authority key identifier: B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
Certificate issuer:       /CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Certificate serial:       0196A5E5C726542522CAB994104E00F8B869
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
Manifest number:          1527
Signing time:             Tue 06 May 2025 14:00:21 +0000
Manifest this update:     Tue 06 May 2025 14:00:21 +0000
Manifest next update:     Wed 07 May 2025 14:00:21 +0000
Files and hashes:         1: SRbcYTDvBK2K42GBZURfc-9owLk.roa (hash: ou7G18aw8/QVFexo/f3lobAxj/5Hzi02IWmge/V7dxQ=)
                          2: tYe8Eust4poQJrj1a-jUafL1jPM.crl (hash: QQk5h+eoKuXV8H/tWrtcRedLCFn9XzXtQzJd4OlZaMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:e5:c7:26:54:25:22:ca:b9:94:10:4e:00:f8:b8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
        Validity
            Not Before: May  6 14:00:21 2025 GMT
            Not After : May  7 14:00:21 2025 GMT
        Subject: CN=26fae8d1acf087b09bea37f2c455bd02e1c598e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:27:c6:ec:25:bb:0d:4d:ae:be:d3:12:d4:56:
                    37:d5:8b:6a:66:49:41:d8:4c:34:91:2f:0e:fb:29:
                    ff:ae:b6:ec:3f:7e:d2:5a:f6:5e:8e:b6:16:cc:79:
                    a6:3f:af:95:aa:a4:bb:bd:d1:38:69:f5:12:91:83:
                    02:63:68:44:7d:96:83:e9:04:70:db:50:b1:9e:77:
                    17:de:ff:19:90:6b:dd:ba:b4:ba:03:bb:36:c6:57:
                    41:58:b7:35:5f:23:ce:7c:d3:ff:eb:57:b0:6c:b3:
                    ff:29:4d:97:11:37:f8:01:b4:64:98:49:45:20:75:
                    50:f4:91:b5:07:5f:f4:11:f7:15:25:57:a8:b9:46:
                    ab:64:18:12:9f:31:a7:9c:fd:b5:bf:1a:81:23:af:
                    e1:d6:1d:80:25:65:68:3b:8e:ba:ec:87:cb:83:72:
                    6a:9f:4f:4d:52:67:5d:60:17:53:45:40:08:2e:e5:
                    c3:88:48:3c:ea:ce:9b:a6:d1:9f:6d:80:75:6b:e4:
                    dc:f7:1a:ac:ce:14:43:0a:de:7b:d3:de:11:fa:32:
                    a3:b0:bb:1a:95:61:a2:0f:01:c7:89:39:33:01:7f:
                    15:02:24:7a:e7:ea:d6:87:58:70:4f:0b:69:f8:67:
                    36:40:a2:8c:77:55:35:5f:31:18:28:2a:78:45:69:
                    c1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FA:E8:D1:AC:F0:87:B0:9B:EA:37:F2:C4:55:BD:02:E1:C5:98:E2
            X509v3 Authority Key Identifier:
                keyid:B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d1:28:53:46:84:e0:1a:bb:15:22:29:4f:22:2e:ba:6f:54:
         70:77:80:39:46:cb:35:40:b6:42:80:2d:b5:67:e1:d0:ea:bf:
         a9:52:3f:ba:c8:73:f3:de:77:ab:1f:0b:8a:d8:29:1f:6e:bf:
         32:01:c7:89:73:42:91:c9:a8:76:0e:8f:19:51:ac:07:6c:46:
         59:c7:e1:39:66:fe:2e:e0:61:3c:b5:79:68:96:d8:e9:1a:ab:
         06:35:04:55:d0:57:87:41:8f:ac:21:95:da:db:aa:b5:f9:45:
         ac:1b:b2:b0:8a:fb:87:5b:fd:ed:2d:1e:30:b2:cb:60:65:77:
         d7:5f:f3:38:9c:8f:ff:c0:2a:75:57:8f:1e:19:48:8a:1e:fb:
         27:31:d5:bf:07:1a:37:83:53:52:f5:87:10:0a:f5:02:8a:3a:
         0f:4c:e2:2c:52:3e:ea:57:74:e7:9e:37:81:16:79:66:c4:72:
         f1:f9:7a:eb:30:c1:20:68:c7:13:be:fe:ef:8a:68:43:92:9d:
         6f:9c:20:b0:6f:5e:1a:71:dd:dd:e4:14:df:30:55:7f:ca:22:
         6c:28:07:a4:50:9c:27:b9:1b:97:1b:75:a2:85:aa:7a:e4:8d:
         b0:dc:b6:2b:50:37:b9:26:43:f2:7a:90:c0:d2:14:6c:da:f7:
         2f:b1:07:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:46:39 2025 by rpki-client