Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
File:                     kpWx8dzY-mrB73iCeMSJ4V6srnA.mft (raw, json)
Hash identifier:          9/du9CwufKaOev/T3Jb01l3rnSywbdrTpzJUPwOScVI=
Subject key identifier:   B9:2A:02:97:F3:F3:84:81:21:8B:F6:43:73:A9:54:DC:5A:4B:27:59
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Certificate issuer:       /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial:       0196A954CA3D49D099794875B3AB22CF2ED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
Manifest number:          1542
Signing time:             Wed 07 May 2025 06:00:28 +0000
Manifest this update:     Wed 07 May 2025 06:00:28 +0000
Manifest next update:     Thu 08 May 2025 06:00:28 +0000
Files and hashes:         1: 6npgTxI5Fj08aQhqLUstesa74qU.roa (hash: enkyXzDFZ9cSJQ7fnIhqclT0EtGx7IlDRG5jg6xN4Mk=)
                          2: MZiHSobp59WQqC8uBm95hOdBXsI.roa (hash: fjadJjOlL1+6DsHUuKfvwBZj90/AlszWfNgb3uQbb9s=)
                          3: NbSoMWFGWBCHoJlGwWivjFTCFBY.roa (hash: k5rJPB0kkBNvDa1kkQgwmYoySN8P077TC//BMQ29qA0=)
                          4: PbFbHAKPLxJYS1QXxrsUxtB4s-o.roa (hash: WcV8ew9W91HI/E1+ymAnsmr3gyEWsOwlvTaJN4weKdM=)
                          5: _kWdENGz02qFbJgsVzh0I7ssKSM.roa (hash: CgY6OFKCaRvJTJIO/HpUioGU0QKLzsGxcD6MJClnWYM=)
                          6: kpWx8dzY-mrB73iCeMSJ4V6srnA.crl (hash: ia55ebZzhY5TbdGkwoUoHB1K8TaeGGPEOEVxlVW1pp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:54:ca:3d:49:d0:99:79:48:75:b3:ab:22:cf:2e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
        Validity
            Not Before: May  7 06:00:28 2025 GMT
            Not After : May  8 06:00:28 2025 GMT
        Subject: CN=b92a0297f3f38481218bf64373a954dc5a4b2759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:55:89:ab:1c:2c:bd:95:ad:c9:88:53:ad:
                    4a:4b:80:84:5d:97:6f:26:70:0b:41:71:60:f0:9e:
                    95:47:2a:3f:94:59:71:6c:ea:a4:a2:1e:67:88:f0:
                    a6:05:de:0d:a8:90:54:28:38:9c:b3:6e:fe:d2:49:
                    20:de:b3:29:63:d3:c9:ab:56:60:39:1a:19:78:fc:
                    b0:29:7d:bd:5a:eb:3b:3a:e0:de:fe:95:cc:31:f3:
                    db:f8:51:8f:63:bd:f0:a0:34:76:ea:6d:74:65:3f:
                    8d:ca:aa:b2:65:fb:d6:08:ae:0f:5b:ae:a4:6c:d1:
                    c1:b4:be:fd:5c:6a:a3:89:23:46:7e:40:e2:72:7d:
                    29:e8:55:17:f5:fd:28:66:d5:70:73:27:7d:1d:eb:
                    69:ff:c0:6d:29:ed:a8:db:7c:a2:22:13:56:95:c9:
                    a2:6d:96:42:3c:5f:06:00:de:35:3f:c1:4f:9a:fc:
                    02:4f:90:f6:87:f4:95:31:be:90:58:6b:42:c8:42:
                    b1:47:3b:08:34:a0:d0:e8:0a:72:f3:85:45:d5:31:
                    be:f3:91:fc:7f:d0:bb:3c:99:e1:3c:4c:16:46:10:
                    94:21:ed:7f:d9:5f:33:f7:24:9f:01:ec:78:7f:64:
                    29:be:4b:00:44:63:cf:27:30:ef:88:58:c8:be:6a:
                    1a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2A:02:97:F3:F3:84:81:21:8B:F6:43:73:A9:54:DC:5A:4B:27:59
            X509v3 Authority Key Identifier:
                keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:df:ef:c3:41:dd:fa:1a:e7:60:56:c9:ed:4b:a4:57:ed:61:
         06:eb:20:0d:97:bd:ac:8f:e9:fe:f1:14:8e:02:5c:a7:f8:73:
         cc:34:d3:98:0c:3a:e6:7e:06:f7:b0:69:f1:c5:d8:93:b1:fd:
         63:a3:c1:7e:d8:73:b4:26:b4:d4:de:91:47:f5:e8:f3:9f:5f:
         63:f1:1f:91:a5:0a:19:9a:b3:54:cc:04:d3:4b:2b:fe:1f:32:
         9e:97:be:0b:18:8a:a4:14:65:e7:e6:5c:70:b1:56:2c:c2:21:
         8a:9c:f1:1a:82:5b:7d:b8:fe:62:55:7f:74:e2:48:ac:e2:24:
         86:7b:dd:70:66:9c:02:30:39:65:ee:2e:ed:e0:ac:8a:90:c3:
         7f:8e:81:b8:5a:db:05:4a:26:72:1c:c2:67:7c:c2:19:73:53:
         8d:24:cb:d5:8b:7a:70:73:1a:14:9f:c8:2d:95:2a:0e:6f:98:
         70:55:a2:37:cb:c1:9a:9c:14:91:9e:e0:0b:8e:4a:74:4c:d0:
         fe:20:18:17:57:44:a4:c9:88:ee:54:d6:ec:08:53:a5:7c:5c:
         2c:5c:a1:cb:a3:03:aa:cb:03:89:42:bf:36:da:38:8b:ff:d2:
         c0:a8:8e:3b:36:a6:f6:6d:00:b6:4c:68:5a:2d:f1:a8:db:22:
         cf:49:1a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:37:03 2025 by rpki-client