Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
File:                     RUDapMJFpHJfOAQUAra__e0V6ng.mft (raw, json)
Hash identifier:          1f4lBkQ57F4w1nmbW/6u/mbEJAgc2nmb1XlctOrksbA=
Subject key identifier:   AE:B4:7C:CC:44:2A:44:0A:8A:A7:2A:07:79:48:5F:D8:76:EF:BC:74
Authority key identifier: 45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78
Certificate issuer:       /CN=4540daa4c245a4725f38041402b6bffded15ea78
Certificate serial:       01969DBE5382239DFB5B464027037BFF03E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
Manifest number:          152B
Signing time:             Mon 05 May 2025 00:00:18 +0000
Manifest this update:     Mon 05 May 2025 00:00:18 +0000
Manifest next update:     Tue 06 May 2025 00:00:18 +0000
Files and hashes:         1: IzvcnFv9kw0TqyCe74ubve86Q-E.roa (hash: 78DgscXfEbwSYX7qdA0JtGlNdmCzdWY7H1HTizuXeoc=)
                          2: RUDapMJFpHJfOAQUAra__e0V6ng.crl (hash: lOgaFWxaoU7s/mczo4ri8Q+bkPID9OuqUytChDOY3kI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:be:53:82:23:9d:fb:5b:46:40:27:03:7b:ff:03:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4540daa4c245a4725f38041402b6bffded15ea78
        Validity
            Not Before: May  5 00:00:18 2025 GMT
            Not After : May  6 00:00:18 2025 GMT
        Subject: CN=aeb47ccc442a440a8aa72a0779485fd876efbc74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6a:29:01:3f:aa:6d:47:a2:14:30:be:f2:77:
                    2c:33:91:62:f4:5e:c2:84:f8:96:4c:eb:e7:70:fc:
                    86:a5:e0:c3:69:e9:e9:fd:99:ee:a9:a4:df:b1:87:
                    75:2a:57:7a:35:26:4e:8a:f5:af:e3:b2:fe:c3:20:
                    3b:3b:dc:de:4b:a9:0e:ae:e2:4d:52:fb:48:dc:93:
                    0c:0d:9e:42:a5:d6:23:aa:9e:eb:ad:7b:57:19:cc:
                    23:1c:44:c8:3d:a7:e6:8d:cc:56:ab:32:2f:1c:50:
                    70:9b:40:bd:a0:2b:e7:b8:8f:a2:dc:81:e7:20:09:
                    90:39:93:42:d4:42:f7:58:8d:a6:61:0f:4e:33:c8:
                    b9:fa:ae:5c:95:3d:36:8e:e6:76:6b:31:7c:cf:23:
                    d7:dc:4a:2f:fc:93:9f:fb:9b:a7:ed:24:ad:ee:a1:
                    6a:bb:6d:71:f3:89:35:3b:ad:89:a4:c4:0d:ba:45:
                    00:88:48:0f:1d:71:c1:0e:66:6c:00:d1:4b:bb:6a:
                    d6:be:b8:41:ec:e7:50:71:8e:b9:63:63:d6:a8:ff:
                    2d:6f:00:1b:fc:63:3e:11:36:46:51:3d:e0:22:7d:
                    3d:4f:27:cf:dc:ac:e3:af:b2:24:06:ef:72:48:3f:
                    f4:97:7d:c4:9e:1f:1f:bc:fe:2c:b3:1e:04:33:45:
                    82:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B4:7C:CC:44:2A:44:0A:8A:A7:2A:07:79:48:5F:D8:76:EF:BC:74
            X509v3 Authority Key Identifier:
                keyid:45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:78:02:e4:97:b6:dc:52:b2:4a:b3:22:8c:3c:fa:3f:a7:0f:
         86:c4:6e:ff:3f:0a:31:6a:ea:c8:16:64:1d:42:c4:a4:03:47:
         04:4e:81:44:bd:4a:a7:66:6e:98:4d:0c:1b:56:7e:86:0f:7c:
         36:7e:b3:a1:8a:63:3c:f9:38:bb:5f:19:bc:bd:de:68:8f:f8:
         a2:e0:87:26:a1:8c:03:94:ea:00:5b:fa:52:56:b5:b5:ea:99:
         ee:c3:f8:ce:4a:29:34:95:cb:0b:79:8d:ff:d7:11:61:c6:9a:
         f5:a0:1c:74:c8:4c:72:53:a9:65:5d:19:cc:ef:cd:95:f8:18:
         4b:a9:c8:ee:de:f5:82:cd:35:7c:0f:24:12:c3:9c:e2:1f:a6:
         6d:b1:cd:ec:e0:b4:e4:4b:f6:97:0f:49:1a:82:61:38:02:98:
         d4:61:2c:00:2c:a9:e2:5e:34:ad:61:d6:37:e7:d0:ab:98:75:
         6f:b0:58:8b:3b:34:10:07:c8:90:f2:74:de:f2:02:b3:3b:a0:
         51:1a:31:3f:bd:8a:23:28:69:b4:3e:d3:01:64:cd:a0:a2:05:
         0f:6b:18:ae:4d:f1:0c:c1:f5:b0:50:3d:60:2d:ff:2e:3f:18:
         70:a9:5e:0d:f8:93:dc:b4:8d:a3:76:a3:a9:68:44:f9:fd:19:
         d2:2a:39:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:37 2025 by rpki-client