Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File:                     1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier:          iy9V+A8gqGre/Rj4yA71uc+6SeRveKYF6AoVK8IeOaQ=
Subject key identifier:   73:64:FE:CA:81:15:97:00:75:31:5F:95:8C:6C:75:7C:79:28:41:3D
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer:       /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial:       01969FE3ED3F3670C7BC434A4EAED60A5657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number:          1540
Signing time:             Mon 05 May 2025 10:00:36 +0000
Manifest this update:     Mon 05 May 2025 10:00:36 +0000
Manifest next update:     Tue 06 May 2025 10:00:36 +0000
Files and hashes:         1: 0PRh-Ryf5Bbnr0lOh4NNRU5Dvtk.roa (hash: jgK2NNDoTbWiQ7uIBzHm15T4lQ1IK4iXj6RZrP5o0x4=)
                          2: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: E0mUtiQnsWgqa8DjI2VGSqO1LLmSdV4B29WCB+QOYT0=)
                          3: 2LNh2IK4jZn1zUGBoSeuOCdHsXI.roa (hash: oJ1ixo11Dgt3gqct0Oh6zVb2kz2NqX0+yoE97/FL8Fc=)
                          4: Mj33PSIVDFEMWJHgu59FVh30wBE.roa (hash: LnMHKUsXF7KzdF90MCgfrbR5YbM5UFpQOfqwvOjdFkc=)
                          5: X3rPCUQOCzHRW1aOB1JMsXT6ETw.roa (hash: Mnw7vSeAR5wWc2r0nd1dxOLcS1XganxG0iGji5vuiZQ=)
                          6: eV94BXe8LtEfrEreyIQkc6VGevg.roa (hash: n/7ce91I2ejVxdCN2rHxzeGGcgk6A9ogkMPQOK3FmSQ=)
                          7: y219uopaZvXSdvuyVN0z8hSAj3g.roa (hash: yOxEDrbHVzQ3D4oMaRFodYyQEbnpgrKDN1hHuSZgDh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:e3:ed:3f:36:70:c7:bc:43:4a:4e:ae:d6:0a:56:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
        Validity
            Not Before: May  5 10:00:36 2025 GMT
            Not After : May  6 10:00:36 2025 GMT
        Subject: CN=7364feca8115970075315f958c6c757c7928413d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d3:ff:32:d6:f4:31:81:05:f0:56:5d:5f:09:
                    2a:38:25:a0:d0:75:38:f0:d8:95:1c:87:8f:da:41:
                    22:d2:b6:d9:a9:b9:71:3f:a0:65:2b:4e:86:b1:3b:
                    8a:f0:e2:cf:0d:25:1b:e6:1c:90:f2:9d:77:df:5b:
                    2a:cf:cf:02:24:52:cf:cb:38:e6:7f:a4:ce:5b:a8:
                    f0:46:eb:c5:cf:27:09:ef:26:2c:d4:c6:05:44:7c:
                    f3:fe:ea:85:8e:82:03:0e:ce:48:16:3d:dd:9d:04:
                    ec:50:82:f1:88:29:09:36:da:c7:bb:c6:68:5f:bc:
                    45:19:88:7a:a1:21:53:e9:76:3c:28:1a:5e:f4:06:
                    ae:5d:20:11:4c:55:5b:bb:98:68:06:9d:ac:10:f6:
                    f8:66:95:fa:c0:ad:9b:98:4f:cb:a6:5f:26:ac:c1:
                    54:09:c8:41:03:a1:ec:4b:3e:cf:e0:9a:96:cd:68:
                    26:21:de:ed:ad:68:78:79:a8:59:9c:cb:49:32:a5:
                    a9:ee:9b:4a:cc:bf:1c:fb:f7:fa:4d:47:f5:49:26:
                    e6:79:1f:fc:ca:6e:a3:01:1d:8b:e6:a1:30:74:d4:
                    f7:78:dc:09:92:18:63:2d:e5:04:92:8a:5b:83:6c:
                    df:31:21:9c:58:c9:ae:df:d9:43:69:85:ef:af:64:
                    48:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:64:FE:CA:81:15:97:00:75:31:5F:95:8C:6C:75:7C:79:28:41:3D
            X509v3 Authority Key Identifier:
                keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:a4:a4:06:5b:c3:d5:4a:0b:cf:9a:ac:b9:f4:59:52:7f:b6:
         1d:0c:5d:23:9d:07:24:4f:2a:94:17:6c:3e:d5:de:5e:37:e1:
         7a:e8:e5:9d:88:f1:45:bd:15:37:4b:23:f6:84:5d:0f:28:ee:
         74:ee:33:ae:57:00:c4:19:1f:db:e0:8b:31:2f:57:ae:85:c9:
         e8:79:3f:1f:53:42:f5:2b:09:5f:b2:20:2b:4b:35:22:59:0f:
         53:30:0b:0b:6a:58:3b:33:f0:67:cb:d1:fe:74:04:6a:9c:80:
         a2:19:05:38:b2:ab:8b:7d:67:4f:f2:d5:0f:1d:7f:dd:b0:29:
         33:17:47:d0:26:4a:62:89:73:d7:df:71:31:4b:bb:af:3d:22:
         64:b6:00:1d:33:98:5e:5f:0f:89:fe:b5:82:e5:12:be:dd:63:
         8b:d5:2d:a4:d5:1c:e6:7f:f9:1a:9d:c1:b3:1a:92:57:9f:5d:
         ea:a1:cc:43:e7:61:c8:5a:47:3d:3e:2c:2a:12:6f:dc:88:ad:
         b0:6f:25:74:0b:b5:1e:30:af:d4:27:b4:52:31:a5:d5:c9:99:
         1f:b5:1d:08:78:ff:18:cd:27:d0:57:ac:9b:61:ea:cb:8b:03:
         8e:e3:85:f5:da:2a:51:ee:85:03:6a:ba:60:97:99:aa:6a:85:
         4d:d1:81:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:10:48 2025 by rpki-client