Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
File:                     IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft (raw, json)
Hash identifier:          LZLGTWbfdFDJBS0Xqng73E1gAG/qJ2UDwUDjgyXT7R8=
Subject key identifier:   CB:39:46:F0:C2:83:D7:3D:A9:36:B9:EB:32:70:4A:9D:8E:46:00:3E
Authority key identifier: 22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
Certificate issuer:       /CN=2213007596493802fb93a326731fd3329eae2dac
Certificate serial:       0196AC1EFF725822BAAC36CF32D944305A7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
Manifest number:          152B
Signing time:             Wed 07 May 2025 19:00:34 +0000
Manifest this update:     Wed 07 May 2025 19:00:34 +0000
Manifest next update:     Thu 08 May 2025 19:00:34 +0000
Files and hashes:         1: DjsbeUScAR9EUfRE070QFYOZXx0.roa (hash: Jj0CL6iZxJ5XW4ZpctnqFGBbj6Ygbs9fspzlTAigxwY=)
                          2: IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl (hash: TuD3WCf/zPST3U7zuS6+j5XKes0iBl6+5J8SdDTkOYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:1e:ff:72:58:22:ba:ac:36:cf:32:d9:44:30:5a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2213007596493802fb93a326731fd3329eae2dac
        Validity
            Not Before: May  7 19:00:34 2025 GMT
            Not After : May  8 19:00:34 2025 GMT
        Subject: CN=cb3946f0c283d73da936b9eb32704a9d8e46003e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a2:1b:e1:77:7a:db:3e:35:de:e9:37:99:e4:
                    be:87:1a:fb:42:b3:09:da:62:a3:20:23:45:d5:b6:
                    16:95:77:0c:c0:c7:0e:76:f6:5d:b8:b2:c7:8c:e2:
                    86:0d:a4:6f:f7:a0:c8:d8:05:39:2b:2a:a0:b4:4b:
                    94:ee:aa:c8:a8:eb:3e:7d:8e:35:ed:50:4f:47:f5:
                    13:7d:50:25:fc:17:11:69:ca:dd:19:2f:2c:dd:30:
                    1e:09:ba:4f:d7:1b:6c:33:af:18:65:57:92:8a:3a:
                    b9:55:2a:0b:cf:34:b7:50:ca:63:10:e1:03:ba:79:
                    3a:f9:07:0f:a6:f1:78:20:29:02:21:87:0c:8f:42:
                    85:97:72:65:50:31:32:88:45:0a:f2:bd:27:42:fe:
                    ac:de:3a:32:ea:35:c7:b3:e1:42:ef:1e:22:9c:66:
                    68:4c:23:4c:08:74:89:5f:74:aa:40:00:1c:54:1e:
                    1a:60:58:af:86:5b:61:c4:40:b9:35:d3:2f:a7:41:
                    1d:11:6d:71:38:c6:6a:0f:a7:46:a7:d3:fd:f2:32:
                    ad:18:10:c5:fb:ce:94:1a:e3:3c:b6:86:dc:54:9e:
                    aa:4f:95:85:2c:42:0a:43:10:dd:e8:69:fe:ff:12:
                    da:fa:61:59:35:cb:a8:09:fd:f5:f4:98:66:40:47:
                    89:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:39:46:F0:C2:83:D7:3D:A9:36:B9:EB:32:70:4A:9D:8E:46:00:3E
            X509v3 Authority Key Identifier:
                keyid:22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:ba:a9:49:d0:f7:15:40:0f:aa:5b:0a:8a:3a:7c:a4:2c:ae:
         1e:6f:ed:48:b3:a0:17:4a:39:02:11:3b:b9:42:ad:3b:7f:d6:
         ca:ef:28:ca:cd:92:83:15:9b:77:3b:1d:60:d7:d0:3f:7c:29:
         2f:76:19:a6:30:48:b2:5c:76:7d:fb:cf:c1:e5:81:83:fc:2f:
         b1:a8:fa:c4:9e:6f:c8:5b:7e:41:72:6c:3e:c6:f4:dc:97:ef:
         c2:4a:7e:da:a7:22:59:b0:a5:a3:93:ab:24:7a:8b:49:db:b2:
         c1:c4:19:ef:00:6e:40:75:98:44:e8:c4:75:bc:7e:36:0f:8d:
         1d:63:c2:c4:67:68:a2:0d:67:23:aa:15:df:9c:db:e0:40:fd:
         13:b6:bc:fe:e7:05:7e:d9:83:ff:f5:9e:b0:01:5a:e9:7f:0c:
         41:8d:e4:cf:8b:f4:38:32:38:93:69:b6:98:67:33:37:6e:60:
         12:7e:25:a5:4a:0c:76:4e:71:1e:68:98:4e:5a:78:2b:e1:99:
         80:d3:72:a9:02:1c:26:c3:84:23:0d:8b:2e:52:a1:c6:37:31:
         af:76:e4:f6:e8:20:d8:c8:a8:3d:d4:f9:96:48:77:d6:a9:4e:
         2c:03:25:5d:40:ab:38:7a:9c:09:05:ee:ce:cd:00:02:6d:0d:
         ae:07:01:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:29:36 2025 by rpki-client