Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
File:                     M1etQG35k0tQSLX6Id4xRQuTb6k.mft (raw, json)
Hash identifier:          N+HAKBFXbj2jyvEEe3sJcsIyh9Z2lPxB7kWvybDxN9k=
Subject key identifier:   2C:62:68:F1:6C:0E:F8:A3:53:89:70:76:11:62:DB:74:63:9F:3C:9E
Authority key identifier: 33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9
Certificate issuer:       /CN=3357ad406df9934b5048b5fa21de31450b936fa9
Certificate serial:       01969CABD7B96B7330369870F9F033B34A8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
Manifest number:          1525
Signing time:             Sun 04 May 2025 19:00:29 +0000
Manifest this update:     Sun 04 May 2025 19:00:29 +0000
Manifest next update:     Mon 05 May 2025 19:00:29 +0000
Files and hashes:         1: M1etQG35k0tQSLX6Id4xRQuTb6k.crl (hash: wdNkGrdBIo0WZCkNreEcneeuPC6mJv1OjZES8BHbar4=)
                          2: m9KlvtpTq4Ql79O_O_rULA1w-zY.roa (hash: +h4/STkGCXYgH/sIOVE5dquJUDdEfzAIpbql2yKK20U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9c:ab:d7:b9:6b:73:30:36:98:70:f9:f0:33:b3:4a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3357ad406df9934b5048b5fa21de31450b936fa9
        Validity
            Not Before: May  4 19:00:29 2025 GMT
            Not After : May  5 19:00:29 2025 GMT
        Subject: CN=2c6268f16c0ef8a3538970761162db74639f3c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:44:30:fb:5c:f6:93:ce:fd:ca:8d:91:8a:
                    64:45:d3:ee:f8:5f:51:04:98:2b:6c:d0:c8:ec:11:
                    1e:6e:17:fc:20:3f:76:3d:a4:85:9a:3f:2c:bd:4b:
                    de:9d:1e:1c:ff:e2:6d:38:4e:44:78:59:96:9f:52:
                    30:7b:9e:27:f7:b5:2e:5d:b8:1b:56:8f:86:06:02:
                    27:e7:70:1f:06:dd:1a:06:6c:0b:83:48:cb:35:41:
                    ab:ef:b1:ca:fb:b0:51:b7:67:6f:5c:e9:0a:eb:31:
                    ff:81:1a:8f:ee:c5:22:6a:02:58:5a:59:32:38:91:
                    3f:d4:a1:8b:e5:1a:43:2b:be:1f:58:ea:2b:44:cf:
                    a8:25:91:4f:80:0b:29:3a:72:7b:81:d9:96:ce:49:
                    1a:29:88:b1:97:52:47:60:eb:5e:18:64:34:26:bd:
                    30:c4:23:16:f7:0e:d6:db:eb:da:1b:58:a1:4c:d1:
                    9d:35:8a:15:62:95:1b:90:f0:66:62:de:21:7e:27:
                    4c:e9:40:68:9e:f9:10:ef:00:7e:b3:bb:8c:b9:4b:
                    fc:19:6e:ab:2e:db:21:00:00:af:12:b8:6b:9e:0d:
                    46:0e:4c:8f:22:ba:eb:23:e6:41:de:dd:95:13:33:
                    18:a3:e2:9e:1a:e3:4e:fd:9d:9c:5c:d3:3b:54:fe:
                    8c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:62:68:F1:6C:0E:F8:A3:53:89:70:76:11:62:DB:74:63:9F:3C:9E
            X509v3 Authority Key Identifier:
                keyid:33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:17:1d:ed:04:19:f9:f6:f3:cf:8c:2d:18:53:b5:5d:37:95:
         b9:5a:5b:4b:70:58:fa:73:e9:1c:2d:49:a5:d0:ec:37:b4:fa:
         8a:55:a4:e1:00:d1:9f:33:60:87:98:ee:ca:be:2b:9d:79:77:
         45:31:9e:8f:37:57:3e:db:94:2f:73:20:01:a3:52:e6:2b:9b:
         f5:64:72:6a:02:37:5f:d2:3d:29:f5:35:7e:cb:8f:69:b3:b8:
         1e:8e:e0:d3:e1:ae:fc:0a:cb:63:40:bd:35:e5:66:54:ed:5b:
         78:97:b8:5a:03:ef:20:5d:f5:51:b0:0a:28:8d:94:5f:06:07:
         cc:85:19:cd:6d:39:07:07:c3:c1:a1:1b:d6:48:a4:25:54:74:
         7b:33:f4:f9:2f:3c:cd:54:f1:14:7d:7e:ca:e7:11:69:5e:1b:
         97:4a:b6:15:0c:c9:e3:06:3c:47:21:a3:db:1e:8b:2a:5e:56:
         72:1a:92:da:cb:f5:fb:b6:5b:45:1a:f7:3f:c1:9b:f4:84:c2:
         d4:b9:0d:12:c0:08:0e:e3:c5:e0:27:0f:b6:9d:d5:b7:39:1b:
         6f:e8:8e:a7:85:d9:47:d5:1c:90:e7:27:bc:21:ce:f6:a0:51:
         71:6f:8b:72:28:27:d9:94:e0:f9:e9:e6:7f:8d:99:2e:7d:1a:
         e8:9c:df:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:30:21 2025 by rpki-client