Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
File:                     txDNRHGj-M3NhE0_NmFIlAlStOc.mft (raw, json)
Hash identifier:          t9OkkdsfSpcYur7ktKiSyN8Tz7VW0dfPgBJiwPTS6nc=
Subject key identifier:   5E:6E:61:5A:32:B5:66:AC:EA:07:C1:EC:E7:49:34:B8:4C:2C:0F:98
Authority key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
Certificate issuer:       /CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Certificate serial:       0196D664C62D0AD02235B3CADAC1566A4A84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
Manifest number:          153F
Signing time:             Fri 16 May 2025 00:00:50 +0000
Manifest this update:     Fri 16 May 2025 00:00:50 +0000
Manifest next update:     Sat 17 May 2025 00:00:50 +0000
Files and hashes:         1: 6x14Tr1KvbGHug5B88Kt5ILNIuQ.roa (hash: TGutJ2mIJk6NG98vs/RUqYq5wAmvywBgw3u1JfM1+58=)
                          2: txDNRHGj-M3NhE0_NmFIlAlStOc.crl (hash: Kska/FxNVP+GgXilwBS+9obhC8cyDAlyC08bzxE5mGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d6:64:c6:2d:0a:d0:22:35:b3:ca:da:c1:56:6a:4a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
        Validity
            Not Before: May 16 00:00:50 2025 GMT
            Not After : May 17 00:00:50 2025 GMT
        Subject: CN=5e6e615a32b566acea07c1ece74934b84c2c0f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:34:aa:e6:1a:44:dc:c7:e9:0f:0b:0d:19:
                    d8:84:6e:be:15:f1:5b:77:19:80:49:39:9c:7c:a7:
                    ba:ca:c9:1c:7d:d6:f1:ad:c5:e4:52:5a:09:14:13:
                    e0:36:e4:fc:4d:fd:16:2c:9f:00:3a:1f:f7:68:b7:
                    d9:07:a1:7d:0d:dc:4b:bd:7c:01:93:41:0a:94:c8:
                    f9:f9:15:63:70:50:35:8d:30:4b:2f:b4:cb:8d:b9:
                    b3:4f:d6:35:06:a0:c3:7f:7c:72:d7:30:b5:21:6e:
                    c7:9f:7b:7d:94:ec:72:02:e6:7d:71:3b:9f:35:6a:
                    f4:ca:f8:bc:5d:80:2f:9b:42:61:fa:7d:f0:fd:c4:
                    98:0d:2a:44:2f:fb:41:36:97:e8:f9:99:7a:d6:38:
                    8e:d9:db:4a:27:e9:17:f1:73:b8:4f:78:ba:4a:5e:
                    a2:a3:44:d0:70:d7:45:de:6c:b0:3b:17:66:2d:78:
                    ee:ee:d3:ff:a2:c7:cb:d8:25:57:20:f7:4e:9c:63:
                    fb:10:6c:f1:a7:97:2d:9d:13:8a:ca:89:0b:57:30:
                    32:86:0c:c3:1c:c3:3e:69:21:4b:40:f6:77:50:99:
                    ea:15:72:0e:26:63:ed:32:a7:ec:76:55:bc:31:22:
                    7c:8e:4c:a7:b0:23:9d:19:15:a2:2b:b7:fd:e9:ba:
                    05:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6E:61:5A:32:B5:66:AC:EA:07:C1:EC:E7:49:34:B8:4C:2C:0F:98
            X509v3 Authority Key Identifier:
                keyid:B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ae:22:49:a7:5a:f2:82:40:f7:44:97:d6:ef:c9:06:a8:26:
         2b:39:6d:11:df:40:fa:fd:3d:71:c3:fb:12:cb:8b:e6:aa:88:
         88:05:c5:62:90:31:99:3c:0a:de:ff:ea:dd:47:87:a6:38:ea:
         4e:d5:7a:85:24:de:65:a4:cc:84:21:65:8c:5d:66:71:35:ef:
         ea:07:1e:4f:fa:78:f9:e0:b1:cd:43:45:ce:39:84:83:48:7e:
         c8:e2:e4:86:b0:52:4b:a0:4d:da:f7:f8:dd:84:ad:46:a8:ee:
         eb:85:39:a0:48:23:53:26:8d:9b:56:9f:8f:0f:27:1e:47:9e:
         4c:7b:98:c8:71:85:a4:0f:5a:6e:60:84:c3:eb:90:1c:00:13:
         8f:a9:36:fd:eb:f1:13:13:ec:f3:97:13:f6:60:66:c1:0e:f9:
         3e:ec:b0:f5:da:4f:8a:cd:a8:2a:7c:d3:8a:c8:88:9e:2f:c3:
         5a:00:c5:6b:96:c9:f7:16:b1:f0:75:93:0a:ad:b2:02:19:7a:
         87:9a:71:a6:f5:d8:d6:ad:e3:95:94:6a:9a:cf:bc:9a:17:be:
         8b:4b:21:fe:97:0b:2e:e8:0a:df:20:01:ce:89:f7:b6:a3:1c:
         96:89:25:cd:83:8f:d6:d8:f7:bb:db:5e:05:13:50:e2:33:d1:
         16:b3:25:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 02:55:19 2025 by rpki-client