Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
File:                     Anes0RLxxsgzvsIvi1PMcNI5CHY.mft (raw, json)
Hash identifier:          Q3jNgppt8m8/xn3xEbjCGnqt6Mz3mJlSJGjSh3AHxMA=
Subject key identifier:   9C:B5:42:44:AE:EC:AC:7E:AD:1A:4D:70:3D:D0:D3:15:98:22:97:41
Authority key identifier: 02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76
Certificate issuer:       /CN=0277acd112f1c6c833bec22f8b53cc70d2390876
Certificate serial:       0196C6836CC0691E1DB2E9087AAFE835EAD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
Manifest number:          1539
Signing time:             Mon 12 May 2025 22:00:23 +0000
Manifest this update:     Mon 12 May 2025 22:00:23 +0000
Manifest next update:     Tue 13 May 2025 22:00:23 +0000
Files and hashes:         1: 2nLfLY9iuS0QWJUoxMXGuTVNh4Q.roa (hash: KGQN3KTkCEm9UO8mNAZfG4hkgxNjImc/0aUX1CErP0M=)
                          2: Anes0RLxxsgzvsIvi1PMcNI5CHY.crl (hash: OXhPPoa27JU8EDVtBSjQ7nzrvXcsgPLcZU1dPlBGngA=)
                          3: OP_LxEh3lwkqqiARAnCPDgbwZFo.roa (hash: s8g9cGnm5CE4zgxAFLfWVnDVE/Wx0l3/tOuxqSeDbUw=)
                          4: Th0AzgJWNzEMUInk7IHPiBNTMFs.roa (hash: 0b9R/T23sDaiRJT9SmZqwKUiLRaB4TURwrsLOA1pG44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:83:6c:c0:69:1e:1d:b2:e9:08:7a:af:e8:35:ea:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0277acd112f1c6c833bec22f8b53cc70d2390876
        Validity
            Not Before: May 12 22:00:23 2025 GMT
            Not After : May 13 22:00:23 2025 GMT
        Subject: CN=9cb54244aeecac7ead1a4d703dd0d31598229741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e8:0f:ab:0d:09:6c:d6:11:44:65:d4:91:ae:
                    af:70:b1:dd:7d:7d:02:44:35:15:04:8c:08:e5:f4:
                    dc:e5:74:38:35:d5:1f:6f:76:26:1a:e6:e0:4f:5a:
                    9b:86:f6:17:e2:21:16:76:5d:b8:65:0d:2a:a1:55:
                    14:8f:93:28:2b:1b:24:95:3f:94:58:93:21:8d:98:
                    52:95:ac:32:f4:1f:b9:4e:e4:77:90:fd:a1:21:db:
                    9f:2f:26:9f:e7:b2:ba:b0:98:57:2c:81:aa:fa:e3:
                    55:64:e9:c7:f4:e9:a8:f6:1e:5e:02:3b:2d:4f:c2:
                    a5:aa:c7:4a:c5:84:a9:92:fa:35:05:59:21:ba:83:
                    50:08:82:5d:ac:26:e0:98:2a:98:01:ef:c4:e3:16:
                    e4:67:af:a1:e5:cd:38:5d:f0:3d:a2:6e:db:ed:f6:
                    a4:f8:90:04:52:7c:b1:f7:0a:24:5b:a7:39:2f:46:
                    f0:df:02:17:b7:2c:4b:9b:79:c6:54:0e:58:8e:8c:
                    c7:19:b1:8d:d2:8f:06:d5:f5:8a:8d:a7:81:1a:fa:
                    8f:fd:88:2e:27:8c:4e:f4:bb:da:35:39:1c:16:b7:
                    38:fa:cc:2a:bd:96:14:13:66:0b:db:77:0f:d2:49:
                    b1:53:6f:9a:d0:7f:20:c0:c3:95:14:79:b6:21:50:
                    1c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B5:42:44:AE:EC:AC:7E:AD:1A:4D:70:3D:D0:D3:15:98:22:97:41
            X509v3 Authority Key Identifier:
                keyid:02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:99:4b:65:2c:58:64:f4:42:e6:61:d3:6a:e9:ea:d2:0f:d1:
         ca:64:19:b0:90:d5:1f:cc:eb:0d:7f:d8:58:17:90:23:cb:c7:
         3b:ed:2a:6d:e0:80:95:43:7e:12:e1:43:3f:ad:ef:c6:21:0c:
         e9:38:00:5e:0d:a9:55:16:60:6e:63:bf:c7:fa:7e:b0:49:38:
         52:35:84:2d:8b:62:1a:94:25:bc:dc:fa:78:08:37:23:15:3a:
         4f:66:75:e9:f5:12:81:85:f9:b5:5e:a4:63:aa:e4:fd:66:80:
         f1:a9:36:d1:80:ab:c3:41:d2:21:94:d9:34:be:a1:f7:36:1a:
         0e:4f:85:fb:85:26:55:d7:0f:54:fc:2a:11:4a:2a:be:57:fc:
         49:97:95:bc:d1:43:67:31:27:12:91:6d:d8:1f:d4:2e:c5:ec:
         a4:c0:11:e3:ae:eb:82:da:d7:9e:74:a6:9c:a1:da:8c:5f:5b:
         1e:f0:6c:80:21:1d:da:94:40:95:2c:48:4e:80:2d:18:24:c6:
         64:c3:99:66:3d:40:b4:80:af:93:73:68:07:8a:dd:e0:a4:b8:
         f1:dc:8d:68:a6:1b:36:ea:1f:b1:26:bf:69:ba:18:5e:2b:db:
         08:1f:da:9b:02:81:b2:bd:7a:12:5c:7f:d7:52:48:ba:18:34:
         14:cf:c5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:03:59 2025 by rpki-client