Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft
File:                     1E3mWXWbAnQSSntIHQl2hAt63gY.mft (raw, json)
Hash identifier:          EniTxClWuJzSEDEuntcb1tU+oWCgDz6W2NTIYJHQvvY=
Subject key identifier:   AE:38:CC:BB:A7:D0:BA:57:01:EC:4C:A1:3A:26:40:D2:63:15:3E:E6
Authority key identifier: D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
Certificate issuer:       /CN=d44de659759b0274124a7b481d0976840b7ade06
Certificate serial:       0196741E770FECFF034F488F6AA5D2242765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft
Manifest number:          151D
Signing time:             Sat 26 Apr 2025 22:01:15 +0000
Manifest this update:     Sat 26 Apr 2025 22:01:15 +0000
Manifest next update:     Sun 27 Apr 2025 22:01:15 +0000
Files and hashes:         1: 0bM8wmEzzUjWs4OaG_Eh1byq32Y.roa (hash: AxFzxaM8hmPYvCrIt6Spf+I6m25vebXD/RSMRn2bzqw=)
                          2: 1E3mWXWbAnQSSntIHQl2hAt63gY.crl (hash: GNmW30fZbGTIk1/axnxL198T5uIjaptxD7RD0LqZNR8=)
                          3: 4WJWIXQl6DfjK6AaWL3Rp2i--vQ.roa (hash: KhbbWhBCJSYZ246VIWEuaLq193n7KxuY5H2uWCzNGyM=)
                          4: Ej-pXn-0Jn0sG8zUigcYulAtX6A.roa (hash: RwfcwRXpnx31U4+i4QeLKY1jHwhSpDJgw+RTcxZ9RmQ=)
                          5: f89IkbsT4t8xQ8Vr8r9EM5nSnpM.roa (hash: bYMkqRm/XIBC4pGyPYMxXyN5mvSRhEimuvJb89lZFUE=)
                          6: zYIoyh8ar-bEEwLiwjL6j6tRS3k.roa (hash: NHYJZNfTf0pdFvHvOLws6gIK1AxJDJZ9yK2nJisMlZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:1e:77:0f:ec:ff:03:4f:48:8f:6a:a5:d2:24:27:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44de659759b0274124a7b481d0976840b7ade06
        Validity
            Not Before: Apr 26 22:01:15 2025 GMT
            Not After : Apr 27 22:01:15 2025 GMT
        Subject: CN=ae38ccbba7d0ba5701ec4ca13a2640d263153ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c4:c5:18:fe:f9:e9:4a:60:e9:9d:30:09:9e:
                    c4:20:c9:2d:d3:f8:a6:f6:5e:56:bb:1a:87:90:62:
                    f9:e5:3e:af:51:c5:54:71:10:23:07:4b:f7:48:90:
                    2f:df:4b:46:d2:6a:98:ef:93:b5:6c:a6:3e:ae:8a:
                    09:1a:01:8e:73:d3:0b:4a:98:8a:11:f4:41:e5:96:
                    15:d5:33:64:16:07:b2:aa:37:05:2b:4e:ca:0c:bb:
                    fb:04:06:2c:24:42:8b:7d:5e:65:ba:2e:9d:b4:4e:
                    c3:45:05:1b:e1:6d:8c:2d:d8:a0:36:80:07:48:d9:
                    0a:68:fa:f9:60:5a:a6:e9:0e:51:1f:de:a9:f9:bc:
                    31:45:f5:49:af:56:b9:2e:8b:f3:d2:ed:28:b1:f3:
                    70:23:99:b7:9f:f9:0b:49:e3:53:77:64:2e:07:a0:
                    82:a9:19:db:ca:c7:12:65:2d:79:9f:8e:ec:d3:da:
                    eb:a7:b4:3a:e0:99:50:d2:77:37:fc:a6:0a:f7:3b:
                    8f:a6:3b:df:b6:c9:63:a6:0f:0f:9d:18:45:e5:cb:
                    08:64:f5:ac:2b:9a:d3:74:dc:85:18:d9:12:25:14:
                    5d:bd:97:ce:71:b7:ee:a3:a8:62:78:6e:21:4c:7f:
                    5b:07:d8:81:9b:7b:ee:34:7f:bd:5d:4f:d0:e8:e9:
                    2a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:38:CC:BB:A7:D0:BA:57:01:EC:4C:A1:3A:26:40:D2:63:15:3E:E6
            X509v3 Authority Key Identifier:
                keyid:D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:63:90:0d:84:87:86:9b:47:0d:e5:0d:49:91:0a:74:3c:d0:
         cf:c6:2d:01:81:bd:2e:b7:0e:91:30:83:35:4e:08:0c:f4:0d:
         69:0e:7e:34:48:f4:cc:17:79:20:79:35:90:0e:7d:7a:e1:9e:
         98:cf:52:51:e6:76:1f:02:61:d2:a8:de:fb:e7:90:47:3e:a8:
         dc:27:3f:6e:30:3f:0e:4b:5e:a7:09:c0:e2:de:df:52:9d:a9:
         27:fb:93:8f:ad:43:12:47:13:2c:77:19:cc:48:20:8c:cb:f4:
         e4:79:be:27:f7:86:ff:62:5f:61:27:8c:a0:3a:1c:b5:0a:e5:
         ec:fe:06:1a:f1:48:5f:2b:fc:fd:2d:0b:43:b1:15:e2:fa:1e:
         f8:ab:32:75:53:a4:46:a4:63:53:89:b6:4e:11:f4:58:2f:4e:
         77:f6:b6:71:83:cd:b3:53:82:b5:a2:03:98:ed:eb:e9:a4:2c:
         41:17:73:53:18:74:79:80:22:35:f1:ca:75:1e:21:4d:0b:45:
         1f:08:0e:c2:89:c6:4c:5f:d8:94:db:3f:30:21:75:4c:ee:28:
         bd:85:85:27:fa:25:14:77:96:cf:1f:42:69:5a:10:f5:74:32:
         87:d3:d2:9e:dd:ae:67:ed:30:51:3e:d9:33:61:ad:61:9d:7e:
         91:f1:f4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:43:59 2025 by rpki-client