Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
File:                     57M-njyTL3pULrAhBWzpSx6Ljws.mft (raw, json)
Hash identifier:          7v0Aky9rEfFMAhSOdbsr/LLMoSV4ZnCdswNEfd/E0kI=
Subject key identifier:   E9:48:B2:68:09:C4:2E:53:18:AB:AE:C5:42:B1:EA:1E:57:EF:4D:5C
Authority key identifier: E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
Certificate issuer:       /CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
Certificate serial:       01969A4FB87C3165F92A641009A32652CAE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
Manifest number:          1520
Signing time:             Sun 04 May 2025 08:00:37 +0000
Manifest this update:     Sun 04 May 2025 08:00:37 +0000
Manifest next update:     Mon 05 May 2025 08:00:37 +0000
Files and hashes:         1: 57M-njyTL3pULrAhBWzpSx6Ljws.crl (hash: AKyGXPoamLZDfZ7gaXsR7ZJ5+WDFHT4sWzOtMQIcQD0=)
                          2: 6Zhe4pOz-rb9TWMRRFPsmtYyKog.roa (hash: kI1Y/0VuhQsjj4DLuvZCMsfABY7cci9OBnCvkDAkun8=)
                          3: bSnWHcd-6ITx2i-OmG1T8hYUFBQ.roa (hash: 6T/s2wCU61VJFzvpy751/OsAnKk42N0ClHJAb6F+ja8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9a:4f:b8:7c:31:65:f9:2a:64:10:09:a3:26:52:ca:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
        Validity
            Not Before: May  4 08:00:37 2025 GMT
            Not After : May  5 08:00:37 2025 GMT
        Subject: CN=e948b26809c42e5318abaec542b1ea1e57ef4d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:64:84:9a:d0:8f:ef:c9:d7:33:50:fb:99:e0:
                    43:28:3c:e6:03:77:45:57:5f:4c:4d:ae:19:d2:95:
                    5b:05:21:bc:5a:24:1f:1b:d1:d7:40:12:0b:42:e7:
                    7c:5d:f6:a3:fd:d4:51:0e:2c:61:80:0a:14:88:cf:
                    5b:0d:b4:98:5e:df:2a:93:36:bc:88:79:9b:62:ad:
                    06:57:40:19:92:c6:75:80:b6:07:97:4f:8e:1e:bc:
                    ef:63:49:da:8d:7f:7c:61:14:2a:6f:4b:44:6e:80:
                    40:50:2e:1c:fa:88:48:7b:f6:b4:86:32:5c:08:2e:
                    ec:17:63:b5:a1:a6:f8:b3:2a:ec:3c:ba:e4:96:22:
                    5e:33:54:a9:7b:43:45:59:76:7c:fa:ae:e5:6d:0a:
                    f2:9f:4b:5a:51:2c:f3:5d:9e:8c:2e:ca:61:62:8b:
                    2b:e6:0f:cb:d5:29:87:0a:da:3a:d8:3e:63:77:b7:
                    6d:6f:cd:99:0b:9f:8b:e5:92:94:4f:f8:f6:4d:70:
                    09:31:ad:91:d4:9e:f3:a1:c7:28:85:2c:03:c8:70:
                    d6:88:63:6a:f3:9e:36:fc:7c:b1:30:7c:cb:8e:cd:
                    6e:5a:b2:bd:33:4f:70:36:bb:10:4c:d3:8f:ee:1e:
                    a3:e7:46:27:04:77:ea:5a:34:cd:38:b0:c1:5e:81:
                    00:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:48:B2:68:09:C4:2E:53:18:AB:AE:C5:42:B1:EA:1E:57:EF:4D:5C
            X509v3 Authority Key Identifier:
                keyid:E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ca:9e:2c:bb:4e:0d:d6:5d:bb:75:ed:a8:39:d2:90:9d:57:
         39:ec:95:d9:49:36:73:ed:4b:86:59:a8:cd:4c:26:b9:e9:21:
         30:95:83:42:cd:0f:9c:95:50:e3:4e:80:66:b2:9b:71:87:36:
         91:49:af:9b:38:27:56:85:a8:29:74:76:4a:2b:50:40:c9:f0:
         5a:80:54:1f:cd:9a:7b:f6:5e:1c:66:4d:43:2b:43:fe:d6:3a:
         6d:df:90:8a:ca:47:d9:11:e0:c1:4e:04:78:f0:73:e0:1a:26:
         80:a6:c3:68:05:23:43:55:45:a8:b0:0d:1c:75:2a:d6:08:08:
         b6:41:91:21:bc:a0:1a:4b:a4:d3:7e:75:79:3d:ae:4f:fe:93:
         2c:93:f9:b1:9d:62:8f:9b:6f:41:6e:0b:b1:f4:de:57:36:dc:
         9f:83:db:ac:a4:ad:fd:c9:e7:28:0a:73:99:01:80:3a:50:8f:
         a1:c3:26:0c:d5:4c:37:06:77:95:11:3b:26:88:42:28:5a:b9:
         a3:f7:66:0b:68:34:59:9c:01:b5:e7:f4:ab:bb:8a:04:22:fe:
         a0:d0:a5:d7:7f:85:16:bc:2d:19:a1:e2:db:c2:67:f9:c3:57:
         78:57:00:d9:60:ec:a6:aa:de:a5:cf:a3:b2:44:d4:18:6a:21:
         57:23:e7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 14:39:15 2025 by rpki-client