Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
File:                     vE8eawEfTWMxoSeVWlSPpQUlgKU.mft (raw, json)
Hash identifier:          EP9T9tYSEvfbilYtI6b1gXWQAi6aWvw2SuOMFsgOrsY=
Subject key identifier:   B7:28:45:27:E8:6C:B7:ED:1C:B8:CD:41:F6:DA:70:37:6D:E6:8D:B7
Authority key identifier: BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
Certificate issuer:       /CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Certificate serial:       0196862459FA89C890E503462044643ED452
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
Manifest number:          151B
Signing time:             Wed 30 Apr 2025 10:00:51 +0000
Manifest this update:     Wed 30 Apr 2025 10:00:51 +0000
Manifest next update:     Thu 01 May 2025 10:00:51 +0000
Files and hashes:         1: BNqfmpLmjYM_hMvzjjiD1hvhjAw.roa (hash: i4CNGeJ+mFFlH8LiDeZQtBRRw7N8oDxdjkoS0v+qObY=)
                          2: aSjaEPJVPJX67mv2fHsiGHa_Pjs.roa (hash: ZEy+TRl03r70LlIyNTMVcl1yqBTFe/vMwXgXOHeWwSU=)
                          3: boEHtK6TX4b8tA4ZE52KAM2BJmo.roa (hash: +7NNF3zI76oRfEmOt6I7AY03Pn8U8YF2KqGhoMWLwNw=)
                          4: uV1M3fky2AaC8kOeiqG8vtH6340.roa (hash: 1utJq4cOepQgwTmFBjPYmXLoibI08Xbs4pkw4aA8F7w=)
                          5: vE8eawEfTWMxoSeVWlSPpQUlgKU.crl (hash: 4Bt+FKZEkD76sUAeUesx1Yulh3pORVQYTgMHgCPc2p0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 10:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:86:24:59:fa:89:c8:90:e5:03:46:20:44:64:3e:d4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
        Validity
            Not Before: Apr 30 10:00:51 2025 GMT
            Not After : May  1 10:00:51 2025 GMT
        Subject: CN=b7284527e86cb7ed1cb8cd41f6da70376de68db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:12:4d:a3:50:25:c7:7a:66:fd:2b:af:e9:53:
                    ef:f1:0d:db:a9:62:00:f0:a4:e3:ca:a9:6b:87:28:
                    62:6f:9e:f9:de:78:db:a6:54:a9:04:d8:57:1d:cf:
                    da:af:e3:05:00:2c:4d:34:3e:d8:e3:d1:7a:df:8e:
                    47:10:e6:eb:d2:9c:46:98:ea:20:4c:d8:4f:c4:2a:
                    a4:58:b4:fd:ee:9b:14:a4:6a:e2:2b:b2:6b:53:d5:
                    91:de:ca:d4:c6:f1:a2:83:d3:84:b0:86:4c:7d:81:
                    c1:77:71:62:d4:23:d1:6f:e7:4e:1e:74:bf:84:f5:
                    30:46:6c:f3:08:60:7f:68:71:45:27:fa:a1:93:e5:
                    ae:2a:df:9e:b8:6d:b0:40:87:1b:97:a7:65:9a:95:
                    58:ce:56:2b:33:4f:a9:87:8c:8e:7b:cb:ad:3e:cb:
                    f4:28:de:c2:87:c5:79:a6:87:81:17:82:ba:56:ba:
                    0f:13:9a:8c:4a:d2:7a:9b:be:12:6a:de:ad:e7:ad:
                    4a:2c:e2:a4:51:94:fd:67:dc:fe:8b:2c:b9:7f:9c:
                    d8:1e:04:1d:e0:14:3e:42:48:51:49:73:e2:c5:59:
                    82:46:df:3b:a4:af:9e:85:eb:ba:80:86:7f:a7:42:
                    8b:9e:d8:e4:0a:6f:83:91:67:d6:a8:f8:71:90:c4:
                    04:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:28:45:27:E8:6C:B7:ED:1C:B8:CD:41:F6:DA:70:37:6D:E6:8D:B7
            X509v3 Authority Key Identifier:
                keyid:BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f7:09:b1:dc:35:4c:8b:cf:c1:0a:5d:d4:8f:e5:8d:3e:98:
         4b:8a:e9:09:40:20:0c:97:5c:b8:66:89:29:b7:67:40:99:c2:
         7c:e6:0b:79:d1:c6:63:f5:3d:c2:84:91:24:0e:79:e9:bc:d2:
         f3:7a:ff:5e:43:22:57:47:19:52:66:ae:e2:23:ca:fd:48:8f:
         b4:10:46:36:8e:29:22:b6:32:71:49:72:4e:2d:56:5d:f0:f9:
         e7:1e:ee:f8:4a:25:20:fe:99:e2:08:ee:9a:3c:73:cc:ab:de:
         9e:77:9a:b0:fb:ba:48:2b:94:0a:a1:85:e6:f2:ba:d8:dc:11:
         da:b8:70:47:36:7c:52:dc:07:ed:3c:4c:c7:be:d5:d8:63:99:
         03:ad:72:65:30:86:a2:ca:5a:b4:0e:bd:1f:08:67:64:72:8f:
         df:84:ee:94:5b:24:30:3a:8d:06:c1:ef:da:e6:e6:18:1d:ce:
         a0:e1:91:59:b7:38:a4:b6:9d:18:1d:d6:c9:bb:51:99:f5:ed:
         ce:3c:f5:22:4f:ff:94:32:da:19:1a:36:89:c9:bc:a9:cc:fd:
         b0:69:fc:92:59:84:b5:de:de:f5:53:df:72:60:65:7f:41:f4:
         a7:95:bb:98:6f:bf:e1:a1:39:85:ca:ac:98:6b:6d:e0:b6:99:
         18:34:60:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:23:51 2025 by rpki-client