Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
File:                     _SYdRTGeg3UYdDbaRL9bmtsESn8.mft (raw, json)
Hash identifier:          CGdLt7MsTSx9nrK/F5p9RTRov1/o6e/rsFAWzsmqtog=
Subject key identifier:   4E:F9:49:E9:97:95:62:F2:E4:9E:BA:A2:04:95:E0:56:50:63:FB:62
Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
Certificate issuer:       /CN=fd261d45319e8375187436da44bf5b9adb044a7f
Certificate serial:       01967A8D6DFD90442E8AAA9FD9C6BFB4DAE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
Manifest number:          1516
Signing time:             Mon 28 Apr 2025 04:00:11 +0000
Manifest this update:     Mon 28 Apr 2025 04:00:11 +0000
Manifest next update:     Tue 29 Apr 2025 04:00:11 +0000
Files and hashes:         1: ElC-6BWKIscUitjfAAuE6V-GosE.roa (hash: puexHHhEWAY8GemHhcMwArliXKfDZpEmPaNZcjyIMY4=)
                          2: GBGBlAFSzLuNFgNx2x_0D_5DQmg.roa (hash: NZPhbRaB5eM/voPBrZEMV3C9aUgwFS3iIgWGfN4cNI0=)
                          3: IUfsA9WUIh_drsK7CEvgRpo35z0.roa (hash: +jKjtuQptzEAVzSdULkJ5A8HWf8sGmcVbiqzXEqShbg=)
                          4: _SYdRTGeg3UYdDbaRL9bmtsESn8.crl (hash: kixykmDEPg6ZEEyLv1PkJ9cx5GQwd0/PSDC1svaQSao=)
                          5: _cs3H8q9ZlFgGKRLwiQ4Xtf8xNU.roa (hash: zP2/mCjB82eimNPlv5UC3nRyIxCuHe80Zw3eVdffH6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:8d:6d:fd:90:44:2e:8a:aa:9f:d9:c6:bf:b4:da:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f
        Validity
            Not Before: Apr 28 04:00:11 2025 GMT
            Not After : Apr 29 04:00:11 2025 GMT
        Subject: CN=4ef949e9979562f2e49ebaa20495e0565063fb62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:28:6b:6b:84:da:23:67:53:59:49:33:12:3e:
                    a7:09:9c:69:55:28:c1:a8:b6:58:0f:18:59:33:7d:
                    89:54:c5:cc:64:18:28:a9:0e:03:f6:be:d3:73:9e:
                    c6:48:6b:e0:2a:f1:85:56:04:14:84:a3:c8:4a:19:
                    92:4b:89:0b:91:ea:e8:85:e4:47:94:eb:51:6e:14:
                    51:e9:b2:98:06:4c:86:11:1a:7c:1e:18:07:ff:1d:
                    9d:84:d0:84:7d:7e:a7:51:d3:84:97:5b:04:b0:1d:
                    d9:4c:f8:d9:c1:75:1d:b2:c4:cb:4f:8b:7c:32:68:
                    9f:41:47:34:5c:9f:89:11:20:1e:82:3c:67:99:e8:
                    bf:ee:32:9f:4c:b1:8f:6a:c7:c7:aa:24:11:2b:fb:
                    5a:8a:a8:ec:10:5b:d9:c8:2f:bb:f7:68:e9:c1:12:
                    d1:57:24:51:d1:68:43:dd:d2:9f:dd:8c:70:64:18:
                    12:36:ad:c0:09:40:22:4a:3d:20:ff:bd:6c:f5:53:
                    21:fc:96:c2:80:6a:d0:f5:ae:fa:df:6d:bb:20:77:
                    57:45:85:37:3b:3f:5b:fb:ae:fa:5f:43:99:78:48:
                    20:f6:c1:f4:01:cb:1e:00:e6:5e:42:02:fd:f8:0a:
                    8e:29:ff:e8:06:c4:16:ba:bc:82:f5:67:53:e7:15:
                    7f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F9:49:E9:97:95:62:F2:E4:9E:BA:A2:04:95:E0:56:50:63:FB:62
            X509v3 Authority Key Identifier:
                keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:6d:18:16:05:2f:70:d2:62:7e:a4:13:76:d5:73:32:08:32:
         85:39:6d:9a:5e:d0:b3:03:a8:47:5a:7c:b0:ec:fb:a8:b1:79:
         e2:83:cf:7b:45:82:59:10:88:6d:52:d5:b6:61:f3:d7:66:17:
         3b:1d:3f:d7:69:4c:ec:d5:3b:c7:1e:98:db:7e:ac:8a:93:51:
         ef:1c:d3:c5:4a:6a:5d:0f:69:ce:68:40:ac:74:6b:1f:ec:f6:
         09:af:83:f6:80:79:1d:c2:74:2c:7f:89:d1:f7:c7:be:45:6e:
         2a:f8:3a:f6:93:f6:57:0e:44:2a:7d:1a:3d:59:2f:7a:2f:00:
         7b:3d:5b:d7:20:ef:fb:14:35:59:a7:13:0f:e2:77:b4:31:ca:
         7c:03:42:90:49:9a:54:d0:bd:e9:15:95:c7:87:e7:c5:7b:62:
         3a:c7:53:20:5c:a1:c2:a1:33:b8:cc:07:4a:1b:61:57:14:42:
         38:b2:c5:22:8c:c0:d2:41:a9:f1:c1:c7:22:e3:6a:3a:b7:2d:
         97:df:7d:75:eb:74:ab:e3:ef:a0:cd:22:28:2b:f4:0a:b4:a8:
         a9:2c:76:5d:ec:12:cc:f3:80:f0:01:1b:03:29:c0:b2:aa:d4:
         f9:16:85:13:2b:c9:82:6c:19:54:34:7e:92:3b:a5:05:69:76:
         ce:8b:55:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:29:00 2025 by rpki-client