Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
File:                     1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft (raw, json)
Hash identifier:          ABEoWkm2IwuyV6li/SZ9aXAq1oESfneJzuR8PW4zSPQ=
Subject key identifier:   B8:26:BE:90:16:0A:30:8C:FA:A0:40:42:86:29:97:4E:B5:0C:AA:72
Authority key identifier: FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF
Certificate issuer:       /CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
Certificate serial:       0196AE7B9B651ABCB9D2F4F2F80453770F45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
Manifest number:          152E
Signing time:             Thu 08 May 2025 06:00:58 +0000
Manifest this update:     Thu 08 May 2025 06:00:58 +0000
Manifest next update:     Fri 09 May 2025 06:00:58 +0000
Files and hashes:         1: 1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl (hash: DLh4etTPE3TH6rsi7DoA0R4QT2vP7A8/v1aYt8LWaMk=)
                          2: 1-O3-eEOj4WNMKkx6AjJ5BztCQfA.roa (hash: 3XCfpEftkyfw/udAWZHLu6olWarQDCfoueNYZe4wmqM=)
                          3: g9Xis0X9LNCOyDX1kA4xgId4bUU.roa (hash: eAC0STaybazrwMkwNWuW4cD5J/cTK9sETsg7k83JaD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:7b:9b:65:1a:bc:b9:d2:f4:f2:f8:04:53:77:0f:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
        Validity
            Not Before: May  8 06:00:58 2025 GMT
            Not After : May  9 06:00:58 2025 GMT
        Subject: CN=b826be90160a308cfaa040428629974eb50caa72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c8:b2:e1:82:ef:6f:2e:3b:bd:1e:8f:62:9d:
                    fa:96:98:cc:47:11:08:7a:93:90:4d:36:3c:3f:6c:
                    37:6f:0a:43:e7:ec:c8:51:e9:a3:32:b4:0b:bd:f5:
                    77:12:1e:c4:31:67:fe:30:7d:a7:3b:51:3c:7e:b0:
                    f6:15:aa:3f:38:ef:60:97:f0:ca:c5:12:9d:13:3e:
                    4d:01:6a:25:ff:f6:e6:01:5c:99:19:09:d4:fd:c6:
                    36:5c:be:c1:69:da:09:d5:74:f7:5e:c4:32:aa:7f:
                    db:96:14:f0:59:18:29:56:15:c8:2a:cf:28:a2:e6:
                    51:c7:2f:a4:a7:75:a8:77:1f:65:f0:9a:47:70:ff:
                    10:14:01:c7:2d:74:86:11:a3:ed:ef:f3:e7:df:f6:
                    3a:78:b5:81:bd:57:92:4e:6c:fb:3d:cd:45:e5:e5:
                    bb:13:d5:d5:62:5d:95:94:58:03:4b:1a:36:12:78:
                    2d:98:66:58:f1:31:d0:eb:da:e9:23:dd:b3:43:c3:
                    50:1f:c9:11:85:a6:29:8f:4a:39:fe:40:06:19:82:
                    7b:ba:d9:0e:bb:c8:56:db:e0:93:0f:53:80:c4:e5:
                    9c:98:5f:2f:bd:92:c2:66:b5:1f:91:d8:16:9d:75:
                    b3:66:f8:62:92:5e:75:eb:86:ba:a0:e3:20:67:b4:
                    79:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:26:BE:90:16:0A:30:8C:FA:A0:40:42:86:29:97:4E:B5:0C:AA:72
            X509v3 Authority Key Identifier:
                keyid:FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:e4:e1:4b:d3:7b:e8:fa:b8:e3:b0:90:88:cd:a7:a1:11:de:
         3a:95:af:83:54:36:41:5b:24:ff:0a:61:d9:e1:be:a6:e8:34:
         44:a7:80:c7:e2:43:c2:44:e7:2c:9d:48:f2:c7:3d:8d:15:91:
         5c:ba:7e:8f:45:23:56:5d:81:ce:e3:9f:a3:f4:ea:75:1e:9d:
         5c:d6:12:d7:2a:6e:c7:96:29:cf:a7:a3:5d:f6:6d:b4:6f:f5:
         1c:03:da:a8:25:fd:b4:57:1a:32:92:6e:e2:06:80:52:ac:b9:
         61:58:9f:7e:fd:af:6d:9c:6f:2e:8d:e9:fd:9b:d6:85:b5:6a:
         fe:0f:0e:e1:7f:be:f5:47:7c:12:4b:3a:55:d4:22:63:d1:27:
         3a:0f:a6:6b:55:8e:7b:d6:c1:19:54:4d:df:0e:90:f6:14:0b:
         e7:1e:f3:f1:95:2a:b6:f3:1c:11:6d:08:20:3a:6a:fe:24:2c:
         f7:67:c7:ef:44:82:0b:85:9b:41:20:ed:c1:c5:0a:4a:1e:cb:
         a2:94:9e:05:ab:ee:52:a2:aa:f9:e4:8a:76:47:09:b0:be:e2:
         05:bd:52:77:95:44:61:17:68:6e:e9:86:10:f8:c8:dc:3c:06:
         07:2e:47:75:a0:a2:3d:ba:42:3c:1a:6d:bc:2b:7a:73:b2:6b:
         c1:16:08:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:35:52 2025 by rpki-client