Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
File:                     RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft (raw, json)
Hash identifier:          TV4+pN/18dtv9n+K7fbuQkwEIneSXY084qlt8vskoXI=
Subject key identifier:   C5:59:28:AB:61:0E:52:92:BC:60:F4:45:02:C8:96:31:F5:ED:FC:F3
Authority key identifier: 47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C
Certificate issuer:       /CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
Certificate serial:       019672D43FDF77482B53DEAEEF91E8302E91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
Manifest number:          1512
Signing time:             Sat 26 Apr 2025 16:00:34 +0000
Manifest this update:     Sat 26 Apr 2025 16:00:34 +0000
Manifest next update:     Sun 27 Apr 2025 16:00:34 +0000
Files and hashes:         1: I6ww8fe_j9f3G8rmW-wt_mZZY2s.roa (hash: Sd8zlV1mabR3WLhdUp899p9IeCSzwEZhzmqxHzFQi+0=)
                          2: PR7h8oep4HkWGcRzvS4-gRfixMM.roa (hash: Ff4Pkc/6nXpndO4Ei0ieXIWUczca12lTRXydMV3acQQ=)
                          3: RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl (hash: 5HAtfxH/TKvD27XN9+QpNoVvJeV98UuLratT3DjJK3g=)
                          4: a4P5Nmq1ldQpFUTXqCcYVJT2FBw.roa (hash: uK/XWq2f7Vj84yIu4J13Mqd4rpKs4ZvyhbUMCrHpfh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:d4:3f:df:77:48:2b:53:de:ae:ef:91:e8:30:2e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
        Validity
            Not Before: Apr 26 16:00:34 2025 GMT
            Not After : Apr 27 16:00:34 2025 GMT
        Subject: CN=c55928ab610e5292bc60f44502c89631f5edfcf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2d:a5:c7:ef:d9:b0:e4:78:fe:a8:f5:93:89:
                    3b:86:16:d6:29:82:57:5b:81:ba:44:13:07:7a:e3:
                    54:f1:08:34:49:c9:1c:fb:95:71:12:de:06:a1:b9:
                    2f:d3:56:44:f0:81:f3:31:98:dd:6a:ca:e1:8e:b8:
                    77:4a:0d:5c:a6:8a:24:10:3d:7c:54:58:81:14:4d:
                    7c:19:80:0b:be:ab:e9:f7:c0:cc:87:4a:c1:f8:1c:
                    18:9b:6a:9a:88:88:19:83:ee:4d:7f:e3:b0:e6:70:
                    01:50:41:48:77:07:2a:89:5d:83:da:94:d6:9b:0e:
                    65:5b:10:30:c6:4d:64:00:e0:43:c7:f0:be:72:56:
                    84:87:c2:3c:b3:e1:31:4a:90:e2:54:3a:3e:87:fb:
                    2e:99:4a:5d:e6:bc:2d:ce:89:ee:91:36:f7:61:f3:
                    8d:36:06:40:81:61:2c:00:90:ae:41:b8:ba:b6:dd:
                    97:23:fe:ea:53:a5:a4:67:80:6c:c3:73:37:7c:79:
                    f1:4b:24:94:7a:0c:74:3d:69:26:4a:20:d8:92:1d:
                    ff:62:7a:d1:57:9a:99:ae:d1:1f:eb:bd:83:24:61:
                    0c:a1:0c:93:45:c7:d2:2d:4e:42:86:53:47:8d:43:
                    ea:4a:8b:02:3e:58:aa:bd:19:11:de:99:ce:be:5e:
                    8d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:59:28:AB:61:0E:52:92:BC:60:F4:45:02:C8:96:31:F5:ED:FC:F3
            X509v3 Authority Key Identifier:
                keyid:47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:49:7a:ea:32:5b:7f:26:ed:6a:80:c4:3c:32:55:a5:67:c9:
         ab:3f:96:35:c5:5f:a5:c9:55:db:56:4d:fa:f1:8a:c4:af:cc:
         57:49:78:6b:66:62:1b:43:68:48:d3:26:0e:d2:c4:33:03:d4:
         7e:a4:25:a6:c6:de:72:f1:96:40:35:09:d7:ee:75:1c:50:36:
         bc:4d:1c:37:9b:ef:5c:a2:e0:be:e0:48:51:57:15:3c:60:b6:
         c2:36:3d:be:86:25:5f:2a:e5:8e:21:82:cf:a6:1c:15:db:84:
         03:82:84:31:e5:b2:d3:87:03:e3:a5:a2:31:f1:8e:47:a1:db:
         b8:39:60:fa:07:93:20:75:7a:cd:3d:1d:dc:ec:12:bd:16:72:
         ec:09:b4:16:6e:ee:4c:09:48:5b:1f:51:e4:2f:b2:6b:fc:d0:
         c1:72:9b:58:06:9c:f7:6d:36:45:32:52:8c:05:8c:47:6e:a5:
         0d:f5:7a:eb:d2:44:ae:90:2b:e7:88:ca:58:d8:97:fc:ce:b2:
         2b:a2:e1:3b:ed:07:ed:94:1f:12:58:c4:f8:54:b6:55:3f:a6:
         0b:72:9b:93:3f:93:cd:31:72:8b:12:eb:f5:bd:0b:63:6e:65:
         a0:ac:6e:b6:f2:7e:a4:1a:26:5b:3c:f0:5a:38:e8:25:6d:7a:
         85:66:01:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:23:29 2025 by rpki-client