Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
File:                     rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft (raw, json)
Hash identifier:          ugsPONfXRfH8e+nxlHxydDUTUKAeIWYGBjxLlcepWzY=
Subject key identifier:   86:0F:3F:61:A1:94:29:81:9D:01:8C:D3:1D:03:A2:1A:DA:BB:CD:F0
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Certificate issuer:       /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial:       0196851198DA7025FD51498E226145C1A640
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
Manifest number:          1586
Signing time:             Wed 30 Apr 2025 05:00:44 +0000
Manifest this update:     Wed 30 Apr 2025 05:00:44 +0000
Manifest next update:     Thu 01 May 2025 05:00:44 +0000
Files and hashes:         1: EkAtT1wisUb57TFJYIYcJsxKwsk.roa (hash: bTDaJJ3OE5tSiwj9edVtEIcHo7Qfr7K+HpTgz6mXWHU=)
                          2: H401Lqlj2gbFoYf6OtBoSN06cFw.roa (hash: vYELwnReHKGr6B9/fDrX/dIYrSBT2mFYuU7np1Kq32A=)
                          3: M3stNuz4pD7ZjpMskqzv9XlCj9A.roa (hash: NMOxvF7KRmh06hpPpSGd+qY4LB/onM0QHYCbQ+IenlY=)
                          4: Q8d8hFO1Z5QGt0sy9UqRFXk4mTo.roa (hash: wlFaCzv/BxgMEgp0yQqyJXxYnRAML7mlxN04EDVXED8=)
                          5: rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl (hash: xcMdZiv9RzeEg2sL+KTZVU0jourhBkALm/DEyzMFb7U=)
                          6: wuzH2my_mYDAlouZ5aRNnbo5Kzg.roa (hash: 8mZfF16h11ohkGa7jPqqzWnLZjCYH45hphmVsvoXp/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 05:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:11:98:da:70:25:fd:51:49:8e:22:61:45:c1:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
        Validity
            Not Before: Apr 30 05:00:44 2025 GMT
            Not After : May  1 05:00:44 2025 GMT
        Subject: CN=860f3f61a19429819d018cd31d03a21adabbcdf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:be:77:cc:07:09:16:8b:b9:4e:87:26:80:e5:
                    e1:c1:2d:d3:67:5e:c0:ea:70:36:c4:03:41:74:69:
                    af:90:38:d6:2c:b9:04:c7:3b:ce:52:db:ee:f5:ae:
                    e0:cd:ff:b6:9a:a7:e1:37:ed:8a:85:2f:c3:32:d8:
                    83:b6:f3:bc:ef:49:41:2a:19:9f:79:73:b1:7f:e2:
                    44:d5:1a:2b:4e:cd:5f:b8:b5:35:7f:c8:2f:15:59:
                    fa:6c:83:30:8c:26:8c:fb:62:82:43:bc:20:90:c4:
                    0e:6e:9b:43:d2:ba:18:b6:b6:78:e8:9e:13:b1:db:
                    73:37:bf:9d:ec:01:4a:35:56:49:f3:72:5e:7e:1b:
                    9d:4d:07:ee:64:b6:54:00:a2:70:47:41:4d:88:ff:
                    5c:63:3a:bd:86:fb:e9:24:38:76:a1:b3:38:f0:8c:
                    3b:e5:4f:8c:86:b9:1c:90:6c:c3:59:a9:b6:ee:f3:
                    38:b6:08:a9:8e:d9:3f:1e:8c:1d:89:0b:84:a8:75:
                    e3:84:60:90:9d:d3:29:52:43:9f:76:d6:3f:93:dd:
                    4e:fb:25:bd:b9:c3:66:c5:78:a3:c1:4f:86:83:e1:
                    21:63:13:ac:5f:84:95:57:44:7c:b0:f5:24:62:a6:
                    77:2b:52:9c:47:37:49:f3:5d:40:83:29:74:4a:9e:
                    70:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0F:3F:61:A1:94:29:81:9D:01:8C:D3:1D:03:A2:1A:DA:BB:CD:F0
            X509v3 Authority Key Identifier:
                keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:0a:dd:b1:36:4c:1c:b8:b1:2c:5c:87:6b:a9:0d:7f:22:dc:
         9a:0d:aa:23:26:3b:b7:f0:a6:9e:45:77:00:dd:db:fa:f7:76:
         c0:fe:59:69:41:7e:f4:7f:d0:0d:35:ab:0d:8c:bd:d3:d3:e9:
         93:df:92:3b:f1:66:99:19:c7:ee:a1:34:f2:1a:d7:1b:a5:b5:
         55:d4:5d:f7:35:52:bf:64:82:58:36:b6:8b:d1:6a:bd:da:34:
         5b:00:c2:07:8b:80:70:87:65:71:d5:9b:c1:54:4f:30:e3:e5:
         07:10:c8:5c:1d:4f:39:6d:53:a5:80:bc:ec:b0:1c:cb:43:dd:
         31:39:87:8d:16:19:b4:59:80:8c:3d:82:17:cf:4b:86:89:57:
         d5:3e:79:fa:3f:e1:e9:e8:78:2e:7e:d6:e8:ce:8b:96:71:14:
         c8:fb:07:52:15:34:fd:4a:ee:09:f3:a7:25:96:aa:68:bb:7d:
         bb:f4:7b:88:2b:06:17:37:da:96:ad:b3:53:ee:8c:2f:e8:78:
         63:85:4f:b4:bd:ed:83:93:1c:f0:61:fd:72:fc:a0:4e:fd:6b:
         76:bd:56:4f:3d:70:2c:a6:3f:1a:5c:52:fc:a5:50:09:10:ea:
         6c:f2:a6:70:53:58:cc:2b:d6:7d:60:76:e0:4f:3b:9f:2e:8b:
         6c:1c:8f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:34:08 2025 by rpki-client