Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
File:                     I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json)
Hash identifier:          7byu1FfRRrro+tzEugUoynHYnxYwL4Dm+OPIX5eLF+w=
Subject key identifier:   C2:EA:5A:63:07:87:D5:35:7E:1F:27:FB:49:E6:7E:33:B0:BA:DE:0C
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Certificate issuer:       /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial:       0196778CC207042286FAC91FF256EE7F0233
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
Manifest number:          150E
Signing time:             Sun 27 Apr 2025 14:00:35 +0000
Manifest this update:     Sun 27 Apr 2025 14:00:35 +0000
Manifest next update:     Mon 28 Apr 2025 14:00:35 +0000
Files and hashes:         1: C3a8w3EA0yZf6c0xKrOAJTxFR18.roa (hash: LNpEHJw7nSfysWTvnjy399UaYBj+VVtM2qrA/gSp1Ss=)
                          2: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: 9dmQfBAielp4ew32tE2mp4MG8HoINTJIoy9P5GLdXhQ=)
                          3: ODeZnWNl5WX6QJG7docdS6N0Lh0.roa (hash: /UPoSxqJgEbJd9A+t+po1hpjOf0Zwwvb5Sbep9uGpqM=)
                          4: sWPuB2_JaQ5IbfWV6TRjwzAEtmo.roa (hash: 2MwXerlOGNKciqFr23+HmocPZA4iLoGvibtwd5TaAxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:8c:c2:07:04:22:86:fa:c9:1f:f2:56:ee:7f:02:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
        Validity
            Not Before: Apr 27 14:00:35 2025 GMT
            Not After : Apr 28 14:00:35 2025 GMT
        Subject: CN=c2ea5a630787d5357e1f27fb49e67e33b0bade0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1d:82:71:bd:e7:e4:f6:c4:64:cd:f8:a2:86:
                    bb:93:2a:68:ff:2e:e3:81:d0:99:09:50:7c:2c:c4:
                    ae:16:4d:30:40:f6:a5:16:2a:aa:e2:21:fd:16:96:
                    20:6c:58:2a:17:12:2a:bb:a1:da:2c:c0:81:de:a6:
                    8e:21:d1:eb:e8:28:f9:2f:f8:63:91:a9:01:04:2e:
                    13:12:e5:90:61:74:04:91:3a:96:dc:85:58:0c:9e:
                    5b:96:06:b7:bd:1e:30:61:cc:9a:c8:35:19:e7:91:
                    fe:af:2f:b1:fb:2b:54:1c:53:b6:17:9d:6f:f5:0a:
                    42:ee:13:f3:2b:cf:3c:71:48:5b:95:1c:b2:d4:cf:
                    dc:5f:73:14:4b:d6:84:59:99:e5:2d:c2:44:0e:b8:
                    f3:f7:04:ce:d6:00:ec:ae:93:d8:92:a5:17:61:0f:
                    60:ea:c7:68:60:9a:0d:1c:3b:ad:22:bb:07:88:c0:
                    75:52:4c:65:fb:6a:da:31:6f:2a:b2:60:59:3b:19:
                    53:40:34:05:8d:f0:7b:8f:0c:65:09:d9:3c:04:bc:
                    7b:de:35:b1:d9:d3:67:ca:f9:a6:cb:35:53:83:e2:
                    d1:f9:20:08:91:7a:03:38:a0:c7:73:f3:7b:24:c5:
                    e3:b2:c0:35:76:e6:06:38:6f:b8:30:5f:55:c2:68:
                    e5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EA:5A:63:07:87:D5:35:7E:1F:27:FB:49:E6:7E:33:B0:BA:DE:0C
            X509v3 Authority Key Identifier:
                keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:5b:c3:94:59:d3:1a:a4:58:8e:2e:09:a8:5d:b7:29:0d:00:
         2d:95:f3:7a:99:60:be:4f:13:7e:34:00:b4:da:6e:48:35:d4:
         8d:34:c7:ad:72:13:fa:6a:9c:b3:df:f3:fe:19:c5:5d:0a:d8:
         21:12:18:08:27:69:87:95:70:55:c0:8a:d2:d8:b9:5f:5a:5a:
         69:67:a4:73:4e:c4:d8:4c:60:64:f7:d8:86:c4:c8:61:e0:3f:
         5a:4c:17:1d:6d:3e:60:1e:3a:75:89:a5:e8:12:ca:3c:b1:4c:
         b9:0b:fb:f7:c3:48:27:0b:8b:97:aa:66:bb:84:21:03:bb:2b:
         5f:8d:b9:f4:ad:0e:e0:bf:01:29:9f:87:b6:4f:9e:7f:4b:5c:
         a0:5d:60:b7:b1:5e:90:28:05:a3:fc:ff:03:c5:19:a9:ab:bf:
         97:ad:99:a1:b4:84:43:1b:be:05:e7:77:41:cd:60:82:e3:28:
         72:07:4e:a2:5e:96:59:f5:59:c9:aa:01:d1:92:ab:67:d2:07:
         ad:4d:d9:d6:a3:6c:42:52:2e:12:e6:e8:26:9e:b5:bb:60:92:
         8f:1f:fb:64:f4:d3:dc:d8:16:02:4c:58:09:1b:b0:6c:b7:ac:
         d1:f0:e5:59:25:1b:d6:86:00:c4:d7:2d:ab:15:60:fe:5a:09:
         07:91:4f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:22:25 2025 by rpki-client