Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
File:                     aCyELfoqHnFHJ7zLlfFlNHED8nc.mft (raw, json)
Hash identifier:          PFHVcuqqwJlhUulyxCz/WdA8VYnmcueptpoM9fFlkOE=
Subject key identifier:   CC:B5:4D:5D:45:B8:13:A8:35:0F:0A:B7:26:9D:C2:81:B6:52:31:BC
Authority key identifier: 68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
Certificate issuer:       /CN=682c842dfa2a1e714727bccb95f165347103f277
Certificate serial:       01967C45555EDB5E271CA14DAF74B1457E4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
Manifest number:          1515
Signing time:             Mon 28 Apr 2025 12:00:40 +0000
Manifest this update:     Mon 28 Apr 2025 12:00:40 +0000
Manifest next update:     Tue 29 Apr 2025 12:00:40 +0000
Files and hashes:         1: Pe92asVi3-iv4Efk4aEpPnXE4Ok.roa (hash: Dai1lG17fGD9BnTUUlUvQILwXK5E8pX/ztfvO8UR/Sc=)
                          2: _coXkpBP9EA8NOBWm1zr-9LsuK8.roa (hash: U04zn62VPKw2jHNQcD8ymCzfkqU2og7wXVzNuONbEgo=)
                          3: aCyELfoqHnFHJ7zLlfFlNHED8nc.crl (hash: iJu5NMS7NpdRA1cE2k1ccp08xdlgAOeojwvenrFEU1A=)
                          4: ygPca0O99w3Q4m6yQX8TO0Whs5s.roa (hash: qvcmTDWYJNgYWiCmf5F1FBjGQvGT5OVUplX4UvYYEFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 12:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7c:45:55:5e:db:5e:27:1c:a1:4d:af:74:b1:45:7e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=682c842dfa2a1e714727bccb95f165347103f277
        Validity
            Not Before: Apr 28 12:00:40 2025 GMT
            Not After : Apr 29 12:00:40 2025 GMT
        Subject: CN=ccb54d5d45b813a8350f0ab7269dc281b65231bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ac:de:af:26:69:2b:18:66:2e:31:26:9d:e5:
                    ba:f5:08:b5:10:3a:0c:2e:72:06:d5:33:af:d8:cf:
                    d4:14:d8:50:19:97:1e:45:35:e6:8c:c8:7a:34:b6:
                    9b:95:0d:48:79:d7:91:36:32:84:29:a3:0e:9d:9a:
                    1b:b6:10:ad:34:0f:ba:75:03:a8:e5:56:c7:99:f7:
                    3e:8a:30:0e:7d:15:ac:2a:67:e6:19:b3:e5:c5:82:
                    7d:5e:a1:a9:c0:60:02:1b:f4:01:38:04:b6:b5:57:
                    63:dd:fe:c5:c9:80:f6:24:6a:32:9c:af:0d:06:11:
                    20:89:79:0c:a9:47:7d:0b:7d:ac:cd:4c:3b:02:8a:
                    aa:e8:67:72:3d:ba:fa:03:07:ef:38:e0:9c:0e:0b:
                    01:45:c7:90:41:f9:e5:e1:e7:81:9b:d6:e9:ac:bd:
                    aa:e6:f1:b8:7c:8e:1d:36:0e:c5:fa:17:20:f2:8d:
                    14:ae:98:db:1a:97:6f:56:40:74:45:e6:dc:b6:5a:
                    c1:ac:82:95:5e:7c:96:69:7c:1d:2f:34:aa:0b:1c:
                    1e:54:49:2b:6e:d4:81:84:44:d6:0f:0c:20:5f:b7:
                    2d:cb:3b:62:46:88:9e:a6:06:20:82:5b:1d:02:f4:
                    05:fb:a4:e3:01:86:d4:60:1b:4c:35:9d:82:e7:56:
                    5e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B5:4D:5D:45:B8:13:A8:35:0F:0A:B7:26:9D:C2:81:B6:52:31:BC
            X509v3 Authority Key Identifier:
                keyid:68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a0:d8:0d:65:1a:bb:89:7e:9f:d0:a9:b8:9f:46:de:6b:0b:
         4b:bb:7c:5c:8f:99:05:0f:03:9e:2b:81:c6:91:89:2e:36:55:
         ea:ea:9d:16:12:b0:d7:5a:d9:a8:e1:90:19:78:e5:a0:2e:af:
         c9:ca:28:45:b4:49:21:f1:e0:c7:52:54:13:22:a8:61:2f:f2:
         22:2c:17:11:db:89:bd:05:26:4c:4a:1b:84:c0:15:82:be:b4:
         fc:67:9f:64:c7:3e:cb:15:29:83:64:46:5c:e1:57:8b:98:11:
         7c:96:e4:7b:ca:ba:e8:41:78:e6:eb:12:a1:75:29:91:5a:52:
         08:ef:ae:85:07:04:e3:32:c0:a6:98:0c:ab:5b:bd:75:b5:c2:
         b6:c9:ad:30:6f:4d:bb:0e:a7:6b:02:ad:b9:5f:3d:67:92:ce:
         4e:8b:b6:a9:08:a7:a3:e0:e0:e6:b2:05:e7:ac:68:13:95:50:
         b8:b2:ae:cf:dd:0b:1b:f3:73:14:5e:f7:df:0d:43:83:59:7e:
         35:51:52:5b:68:8c:7e:78:d9:e0:1e:0d:17:63:29:65:9c:7d:
         17:70:3e:be:63:20:56:bf:55:39:ce:14:83:a5:87:0c:e3:35:
         60:ba:9a:bd:3f:3d:f4:12:8d:7f:88:7d:2f:01:96:23:c7:98:
         b7:7f:66:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:04:57 2025 by rpki-client