Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
File:                     muOJscw5niFvztjTnsPuifwguDk.mft (raw, json)
Hash identifier:          QFGWZV8iWD9rHRx4f73gXUBWEYuXn6xCWsx0wxINZvQ=
Subject key identifier:   A7:15:76:0D:16:5D:83:DA:71:42:1D:7C:44:9B:F1:E2:28:DD:4E:23
Authority key identifier: 9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
Certificate issuer:       /CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Certificate serial:       01968F950BB071CFE1C6780938C8BAB64D6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
Manifest number:          151E
Signing time:             Fri 02 May 2025 06:00:31 +0000
Manifest this update:     Fri 02 May 2025 06:00:31 +0000
Manifest next update:     Sat 03 May 2025 06:00:31 +0000
Files and hashes:         1: Q5quNHtUe1gA-TqHlWvHzX8gMwA.roa (hash: OcDB3dr6mB13HmStrHlq8aYMZtKWBgjyeIYXKmgVBnM=)
                          2: muOJscw5niFvztjTnsPuifwguDk.crl (hash: fBMjA2eOeoQPbuDe59ZO4BHrLrCZFkn+EShhIC2ypII=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 06:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8f:95:0b:b0:71:cf:e1:c6:78:09:38:c8:ba:b6:4d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
        Validity
            Not Before: May  2 06:00:31 2025 GMT
            Not After : May  3 06:00:31 2025 GMT
        Subject: CN=a715760d165d83da71421d7c449bf1e228dd4e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:1e:fa:26:6f:34:93:26:d8:2e:c5:bd:7d:
                    78:5b:2f:38:79:60:7a:61:93:30:be:99:cc:3b:49:
                    16:d6:96:1c:74:cd:dd:b0:41:ec:60:d4:78:29:56:
                    a1:18:52:1f:92:40:4c:f6:a3:1b:d1:59:e3:86:2f:
                    ef:71:14:78:54:25:43:a0:cb:75:87:c6:51:71:a3:
                    c3:3c:1d:d4:71:39:7c:0a:25:89:99:f3:3c:58:ce:
                    31:18:01:50:0c:f9:ce:35:dd:94:17:f4:7a:d2:8c:
                    c6:f9:a1:c9:33:54:40:54:1b:19:25:ae:f4:fd:77:
                    24:8b:a8:9f:f3:17:cd:bd:3a:ee:ab:bb:b1:32:3e:
                    34:3b:3e:96:5b:71:9f:a9:42:93:a0:6c:b1:5b:68:
                    b7:a3:76:90:fd:0d:7a:04:a0:69:f8:d7:ec:6d:cf:
                    9f:f4:73:72:21:4e:1c:e6:78:9f:ee:59:31:bd:f9:
                    d9:79:ae:4e:b5:5f:da:c3:70:25:09:cd:b5:ed:1b:
                    84:c3:91:46:8a:60:07:46:e5:05:f7:83:a1:57:8a:
                    8b:f9:03:89:3b:15:76:94:74:10:5e:f4:b3:91:00:
                    fa:fa:f9:84:a4:ce:ba:46:b6:4b:db:29:c5:cb:23:
                    1f:c4:ff:7d:96:ff:32:17:e3:86:57:3a:6d:c7:89:
                    df:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:15:76:0D:16:5D:83:DA:71:42:1D:7C:44:9B:F1:E2:28:DD:4E:23
            X509v3 Authority Key Identifier:
                keyid:9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:14:8f:1a:3c:99:fd:5e:56:97:06:56:f1:38:81:2f:72:dc:
         2d:98:35:0c:ec:13:af:92:f2:39:ac:58:69:17:40:50:77:f6:
         02:60:56:b9:3a:5d:79:13:49:ed:e7:97:75:c5:45:6e:9f:fa:
         3b:7a:61:e5:9c:af:3c:b5:56:64:9b:4a:2f:d9:8e:8a:38:26:
         13:8e:5d:16:ed:14:de:61:f6:75:06:7b:23:6b:0b:42:75:22:
         0d:ce:f1:9d:91:eb:b0:46:4b:70:e9:59:d2:2b:e5:15:b7:80:
         5a:e5:a1:65:0e:e5:c8:0c:4a:c4:32:c7:ec:a4:d8:81:d5:e1:
         22:3a:53:f6:61:4d:65:43:7d:78:42:c1:2b:03:28:10:1d:38:
         15:14:89:ad:1b:3e:a7:57:54:9a:b3:52:79:01:d8:56:5e:eb:
         e6:74:f1:4d:90:f7:de:c4:76:60:f3:c3:81:43:50:ee:34:c0:
         61:65:b0:f3:31:4e:51:11:2c:b3:db:d7:e2:15:46:24:44:d8:
         fa:29:ac:16:f4:bb:c5:65:01:28:e5:42:42:e5:d8:08:a9:96:
         2b:a3:ae:65:7f:c5:06:4d:f5:9f:49:b5:0b:26:d3:4f:6f:27:
         ee:13:ea:2b:ca:40:95:6c:5a:58:6f:ad:fa:3a:e6:fc:79:92:
         42:05:2f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:14:28 2025 by rpki-client