Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File:                     nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier:          PPtYpLq9NUVMDWc3KltzxDl/uEMYTq+nEBHAmsI9mjM=
Subject key identifier:   75:46:73:A5:EF:83:5C:53:72:1C:6F:2A:64:EF:50:21:FE:D8:09:73
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer:       /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial:       019671536160A8B9AA893C6DEED99FE7E325
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number:          150F
Signing time:             Sat 26 Apr 2025 09:00:11 +0000
Manifest this update:     Sat 26 Apr 2025 09:00:11 +0000
Manifest next update:     Sun 27 Apr 2025 09:00:11 +0000
Files and hashes:         1: LAf6z2y7d_FvHWa2exDFEGsDUYk.roa (hash: yLu10ItcbqMAqor4DiKoo4ryX77evtxiM9mUG5P0yVc=)
                          2: kgdBEe32jL4o_RNVND7NTLfwJwI.roa (hash: PZIGs+YorN99DtOYFOROjFtihI/jC535mZ5OqGnLcRA=)
                          3: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: iLXYeGJazo0B/sWos1gK0w1p3SlumAFVPRlRngR63kk=)
                          4: qO2F63snosgQCd-tQ25OAd4civA.roa (hash: KELhV9b4nDo2k2LkjCvA0ufUmi/5QZ+HPUiWXl9d83Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 09:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:53:61:60:a8:b9:aa:89:3c:6d:ee:d9:9f:e7:e3:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
        Validity
            Not Before: Apr 26 09:00:11 2025 GMT
            Not After : Apr 27 09:00:11 2025 GMT
        Subject: CN=754673a5ef835c53721c6f2a64ef5021fed80973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7f:7c:c9:ce:88:60:7d:03:1f:ef:5d:b9:97:
                    dd:ce:e0:72:ed:d5:5b:39:35:1a:58:2e:7d:a8:c5:
                    a2:c4:0e:58:47:89:35:6f:ad:36:23:94:bf:26:21:
                    4d:3f:ed:f6:bd:4e:fb:4b:70:18:88:ce:00:5a:38:
                    0f:63:0c:78:0d:e4:d0:fc:e9:25:8c:61:ae:41:00:
                    de:86:cb:d6:2b:26:6b:85:38:58:40:67:7e:c0:74:
                    70:94:6b:fd:95:4c:69:0d:5b:16:1d:9d:04:97:e1:
                    9a:a1:1e:9f:bb:2f:5b:52:e1:6e:63:97:94:aa:18:
                    ca:92:a9:f2:8b:57:47:bd:74:44:ae:05:45:8a:19:
                    1d:52:3d:93:34:13:73:5e:40:bd:d5:7c:87:38:cd:
                    a1:1d:95:2d:ab:96:9a:a4:99:c0:c6:3b:1c:61:28:
                    25:6b:e6:6c:62:57:50:02:40:c9:09:4d:01:7a:c5:
                    14:4d:48:55:56:75:39:fc:26:10:18:a4:75:7a:97:
                    9f:32:de:61:dd:56:67:59:19:7d:ca:15:59:9f:da:
                    1d:4a:e9:91:40:de:1d:01:b7:a9:e1:46:b3:66:60:
                    6e:46:66:bf:23:22:95:ad:50:76:ba:5f:b8:e4:f0:
                    37:f6:8d:b1:6e:d2:4c:65:35:56:63:6b:9d:86:15:
                    c5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:46:73:A5:EF:83:5C:53:72:1C:6F:2A:64:EF:50:21:FE:D8:09:73
            X509v3 Authority Key Identifier:
                keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:25:f0:59:f5:ee:0d:52:47:e1:4c:05:7e:01:4d:0b:9f:a5:
         f4:cc:eb:65:2e:e6:3e:b2:2e:58:b7:63:03:78:bd:ce:07:70:
         08:63:90:e8:90:ff:5c:a1:ce:c6:de:dd:fb:88:88:11:c0:75:
         ac:ec:b5:e9:c1:58:93:14:5e:62:c2:9d:aa:6c:1c:58:b3:b3:
         45:f1:1f:db:95:b2:9a:91:e9:6e:3d:34:f9:b7:47:5b:e0:fd:
         49:cc:7a:e2:bf:4b:43:8b:62:2a:97:4a:14:6b:1a:9c:e6:8c:
         2d:35:10:9d:bc:9f:0e:d4:a7:b7:2d:7b:45:75:ff:86:64:a8:
         cf:2b:27:d4:1e:a4:76:27:02:1d:e6:87:27:2f:dd:93:07:c2:
         62:7b:fd:97:cf:bf:05:26:dc:51:65:26:8e:31:01:85:1b:be:
         49:de:10:00:ef:9b:49:a6:f2:f3:84:72:9c:f6:b5:a9:69:3b:
         bd:c9:3c:f5:b0:53:0d:0d:c5:fc:32:3a:7e:8b:9c:33:e6:b5:
         fb:ad:b2:3c:19:ca:c9:cd:ee:c2:7a:85:1d:7c:5f:bc:78:9e:
         b3:bf:47:4c:70:d4:4a:2a:c5:b6:2a:af:53:95:47:b7:37:b0:
         15:77:6f:2d:19:de:0a:c6:8f:ef:7f:e2:21:62:3f:46:17:66:
         4d:eb:04:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:00:17 2025 by rpki-client