Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
File:                     A39TL6Ji9ca9lhW8151u3UPy4HU.mft (raw, json)
Hash identifier:          SGjXxeP7WbVH1HkUX3vshwwN5Ud5WnGOo/3gS0PB/C4=
Subject key identifier:   E8:08:7A:85:11:6C:E0:F4:EE:4C:6A:BE:2F:5E:84:7A:0C:EA:A5:93
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Certificate issuer:       /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial:       01967755A90A9A6DBDC1C01EBB9084E26F0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
Manifest number:          1510
Signing time:             Sun 27 Apr 2025 13:00:24 +0000
Manifest this update:     Sun 27 Apr 2025 13:00:24 +0000
Manifest next update:     Mon 28 Apr 2025 13:00:24 +0000
Files and hashes:         1: 3TsgJTCqJzOcEWU1D_eLkn9vlVQ.roa (hash: FocquAr/i2n2K968hOeO0r6QOp/B6G9WWrm69jbwUbg=)
                          2: A39TL6Ji9ca9lhW8151u3UPy4HU.crl (hash: KcI1EGVAnrZsUdGqTF96ZUSFTtZU/gHmcmwt+4kVioo=)
                          3: XfddXSazKRwlAti_xB3GX9aF4dA.roa (hash: 6Q++0e98qDqGZws++WyKl8Tb8aXZP/cVoTXv/5uSSrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 13:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:55:a9:0a:9a:6d:bd:c1:c0:1e:bb:90:84:e2:6f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
        Validity
            Not Before: Apr 27 13:00:24 2025 GMT
            Not After : Apr 28 13:00:24 2025 GMT
        Subject: CN=e8087a85116ce0f4ee4c6abe2f5e847a0ceaa593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:9b:b0:80:0d:6b:85:13:3f:88:d6:e2:ef:06:
                    53:f6:b0:e1:ed:06:39:07:80:a2:cb:18:0a:0d:d8:
                    eb:3a:e3:72:39:cf:bd:49:f6:ff:c0:d7:6f:68:9c:
                    13:3e:8c:b6:e3:78:79:25:84:ca:4e:1b:bc:4c:78:
                    57:6f:fa:37:86:17:1c:4e:ca:fc:15:4d:0b:7d:ec:
                    64:7b:44:63:b6:ab:91:25:67:5e:a0:30:66:42:fa:
                    48:4b:ab:26:60:a1:80:07:91:be:58:9c:78:58:ed:
                    b5:7e:fd:06:64:23:49:d9:f0:a5:0f:13:c6:0c:c9:
                    d5:ed:bc:cc:9a:5e:20:46:84:bf:cd:cd:dc:e1:da:
                    91:63:61:23:df:a6:8d:b4:e5:37:9b:8f:f9:5e:d2:
                    1d:37:68:1e:d3:ef:59:d5:b5:e1:73:d2:d1:91:3a:
                    3c:ca:fb:ea:70:1f:c2:31:82:26:6c:3b:71:7a:02:
                    06:c4:53:e2:64:46:f8:a1:64:a9:9a:71:43:0e:0f:
                    e6:6a:d3:a7:5d:8b:bd:03:93:bc:d4:a4:5e:ea:26:
                    75:6b:61:30:f2:d3:f0:e7:35:33:ef:0a:c6:c2:15:
                    55:1a:5d:52:de:dd:54:46:ee:c2:56:d6:b7:e0:9e:
                    04:40:66:cc:c1:6c:b4:32:48:c5:d5:c1:0f:50:f4:
                    36:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:08:7A:85:11:6C:E0:F4:EE:4C:6A:BE:2F:5E:84:7A:0C:EA:A5:93
            X509v3 Authority Key Identifier:
                keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:45:4b:6e:70:e3:75:2b:fd:55:00:1f:a4:1c:73:72:c6:c9:
         5e:69:0b:11:e5:7a:bc:c5:a5:f0:bc:f4:6c:19:05:97:b3:77:
         e1:a8:c0:4b:90:bb:1b:b3:71:9f:37:67:88:ee:eb:9a:3f:c9:
         d6:f7:79:0c:6a:c6:e3:d1:f7:b9:9d:38:61:a5:11:0d:b8:f2:
         66:e4:c4:e9:06:a9:2d:3d:31:34:b5:06:e2:5e:9b:df:c6:44:
         33:52:fc:05:f7:e8:29:82:3c:ff:ad:96:36:01:c4:c2:52:2d:
         d9:0c:8a:85:80:a3:49:e7:d9:b7:04:e0:97:11:53:dc:30:d4:
         7a:83:ef:91:cb:41:1d:4a:81:0a:4b:ea:dd:eb:97:45:0b:a4:
         69:ca:8b:d4:b3:ca:93:f3:a6:d7:cc:c0:c6:b0:dc:e4:2b:43:
         ec:86:e2:63:0f:13:cd:93:5c:9e:da:b8:f3:af:9f:2b:9b:b2:
         61:ee:02:92:c1:ab:75:06:6b:b9:b8:da:1d:dd:1d:12:9c:f6:
         77:e1:0e:b5:52:6a:d1:7a:73:fe:3d:16:ec:63:d2:7b:1f:6e:
         4b:8d:91:00:1c:d8:ec:74:06:1a:5c:a0:05:9e:db:80:ca:5c:
         41:42:d0:c3:35:48:14:2c:4a:93:99:c8:82:de:ca:5f:61:c8:
         21:93:45:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:52:13 2025 by rpki-client