Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft
File:                     Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft (raw, json)
Hash identifier:          H8YdsGMatto37WREHRVkmSd0AR6FgokqUMcG/uvhk8E=
Subject key identifier:   A3:9B:0A:EF:9A:53:FE:3E:C1:85:4C:66:18:B7:E1:1A:F5:2A:A6:0D
Authority key identifier: 16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
Certificate issuer:       /CN=16ea37a8e73e7679a933d70f7b9c872081024455
Certificate serial:       01968322E8F3700562494F42A45C63FB4574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft
Manifest number:          1520
Signing time:             Tue 29 Apr 2025 20:00:25 +0000
Manifest this update:     Tue 29 Apr 2025 20:00:25 +0000
Manifest next update:     Wed 30 Apr 2025 20:00:25 +0000
Files and hashes:         1: Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl (hash: Vuk/putsfIi4MoE1NLaoLSjtAs69gCXwKOwxAQiQa70=)
                          2: GkXcWKv2tiZbmRFso5KDAtIlFEs.roa (hash: qBk0djYI/QNSD8TA0vX6gS28tOn4bjIOUEqnaYwDuO8=)
                          3: MAzNFV2te9n7kjEaFpStK8vBowc.roa (hash: cw6Ks/U2S63sovwgOc3pI9cS6N4rqlfzqVdKZqK6qIU=)
                          4: jmKQUYSEuZIWnZkjgKqeurLJKlA.roa (hash: ubeUqXL5MrFy3GKLg6YblSSTGgynKbrvwUY5fbq4vzw=)
                          5: si63heC5AIvLLejmiH4SUxw44s0.roa (hash: A2b+++OovlxutbnaWL8WBqlzNLX6SyYHAUqNmWE0KKc=)
                          6: tzI-3RvxZseZ0auE1vTr_8vXlHs.roa (hash: CiZ/fhpSU1BnMxFu5Ur8z7I7FFKUZ6D5j7i0HG/zpqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:22:e8:f3:70:05:62:49:4f:42:a4:5c:63:fb:45:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16ea37a8e73e7679a933d70f7b9c872081024455
        Validity
            Not Before: Apr 29 20:00:25 2025 GMT
            Not After : Apr 30 20:00:25 2025 GMT
        Subject: CN=a39b0aef9a53fe3ec1854c6618b7e11af52aa60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:00:5e:75:e6:07:e3:85:49:cd:3d:c8:01:
                    03:57:75:e1:f0:24:db:1a:5c:6c:c7:d3:be:3d:5d:
                    4d:d7:b1:f9:77:5f:01:fc:3e:52:91:ef:94:5e:14:
                    8a:92:5d:7b:54:a8:bf:62:e4:7e:19:4b:69:f1:a3:
                    ee:b0:3c:3f:a9:39:fc:0a:db:4c:b6:93:e8:a8:8a:
                    5d:59:1f:77:99:e5:3f:70:55:82:63:46:2b:46:95:
                    c6:72:2b:53:bb:39:cb:e5:82:f0:a6:12:90:34:7c:
                    ec:9d:4b:58:bc:62:87:a7:cb:b3:71:95:62:22:03:
                    79:aa:82:3c:ec:a4:8a:d3:ff:fb:6e:0f:74:20:b9:
                    01:a0:a6:3e:a2:5e:f9:6e:ee:37:8f:81:58:0f:b7:
                    2a:fa:36:e7:a5:93:17:c9:33:e4:1f:02:50:c9:db:
                    2a:96:01:ed:35:39:a4:4f:d5:df:92:95:68:d7:fa:
                    b5:32:d7:6d:04:ec:5e:76:1c:e5:91:53:22:b7:aa:
                    cc:ea:2e:d7:a4:f6:3a:2a:83:a2:d2:66:7a:9c:02:
                    87:65:bd:82:bc:ee:76:ff:1e:b0:1c:9d:db:d7:c1:
                    a1:ed:b5:50:c7:cd:e3:e4:7e:97:f8:b8:05:d4:59:
                    15:12:f9:fd:0c:0f:f0:7b:1f:bd:5f:98:09:8c:f1:
                    19:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9B:0A:EF:9A:53:FE:3E:C1:85:4C:66:18:B7:E1:1A:F5:2A:A6:0D
            X509v3 Authority Key Identifier:
                keyid:16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:3c:fb:a6:66:a7:ae:0c:29:ba:8b:73:46:e0:22:8a:74:ec:
         26:a5:25:14:df:40:fa:aa:f5:fd:c1:d8:ec:99:cc:8e:6c:e9:
         30:2b:9f:7b:27:00:9b:d2:a5:94:62:e7:dd:1f:93:8f:f7:18:
         e7:3f:5e:df:7d:d7:b4:dd:a8:30:3f:0b:6b:34:39:0e:cd:7a:
         3a:f6:84:4c:af:c6:e8:1b:1a:be:d5:42:f2:5b:03:96:ed:8f:
         03:bc:a8:96:74:0b:72:bd:6c:af:d3:53:b1:e7:1f:6b:a2:24:
         61:ae:57:0b:49:59:e1:09:3e:a6:6b:df:3d:8b:20:2f:70:b6:
         f1:36:54:6f:47:8f:57:76:41:28:ac:d3:f4:e4:8a:c5:a9:6f:
         1d:e2:e7:d1:4b:62:7d:10:6e:3a:8d:60:b6:55:96:2a:57:8b:
         6b:cd:f5:e7:70:9e:86:54:50:f2:2d:d9:f6:16:43:01:59:f1:
         14:86:80:88:a5:78:c8:cb:bf:63:03:77:a6:95:89:85:9f:12:
         aa:e6:95:7a:13:12:3c:09:ef:61:29:e1:01:7d:2c:50:e1:94:
         be:56:14:e1:1f:a5:f7:fb:0d:95:43:39:59:e4:12:ef:ee:10:
         a0:de:80:27:1c:0d:53:de:60:fd:0c:8d:28:f7:c6:1f:02:97:
         cc:dc:5d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:14:15 2025 by rpki-client