Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
File:                     cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft (raw, json)
Hash identifier:          VzdOVCBbsl9NVgUIiTiNso6BKGk/wPgTgXY6pGC83Co=
Subject key identifier:   29:D5:4A:44:93:DE:73:5A:74:2C:23:FA:08:92:D1:DF:43:6E:6A:7D
Authority key identifier: 72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C
Certificate issuer:       /CN=72e6826c8628489db041fe78c09ef28b5421e45c
Certificate serial:       019685ED7A4F2880A0DAF45FC6FBB5656255
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
Manifest number:          1516
Signing time:             Wed 30 Apr 2025 09:00:55 +0000
Manifest this update:     Wed 30 Apr 2025 09:00:55 +0000
Manifest next update:     Thu 01 May 2025 09:00:55 +0000
Files and hashes:         1: 7Zrn_XBWju-Og5hlhKowGwl2kf8.roa (hash: CHg97u7b8WBMpcTvfGndNn9XQr55QZ9IWb+Xsbuljto=)
                          2: cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl (hash: LcPUXIbhC9vp0fbKSsTRX7FJiPA5nfLFT1MBoSI8zn4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 09:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:ed:7a:4f:28:80:a0:da:f4:5f:c6:fb:b5:65:62:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e6826c8628489db041fe78c09ef28b5421e45c
        Validity
            Not Before: Apr 30 09:00:55 2025 GMT
            Not After : May  1 09:00:55 2025 GMT
        Subject: CN=29d54a4493de735a742c23fa0892d1df436e6a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3f:77:7a:a8:6a:ff:4d:f5:99:77:85:ac:9d:
                    12:76:e2:60:49:95:58:04:83:c3:89:78:45:45:c8:
                    f7:1f:16:9a:02:a7:6b:5d:68:11:96:c0:8d:12:87:
                    5f:3c:74:c9:fb:55:c0:2c:98:51:59:60:7e:d9:7f:
                    c4:d3:c1:b7:23:ab:60:a4:3b:aa:c4:ac:fd:34:10:
                    47:e4:ab:4c:51:a5:2e:4e:8c:db:07:cd:72:ee:a4:
                    3b:76:7a:14:dd:5b:0f:8f:48:1c:e5:44:45:1e:82:
                    3e:be:be:2a:48:d8:45:4a:5a:61:da:a0:27:94:7f:
                    e1:ad:2b:e8:ec:7c:df:af:8e:ac:35:32:84:5a:c5:
                    23:f8:22:2b:6c:96:f9:14:f5:15:ae:7e:e4:18:c3:
                    bc:ce:60:90:e2:bd:3a:8b:3b:ca:94:af:9e:8c:bb:
                    02:30:e9:7a:ba:b9:7f:6d:2f:c4:33:f7:ca:d9:95:
                    10:1b:2b:46:b6:91:32:a7:d8:c7:07:b1:0a:79:5f:
                    a7:11:8d:b7:55:bf:da:75:21:21:cc:b6:b0:ce:97:
                    05:99:93:92:14:12:a2:e1:32:e3:a9:38:73:3e:cb:
                    92:66:df:39:cf:3f:17:a0:ff:8c:64:be:42:f9:86:
                    39:4d:6c:96:80:44:ed:4a:0e:94:3f:8f:10:76:19:
                    a7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D5:4A:44:93:DE:73:5A:74:2C:23:FA:08:92:D1:DF:43:6E:6A:7D
            X509v3 Authority Key Identifier:
                keyid:72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:36:a4:7a:10:52:88:50:af:db:38:ac:cd:e6:37:56:37:6b:
         b8:3d:24:5e:dc:cd:a4:60:e1:97:b1:46:a5:12:67:19:dd:5f:
         9d:e2:e1:88:d8:c6:45:ff:00:df:33:e0:45:3c:ab:a2:d7:c7:
         b4:35:0b:e9:d4:1f:c6:e7:25:c1:11:5b:a7:42:7e:c7:08:70:
         84:4a:88:9f:c5:54:a1:cb:8a:26:3a:3a:72:81:b5:4e:0b:a7:
         39:b2:41:14:90:e5:f8:f8:5d:65:3d:3f:5d:5b:ee:0f:62:f6:
         a3:95:f1:9f:2d:ee:13:64:21:0f:b3:96:e4:ae:fc:5a:1a:d9:
         20:a6:3a:f4:29:35:4b:61:b1:62:4f:78:81:86:69:18:91:75:
         46:63:45:4b:a9:71:cf:bf:32:37:fe:0d:44:76:f8:ec:7a:9d:
         58:0a:42:ed:48:16:d2:ca:f0:5b:da:d9:a7:ce:50:c7:4b:7d:
         0a:4a:4e:f4:62:08:18:0d:23:bd:cf:b4:58:17:58:db:e2:00:
         9d:91:40:3c:92:bc:bd:87:eb:e2:4a:dd:4d:13:14:69:f6:7e:
         45:df:0d:bf:b1:26:fb:be:f7:ca:0f:d9:64:ea:cb:c8:69:35:
         58:5f:f8:7d:63:9b:d9:cb:d0:26:74:7c:8a:f6:03:96:e3:a6:
         59:be:dd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:33 2025 by rpki-client