Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
File:                     tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft (raw, json)
Hash identifier:          kyszbOi4OamzZBr8cMsB4lWhozjpAmuz1M1Ek6Fd8uQ=
Subject key identifier:   F3:E7:67:7F:E2:73:FC:94:78:AC:7C:56:5C:0F:14:12:EF:13:99:40
Authority key identifier: B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45
Certificate issuer:       /CN=b5b537918dd90251eb36538e7181ce933c7ef845
Certificate serial:       01967E335500F65EFBD2865F06AC2C549825
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
Manifest number:          1515
Signing time:             Mon 28 Apr 2025 21:00:15 +0000
Manifest this update:     Mon 28 Apr 2025 21:00:15 +0000
Manifest next update:     Tue 29 Apr 2025 21:00:15 +0000
Files and hashes:         1: tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl (hash: 19RruTdFYagyRe8pSmA625t9TL2Mnhse6LlXQZsTeuw=)
                          2: y75cXyuDLpcYexdmkwYwYU3Mg-w.roa (hash: x/UMSX0QI4HQrUWQqpp/rIJY0lp7ztidnsmz2QLBnXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:33:55:00:f6:5e:fb:d2:86:5f:06:ac:2c:54:98:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b537918dd90251eb36538e7181ce933c7ef845
        Validity
            Not Before: Apr 28 21:00:15 2025 GMT
            Not After : Apr 29 21:00:15 2025 GMT
        Subject: CN=f3e7677fe273fc9478ac7c565c0f1412ef139940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:02:b9:a2:bf:cb:04:df:cc:11:b0:77:ca:b5:
                    f6:ba:e8:2e:1a:e8:47:04:b0:59:24:63:a2:f0:df:
                    77:b1:9a:10:7e:aa:c8:83:fd:8e:4a:af:1a:00:a9:
                    d3:1b:95:02:14:eb:96:32:25:dd:73:a1:c5:53:a2:
                    04:08:00:9a:42:80:1c:b9:fc:4d:71:9d:70:10:dc:
                    30:6b:68:62:ce:c9:2b:ff:f4:a5:bb:47:19:bf:15:
                    de:83:26:26:92:8a:2d:09:d3:2d:39:fe:4b:7a:3f:
                    6f:28:55:26:0a:73:c5:a3:4a:25:0a:90:81:ed:d9:
                    79:45:a3:c8:ea:93:68:7e:98:da:c0:b2:91:06:2d:
                    55:d4:f9:10:e0:fa:8f:d8:9e:63:f1:99:a9:95:73:
                    5f:e5:d1:53:a9:b8:8f:f5:a8:3c:a1:82:61:74:91:
                    e4:fc:18:95:82:7c:f8:7c:3b:99:7e:42:1f:24:3d:
                    7e:45:c7:cc:ca:c3:07:41:90:af:76:2d:7c:f6:8d:
                    b5:e9:39:54:44:6e:be:93:2b:7b:f3:25:a5:2c:5e:
                    3e:bd:f5:a7:36:28:98:53:75:ac:27:87:52:77:93:
                    37:8e:e9:8b:0b:82:c3:39:33:9a:29:c8:81:c3:9d:
                    2f:22:3f:f4:8a:e3:71:5b:60:e0:5c:63:eb:f6:48:
                    53:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E7:67:7F:E2:73:FC:94:78:AC:7C:56:5C:0F:14:12:EF:13:99:40
            X509v3 Authority Key Identifier:
                keyid:B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:fa:9f:ff:21:21:c5:2a:05:c5:45:89:16:f7:5e:34:c1:12:
         2b:d1:dd:92:94:6b:a2:c0:52:de:18:59:77:55:79:97:22:1d:
         3e:b5:b8:57:b4:86:03:18:6b:d3:63:9c:d3:8e:04:8a:a7:14:
         37:eb:bb:d2:83:94:c9:fb:d5:9c:c3:4d:b4:95:dc:93:2b:6c:
         a0:70:61:5b:1f:0f:80:cd:8a:a2:17:5c:a4:ec:a2:63:a9:71:
         b5:d3:64:a9:a9:f5:2e:b9:63:cc:be:8e:1e:e2:cb:41:25:4b:
         71:68:8c:69:d3:33:a5:ff:27:39:c4:87:cf:f6:a1:69:51:e8:
         8e:47:6e:4f:b3:e7:d3:de:b5:75:4c:a2:0b:42:c9:9f:2b:0d:
         24:bd:2d:e7:13:52:44:54:44:bc:1d:52:4a:cb:f8:f6:ab:18:
         0c:1b:24:9f:5a:5d:a9:c4:9c:82:d9:a5:d4:f1:b3:26:d0:a7:
         73:91:12:05:0e:a4:78:01:17:a8:38:5c:47:15:9c:f7:ed:60:
         df:34:e4:25:38:6d:eb:8c:58:16:ed:a1:e8:2e:1b:dc:1f:33:
         e4:f8:c9:85:13:72:69:46:6e:fa:98:b4:4f:cb:b0:93:2c:b6:
         67:7a:16:04:b8:bc:d5:91:d1:b4:cd:1f:62:c7:2d:56:cc:93:
         90:c5:bd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:53:09 2025 by rpki-client