Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
File:                     gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json)
Hash identifier:          g4YFPnwR1eqCsmqmfoMn6LgCu+PENrR8GvOGNJDXKqU=
Subject key identifier:   76:3F:21:46:14:8E:C2:C9:B0:D3:93:5E:32:DC:41:7A:8B:09:33:88
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Certificate issuer:       /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial:       01968623D6DB3BE3B9E555C77BD65F3DD3CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
Manifest number:          151B
Signing time:             Wed 30 Apr 2025 10:00:17 +0000
Manifest this update:     Wed 30 Apr 2025 10:00:17 +0000
Manifest next update:     Thu 01 May 2025 10:00:17 +0000
Files and hashes:         1: AlDLgq4a_thE-qXe6l8E_xWLXFc.roa (hash: 0ufopEuWXow9IQPbSAY5y6lUJPxjAppqenIRissIhOM=)
                          2: HbD_TR3_mqlACMnF4iTXIAuOjsg.roa (hash: T3tCAy3O2wLO9qO83uugLqRmkiFNSfdwlXWERB4+Mok=)
                          3: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: IKKNNTARXNuNPk5Y1WJ029dxDPaRDOQnqbELk5370Js=)
                          4: h5Pey3t7ILGJvHcV0wlWm8IDgRE.roa (hash: /bmLdcY/7qOd0oeU6NCbdR7DKpvTkMz1r7GZ1d675P4=)
                          5: nId42Q0uPKxNBDzBg-GOcY-a01Q.roa (hash: 43G2ltR87FjAzlwjOiHc7NglbtaxLWslqx/bREI6WQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:86:23:d6:db:3b:e3:b9:e5:55:c7:7b:d6:5f:3d:d3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
        Validity
            Not Before: Apr 30 10:00:17 2025 GMT
            Not After : May  1 10:00:17 2025 GMT
        Subject: CN=763f2146148ec2c9b0d3935e32dc417a8b093388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:29:1d:28:86:00:13:51:12:55:a5:d7:b1:
                    7b:9d:5e:8c:7d:24:17:0b:49:2c:3e:38:17:94:fc:
                    10:35:a1:3f:3f:bb:af:7f:57:ac:02:55:bf:aa:be:
                    43:6d:bd:0f:d4:fc:35:92:de:8b:bf:97:eb:f9:a1:
                    f4:d0:1b:fd:c3:7b:ca:ca:df:95:fc:72:2e:e8:dc:
                    64:23:e6:4e:59:5c:15:f7:08:29:47:80:d2:49:3b:
                    cf:a7:72:0b:86:ec:39:b9:55:24:1e:84:53:32:44:
                    f0:5f:2e:0c:1b:0d:25:02:85:6a:5d:24:f9:56:56:
                    13:1c:7f:2d:03:9f:82:17:3f:cf:84:79:0f:df:56:
                    c1:ef:84:11:19:11:76:75:76:35:82:5e:e9:da:db:
                    1c:00:6e:fd:22:df:aa:0a:9a:c1:8f:9f:ea:ca:8d:
                    39:55:bc:d7:6d:f5:bf:22:2d:96:9a:a2:8d:59:df:
                    66:62:b6:bb:64:30:7f:26:23:c2:54:c1:98:d2:c8:
                    3e:55:2b:54:fd:73:e6:da:fc:95:cc:4c:89:dd:df:
                    db:81:78:93:f2:41:b5:c1:62:d8:0b:8d:d0:21:fa:
                    ad:51:11:98:dd:bb:f5:42:b2:f4:66:fa:23:f5:6c:
                    57:87:74:5d:4a:f8:e2:1c:5d:d9:3f:b6:73:42:dc:
                    25:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3F:21:46:14:8E:C2:C9:B0:D3:93:5E:32:DC:41:7A:8B:09:33:88
            X509v3 Authority Key Identifier:
                keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:75:7a:a5:95:c0:97:a8:f6:d7:11:8f:c2:4f:04:c7:53:ce:
         d4:42:9a:4a:c3:1f:92:37:fc:43:47:5e:51:15:bf:0c:5d:2e:
         a4:69:6d:1d:b1:ad:26:b4:e7:26:e1:90:5e:0c:c1:36:d0:df:
         b4:da:ed:50:ee:50:47:22:35:24:10:4b:51:8e:ae:ea:93:51:
         fa:1d:fe:63:ce:d0:03:03:48:95:f7:8c:dc:36:a5:a2:4a:4b:
         de:88:c8:79:f2:18:bf:33:ca:7f:f4:78:ec:51:88:e9:83:0c:
         58:fc:9e:2f:27:2c:59:74:29:2a:2b:38:ce:9b:70:4b:0e:c2:
         e4:11:1e:4e:f0:ca:5c:bc:1d:e4:5a:4d:ac:41:b8:b0:87:f9:
         a2:52:56:af:bc:6f:c5:15:7a:37:e7:fe:9d:de:d4:b4:49:aa:
         3c:b9:20:fb:d0:c6:a6:e2:17:06:89:8e:17:60:2c:dc:b5:7d:
         7f:1d:54:57:b0:c5:3b:f5:8d:e3:53:00:cc:a7:8c:45:d1:19:
         d0:1c:0c:94:f7:b4:31:3c:23:ea:5a:32:bf:7f:76:f6:f0:ec:
         55:20:75:ec:0e:77:2a:28:8b:c3:e8:b7:04:47:d1:e2:d1:8c:
         b2:de:90:37:52:4e:a8:56:98:9b:d7:4c:68:6e:bc:e6:e4:d6:
         2b:f3:44:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:28:19 2025 by rpki-client