Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
File:                     f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft (raw, json)
Hash identifier:          D4guDZmvDxTl0q6ZjnEHaOIa8hjrR5Q9aOr5fgYsbB0=
Subject key identifier:   CF:6D:80:72:38:43:EF:F0:9F:9C:3B:57:AC:09:ED:73:E2:06:0C:3A
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Certificate issuer:       /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial:       0196741E5EAFC765639A1933A8B73A6245B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
Manifest number:          1522
Signing time:             Sat 26 Apr 2025 22:01:09 +0000
Manifest this update:     Sat 26 Apr 2025 22:01:09 +0000
Manifest next update:     Sun 27 Apr 2025 22:01:09 +0000
Files and hashes:         1: GKu-p3Q8C03WVkqTxeqIm4KQHug.roa (hash: 5kTKiqqZ4O9hXOBIdFP3srftx/gxN3ZsqUi1asP5Tl4=)
                          2: eoD1wEJHLtPytux_2izY3N84WK0.roa (hash: JpmlQ8BeWdKkWA7+xPyhsWmh4I0l0qsO/IK1kw61GVo=)
                          3: f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl (hash: uJOCdwn2uwb7J3YNO0FODy+rQ8GphS7u2acAteBZALI=)
                          4: jCogikP25zW8XDbjaGJp-8DJciE.roa (hash: uxIaj61u2xybHKQFuc4fFPvOnzNBMkarPjLP7RV8T50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:1e:5e:af:c7:65:63:9a:19:33:a8:b7:3a:62:45:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
        Validity
            Not Before: Apr 26 22:01:09 2025 GMT
            Not After : Apr 27 22:01:09 2025 GMT
        Subject: CN=cf6d80723843eff09f9c3b57ac09ed73e2060c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:aa:86:f5:ac:5b:22:20:82:97:f7:42:c8:
                    ca:4a:6f:63:38:38:8c:d8:2a:ca:6e:29:40:4d:8b:
                    e5:83:48:f2:3d:05:e2:f6:61:85:8d:b9:ef:f4:8f:
                    c5:67:11:7e:11:6b:a7:81:72:dc:c5:91:f1:f2:fc:
                    0d:e1:2d:5f:18:2f:cb:1a:a6:95:64:54:29:b2:0f:
                    45:d4:84:28:d9:48:aa:ff:a7:b1:64:25:58:77:71:
                    24:04:33:0b:96:a6:8e:be:27:42:88:b2:02:19:00:
                    bd:04:36:92:7c:98:25:4c:b2:22:d4:11:cd:3f:22:
                    11:f2:ed:14:49:4d:1e:09:f4:7e:1f:26:c6:ad:5b:
                    5d:a1:3b:b6:7a:eb:f7:35:7f:6b:51:4e:54:cf:e4:
                    00:2c:0a:d9:f4:cc:9b:a6:d2:72:2e:23:d8:04:91:
                    95:d8:13:90:ce:11:32:97:73:44:4e:0f:59:17:8c:
                    1e:32:7d:b3:4f:97:f3:e2:78:56:fb:0a:e6:49:de:
                    45:33:88:d1:45:14:32:69:93:90:f2:32:6e:ad:84:
                    5d:6a:c7:9b:b9:2b:ac:82:82:34:37:7c:16:ec:d1:
                    55:e9:5d:d2:e3:6e:b8:71:67:01:da:36:0d:f9:81:
                    f5:1b:4d:18:cc:d4:2b:54:1e:46:d8:7c:b7:bc:73:
                    91:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6D:80:72:38:43:EF:F0:9F:9C:3B:57:AC:09:ED:73:E2:06:0C:3A
            X509v3 Authority Key Identifier:
                keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:86:07:39:30:c9:fe:2c:b7:61:05:1c:93:be:e5:06:7b:e6:
         ca:13:04:27:27:39:eb:95:5c:46:58:f1:ce:e1:95:11:52:c4:
         a7:b8:64:f1:0f:59:07:51:55:91:fd:d4:41:cc:9a:f9:7a:15:
         fb:dd:f2:90:1b:83:f4:3a:61:01:60:1d:f4:56:9d:f7:b8:f4:
         51:92:8c:d7:57:41:40:c0:d0:9d:75:34:e7:d9:8e:46:3d:15:
         24:76:17:21:ec:fc:92:d8:cf:8a:18:60:c1:55:2e:32:84:3f:
         78:03:fc:e5:34:e3:fb:6f:42:ed:13:ee:11:9d:31:05:4a:80:
         16:1d:e2:0a:fd:e0:bb:41:91:70:46:57:69:bc:30:bf:de:05:
         e4:cc:a9:df:80:12:f5:82:39:c4:b6:50:4d:77:4e:59:4b:50:
         22:81:ff:7a:8f:21:94:84:b7:9e:b8:1b:32:15:41:03:d2:4c:
         54:b9:4f:2f:1a:92:83:c8:24:f4:a9:b5:68:6e:d2:20:ac:42:
         24:a5:bd:da:10:12:fc:6d:84:c6:6f:63:06:a1:02:f1:8a:1f:
         8e:5e:dc:3d:f3:77:17:cf:60:16:2d:e3:ae:91:69:8f:1e:5a:
         b0:80:49:6b:47:85:89:13:02:82:72:62:3d:0c:6c:32:47:2e:
         aa:34:6b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:15:41 2025 by rpki-client