Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
File:                     pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft (raw, json)
Hash identifier:          Yk+VACApMLdqlUMQAaJOAof0D3DdDiLXNHGTGavjcHA=
Subject key identifier:   8B:8D:2A:10:CF:D4:36:CF:81:90:E3:0F:23:AA:86:45:D2:BF:B0:89
Authority key identifier: A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
Certificate issuer:       /CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Certificate serial:       01967567958B9F6B424EF900B449DB74E771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
Manifest number:          1511
Signing time:             Sun 27 Apr 2025 04:00:44 +0000
Manifest this update:     Sun 27 Apr 2025 04:00:44 +0000
Manifest next update:     Mon 28 Apr 2025 04:00:44 +0000
Files and hashes:         1: C68Jy4vS9ZhrosrQ0hLHm1uIuZY.roa (hash: KriDQtKp0/6qr4HNTZ8vH7ju161mMdjIkNUJn2wDbds=)
                          2: TTYqeImd9Bx1jE17xCXwGjIy_ds.roa (hash: zl9hhkn8MVjXkdNWr2SWdYWZOS+aR6DMyQIaYbl32sI=)
                          3: aLyfJT6We20ULVg1UbujnE5UVaI.roa (hash: XttwXUAYz6CHALtumX6fckhDuT6Y4LNJR+NAILB010U=)
                          4: lixJMjo5-_bNmfYtadlmrrGpsCg.roa (hash: OW5E61Tvo1LN0X4Q2KSxHXhfLjcuHjhFHfnXTwr/DjA=)
                          5: pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl (hash: ymr1pivvvpxaAI9XmE8VM4EIm2VFqE9zM6yYxVyUabE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 04:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:67:95:8b:9f:6b:42:4e:f9:00:b4:49:db:74:e7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
        Validity
            Not Before: Apr 27 04:00:44 2025 GMT
            Not After : Apr 28 04:00:44 2025 GMT
        Subject: CN=8b8d2a10cfd436cf8190e30f23aa8645d2bfb089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:63:2f:c7:c3:a8:27:5f:58:c3:99:ae:b8:e4:
                    0f:0d:01:61:81:db:0f:16:92:f5:06:f3:70:be:36:
                    78:65:b4:5e:dd:5b:5e:97:1d:4b:77:9c:69:35:6a:
                    c3:e2:b6:3c:47:3a:14:05:3b:8b:fd:bc:20:1e:38:
                    05:26:6b:6f:2f:e3:35:34:97:44:b3:7f:42:bf:96:
                    ea:d3:0b:60:cc:e7:b1:a6:68:6e:06:95:f9:3d:f3:
                    fa:9d:75:21:9d:b2:89:d1:d1:d0:a6:a7:d7:21:fc:
                    a7:73:8d:c5:a8:1a:15:64:36:c6:49:e4:60:d9:38:
                    18:49:d1:39:bb:8e:0e:c8:83:75:0c:52:c2:36:58:
                    1f:94:67:5c:66:d2:0c:be:ae:b0:0a:aa:21:a5:ae:
                    bd:45:ee:63:bc:e0:7c:24:53:78:79:65:32:03:46:
                    6f:c0:64:d1:72:05:45:d4:fa:44:b5:fb:c4:e2:16:
                    be:aa:0e:a9:42:16:a8:2f:a8:7d:01:35:7e:3c:82:
                    66:82:6d:db:fc:fc:14:d1:7c:dc:1f:5f:6f:d3:8b:
                    d1:6a:75:f0:0a:67:21:b9:fa:fb:94:92:0b:a1:c5:
                    0b:ef:75:25:71:a7:74:7e:7e:01:99:2d:3e:59:4a:
                    26:26:30:2c:31:a1:90:29:e3:7a:c5:8d:d4:e1:d7:
                    31:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8D:2A:10:CF:D4:36:CF:81:90:E3:0F:23:AA:86:45:D2:BF:B0:89
            X509v3 Authority Key Identifier:
                keyid:A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:69:48:30:0a:6f:68:40:c6:53:ab:5b:b8:5b:3b:83:56:6c:
         8f:2f:da:17:90:64:04:1f:50:1b:f1:49:90:84:dd:d1:97:53:
         80:45:32:b1:74:bc:0c:37:26:45:50:e2:71:6d:1d:72:0f:94:
         aa:9a:66:f4:1f:8c:b7:da:d9:ca:9a:37:a0:1d:1e:e5:de:ed:
         02:fe:ed:d4:7b:4c:e9:ba:4d:d9:cc:37:e7:39:78:b8:f7:6e:
         d8:e0:d3:b4:55:89:61:05:00:c6:e4:fb:08:2d:ff:e0:56:41:
         ec:de:b3:d5:90:67:13:f6:6e:98:65:73:bb:44:45:2c:1b:23:
         e9:ed:f7:d4:82:98:ce:67:08:b7:31:08:e5:04:80:5c:e9:e5:
         c5:cb:8c:38:0d:ac:c5:71:6c:59:fd:1b:91:31:26:66:2e:46:
         af:07:33:0f:56:03:22:14:17:71:5d:75:0e:0b:cf:a0:3e:55:
         25:fc:c3:49:3a:13:fc:6c:e4:61:86:a5:85:2f:9f:8b:32:19:
         43:15:f1:da:98:f1:22:e8:f1:fc:33:fc:c1:70:a5:f7:67:0d:
         cb:b2:ce:17:ce:09:2a:43:22:7b:05:04:a6:ec:fa:63:5e:8a:
         2d:ea:4b:49:02:1f:79:9a:4a:17:b0:cf:1b:7d:61:4c:35:b2:
         fa:14:36:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:16:47 2025 by rpki-client