Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
File:                     sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json)
Hash identifier:          u49ZmVObx8Sufe4e2CZEUpn9XI5VuOt47qtiRxCeJbg=
Subject key identifier:   62:66:67:B0:E0:E2:4E:45:EF:E8:1D:F2:10:A8:67:76:39:A9:E5:FD
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Certificate issuer:       /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial:       019684DA88256F277794B67030D998624800
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
Manifest number:          1516
Signing time:             Wed 30 Apr 2025 04:00:36 +0000
Manifest this update:     Wed 30 Apr 2025 04:00:36 +0000
Manifest next update:     Thu 01 May 2025 04:00:36 +0000
Files and hashes:         1: AUWnKCughTUHbSmmjTVn8vVnF6E.roa (hash: m1cgzZ28NmXLcFryBxDw9CaAhbB6KXsR5pNMz3ZSd1A=)
                          2: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: JLC7PO7lL+uMXvoDczVeCoQI4INljKt51ilSt6lhijY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:da:88:25:6f:27:77:94:b6:70:30:d9:98:62:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
        Validity
            Not Before: Apr 30 04:00:36 2025 GMT
            Not After : May  1 04:00:36 2025 GMT
        Subject: CN=626667b0e0e24e45efe81df210a8677639a9e5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7b:55:ed:8d:bd:46:b2:a5:93:5e:fb:29:a3:
                    d7:24:ac:de:70:90:8d:3d:74:45:a2:70:76:d9:af:
                    07:e9:1b:89:1d:41:ba:5f:8c:d7:59:ca:4a:6c:86:
                    a6:d0:a4:36:96:c0:66:7b:d8:a8:08:91:4e:4f:c3:
                    fa:f6:65:71:e5:c3:83:5f:35:21:98:1f:07:26:31:
                    07:14:43:96:5c:3f:81:a8:4e:b4:ba:4d:c6:7e:5b:
                    cd:b7:b3:ea:80:9c:6c:3b:8e:e9:5e:a9:c5:ed:b4:
                    e1:10:ce:b4:e1:40:57:0d:a4:6a:f6:a5:58:af:0e:
                    db:e9:d8:8a:ae:f8:25:27:e6:37:c6:1e:2c:d3:bf:
                    29:51:18:c7:60:19:18:a7:ee:0e:26:26:a7:06:f1:
                    99:be:67:96:1b:f2:83:ee:87:ee:60:ae:6a:df:c5:
                    c6:a6:01:3a:37:4e:29:e7:7c:43:60:10:e5:ac:c2:
                    c2:5b:15:12:6a:91:aa:16:db:05:6d:48:55:79:34:
                    25:b2:2e:5f:fb:05:bc:2b:a4:8e:b3:08:55:ef:c8:
                    90:5d:cf:d3:c1:c9:4d:fd:87:0f:3e:87:ff:b1:d6:
                    d1:8a:ec:a5:73:c5:3a:24:c6:f0:89:1d:c7:95:46:
                    74:77:e8:85:18:e1:82:69:be:67:ed:b1:7e:8d:3a:
                    0c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:66:67:B0:E0:E2:4E:45:EF:E8:1D:F2:10:A8:67:76:39:A9:E5:FD
            X509v3 Authority Key Identifier:
                keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:49:84:d9:7c:66:6b:d9:f9:95:da:04:46:9b:e6:d1:22:96:
         04:34:0a:9c:bb:5d:40:68:35:3b:1d:5d:ee:fe:f7:fd:88:97:
         79:d6:3c:4b:32:41:e8:5a:b3:44:e4:86:46:f7:97:b7:51:f6:
         c9:9f:e2:f3:22:9a:d2:88:9c:b2:c9:c9:a3:53:38:f4:8f:f3:
         10:c9:37:a9:ce:67:49:42:79:ca:fc:cf:dc:16:67:0d:39:19:
         89:5c:35:8d:30:8f:6a:01:2d:48:80:95:22:10:c0:f4:32:7a:
         99:68:d5:f4:4c:e8:52:61:46:f7:70:2b:fe:46:ab:fa:f8:5d:
         dc:fc:2d:2e:81:4e:99:61:3a:55:9e:2e:50:ae:0c:bc:4a:6d:
         cd:33:c4:60:e2:c4:47:bb:03:02:d8:ea:b1:fd:40:f7:b9:ff:
         91:2b:60:87:52:50:7d:d2:ef:73:af:65:5a:9d:3e:01:23:ad:
         87:06:68:21:02:89:b7:8b:6c:bd:1c:08:c0:1d:d4:86:df:51:
         75:00:5b:3f:5b:05:bb:f3:eb:da:24:ca:53:69:0f:a4:63:8c:
         11:3d:43:93:be:f9:26:8a:c0:b6:c3:91:74:c3:43:03:11:44:
         47:9b:b0:3d:cf:a4:36:86:14:19:bf:86:02:eb:3b:91:99:e2:
         a2:74:98:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:11:30 2025 by rpki-client