Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
File:                     NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft (raw, json)
Hash identifier:          y2VYFZS1zslfddPhO19HwWuuRwUrBiDc9B3Zffio7/E=
Subject key identifier:   A2:AC:5F:DE:F2:84:A0:52:D6:FA:37:EF:7E:3B:61:76:27:03:F4:A3
Authority key identifier: 35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
Certificate issuer:       /CN=355608d078d6f31cf79be78736bf884606a17da4
Certificate serial:       01968F28033B4C1ABA0ABF020F871EA28DB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
Manifest number:          151C
Signing time:             Fri 02 May 2025 04:01:26 +0000
Manifest this update:     Fri 02 May 2025 04:01:26 +0000
Manifest next update:     Sat 03 May 2025 04:01:26 +0000
Files and hashes:         1: Ld3jzrrXXzWXVkMUgI6UD9IWYJw.roa (hash: +iXd1M4+bcqd1pD4b5qHzxAyt89KMtB2DGWb5orKRYY=)
                          2: NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl (hash: HRPbgJEb9w72wgM3wY0ljlgkVSoluy/Se79ot09MapY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 04:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8f:28:03:3b:4c:1a:ba:0a:bf:02:0f:87:1e:a2:8d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355608d078d6f31cf79be78736bf884606a17da4
        Validity
            Not Before: May  2 04:01:26 2025 GMT
            Not After : May  3 04:01:26 2025 GMT
        Subject: CN=a2ac5fdef284a052d6fa37ef7e3b61762703f4a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e5:58:11:55:71:ed:10:0a:fa:8c:08:7d:b0:
                    9a:15:e5:4b:d7:2b:b3:a3:42:fe:d9:6f:dc:3a:27:
                    7c:f4:3a:9b:06:4a:11:26:5e:f0:06:83:c7:7a:24:
                    ad:32:52:ca:f9:f2:1c:56:6c:1e:e7:b8:e8:03:96:
                    85:54:73:c1:ea:04:07:53:17:37:55:fa:96:4e:49:
                    37:f5:c5:71:dc:89:0c:81:26:17:95:cf:fc:33:bc:
                    cb:a7:92:15:21:a2:68:33:ed:69:fa:1e:c4:29:ef:
                    21:a6:08:81:bd:2c:37:a6:50:67:b8:54:50:ad:8c:
                    8f:1d:71:09:8b:e0:7f:fc:d1:8b:4c:99:5a:10:b9:
                    60:21:a0:25:8f:68:8d:eb:81:78:2f:d3:d7:65:db:
                    d3:33:fc:88:9e:3d:8e:f5:cd:d5:21:95:17:18:2e:
                    62:1b:ec:9b:07:b5:1a:00:35:6e:b0:a7:b8:03:83:
                    b0:fe:24:31:8e:1b:75:d6:e0:a0:0a:f5:72:8b:0a:
                    71:44:df:1f:d8:c4:59:7c:b4:7a:53:15:a8:a7:5b:
                    e0:ce:c7:5b:7a:6b:68:fa:b0:1f:f3:e7:5f:f3:62:
                    af:24:9a:e0:2b:9b:05:b9:14:0a:e1:2a:95:69:a7:
                    2f:c3:ee:2e:74:69:8b:bb:84:28:61:1b:e0:83:30:
                    0e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AC:5F:DE:F2:84:A0:52:D6:FA:37:EF:7E:3B:61:76:27:03:F4:A3
            X509v3 Authority Key Identifier:
                keyid:35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f0:14:4f:07:e9:8a:1f:d0:69:a7:30:3c:55:74:c8:c7:dd:
         eb:31:9b:68:d9:c5:b4:38:8f:5d:03:c4:9f:8e:87:68:de:40:
         5a:f3:ee:0b:2a:8e:0b:d3:1f:b9:91:6b:bf:b5:be:dd:11:03:
         e5:d1:28:2f:2d:e9:fa:c4:ca:51:07:2c:2d:02:e2:5d:61:df:
         f0:c8:8a:8e:18:7d:7e:51:af:d7:0a:c7:a8:75:a0:b9:7a:a3:
         cf:11:30:fd:60:ee:65:3d:f1:97:e9:7e:6b:dc:29:e0:7d:12:
         81:fd:85:9a:5c:b0:2f:9a:08:34:a7:a6:f6:5c:92:4b:9c:57:
         48:23:53:2d:f1:71:0f:ea:e9:ae:f3:bf:b4:d9:76:b7:72:70:
         f1:7f:52:a1:01:ab:90:cf:c2:5e:d4:79:3e:40:12:14:50:7b:
         1d:7c:46:af:89:87:d9:a3:89:be:c3:11:01:b7:06:0c:d0:d3:
         76:b6:1c:ee:19:e6:8a:06:ad:30:6d:05:1f:dc:ed:cc:e5:fd:
         f2:09:d8:eb:90:92:73:69:8e:bf:29:9e:c0:7e:8b:b5:5b:cd:
         4b:cc:f7:f9:78:53:5a:99:a2:d5:5e:06:b0:3b:2f:8c:e5:d6:
         79:2c:c1:b7:e6:eb:25:ff:ac:87:35:a1:96:0c:31:c4:a4:c1:
         52:07:ac:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:31:52 2025 by rpki-client