Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
File:                     9LdppT3YY1LTRA8iK9-QfPCcLbo.mft (raw, json)
Hash identifier:          HacvYBMPmf/2MyJJeJrjnyc4TCvQJ6msdSwzzCg5w38=
Subject key identifier:   CE:64:3F:85:03:1F:3C:BA:04:FD:CE:74:88:42:19:D2:71:21:8A:B1
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Certificate issuer:       /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial:       01967C7C54756558669A9324C86068967C57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
Manifest number:          152B
Signing time:             Mon 28 Apr 2025 13:00:44 +0000
Manifest this update:     Mon 28 Apr 2025 13:00:44 +0000
Manifest next update:     Tue 29 Apr 2025 13:00:44 +0000
Files and hashes:         1: 07X0hen1-KbW9Uhkt7xjA-PCLGU.roa (hash: 8+QD86bIku1q5HIr9iB6Xu8OCMzU+b8rQ15QGWkM/rs=)
                          2: 9LdppT3YY1LTRA8iK9-QfPCcLbo.crl (hash: CF5ioHsbDghWYJZ9OaqY7XyohYxoDMHUxtONhO523VE=)
                          3: Ue3VZrB8a4EG4I_RXK87Uw3OtZs.roa (hash: UZno3qoAs6BNi7dyZDbKw3CxcQ+pse82BKcQlZP0pfM=)
                          4: XljC5T-tfn8kyp8IckkuxduArlE.roa (hash: GpetnE8RGdPeAs90fgd9VHf6P54N2jU+6iw/T8HuxAQ=)
                          5: jaE6BaYqv4cnylnB2zxQbZMqMS0.roa (hash: t2WgnnlqK7T5mfm7rPUugS3H7ujqQaRofZxqW6taksU=)
                          6: urbklb_tMgWulJwput0Uvsn9CsE.roa (hash: WllQD7vTFpOMjfn+nif/0eXgJY9cIhU7nttx45/fv5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7c:7c:54:75:65:58:66:9a:93:24:c8:60:68:96:7c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
        Validity
            Not Before: Apr 28 13:00:44 2025 GMT
            Not After : Apr 29 13:00:44 2025 GMT
        Subject: CN=ce643f85031f3cba04fdce74884219d271218ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:93:8e:76:22:f9:2f:97:95:7d:b4:5f:7c:
                    97:28:5d:e9:72:0e:e7:fa:10:14:af:02:3b:cf:92:
                    e0:46:9f:ec:d8:18:41:80:82:bb:ed:09:27:b9:29:
                    71:6b:1a:01:53:88:4a:a1:5e:e4:f5:fa:2f:ec:b1:
                    85:57:64:15:97:88:46:15:4b:29:a2:e7:35:7e:2e:
                    e9:cb:e6:52:e6:b3:13:7a:05:09:ea:4a:12:1e:34:
                    df:74:ff:f5:2e:9b:9b:4b:b6:0f:95:76:7c:c5:d8:
                    e8:e4:af:41:27:51:01:cf:d1:d5:16:8b:40:2e:c0:
                    b3:aa:d9:eb:70:dd:ed:50:dc:dd:79:66:01:71:7a:
                    4a:b3:cc:7b:d5:4b:85:a2:59:81:a0:09:46:8f:1b:
                    9a:5b:9e:cc:ba:49:36:9b:5c:18:11:2e:af:93:50:
                    87:c0:3e:b0:4a:97:d6:78:ca:3f:07:7f:38:44:37:
                    a3:a0:15:42:27:33:75:ef:73:a7:fc:45:52:d6:6a:
                    e1:95:07:14:45:44:67:ee:e1:27:d9:59:e6:78:c4:
                    3b:6f:62:9f:b2:c0:cd:1d:5e:ab:07:e4:75:1c:69:
                    93:ab:f1:f3:4a:9b:d0:75:6d:36:10:97:1e:a0:61:
                    f6:ac:89:62:9e:98:3c:31:49:98:72:9b:42:6c:52:
                    4e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:64:3F:85:03:1F:3C:BA:04:FD:CE:74:88:42:19:D2:71:21:8A:B1
            X509v3 Authority Key Identifier:
                keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:36:52:65:fe:cd:90:d1:f1:8d:db:73:71:86:ed:de:1c:05:
         4c:00:0b:0a:be:ae:03:a5:ce:bd:97:e3:b8:b6:7e:4c:dc:1d:
         64:65:9a:1e:c5:d0:cd:a8:83:d7:20:a2:3f:ae:0b:c2:bf:cb:
         10:e8:59:5b:88:cc:f3:42:6a:87:be:2b:86:05:56:a2:33:51:
         8a:5e:18:45:e7:5d:78:44:40:45:5d:ef:e7:3f:32:b8:97:bd:
         46:3b:68:2e:ae:70:c6:f7:42:3b:f7:42:4d:0b:84:57:7c:8d:
         a8:d9:fc:3e:5c:a8:ef:5e:f6:ad:f1:84:9d:d2:48:6f:09:ff:
         54:70:86:27:2f:2f:3d:69:5c:15:e1:bc:1d:90:37:28:b6:4b:
         96:8a:a3:2c:b3:df:07:5a:36:90:23:4a:a7:1c:38:ed:f0:a6:
         22:64:1a:5b:39:f1:30:36:ed:d1:7c:40:dd:61:ec:d8:47:f6:
         4b:2f:c7:f1:1b:fc:88:35:d3:59:8b:84:aa:d6:66:d2:12:39:
         bf:01:bd:81:ac:fd:37:8a:78:70:52:cb:5a:9c:0e:f3:85:b4:
         c6:1b:73:04:3f:00:49:75:c9:18:9d:da:9e:f2:b8:82:d4:ce:
         d9:df:cf:8c:12:66:1e:24:81:1d:b4:15:ee:17:42:85:1e:0e:
         51:c6:a0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:53:08 2025 by rpki-client