Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
File:                     9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft (raw, json)
Hash identifier:          wjGmSJTNqQQtFtPga+nJBVpIaZemn0NudvSGFU6KGy4=
Subject key identifier:   51:77:9B:1E:F0:8D:84:C4:32:49:02:24:32:11:C1:17:DD:C4:3C:61
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Certificate issuer:       /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial:       019676B12B6709E248FD36D54FBFF88DBAD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
Manifest number:          1515
Signing time:             Sun 27 Apr 2025 10:00:44 +0000
Manifest this update:     Sun 27 Apr 2025 10:00:44 +0000
Manifest next update:     Mon 28 Apr 2025 10:00:44 +0000
Files and hashes:         1: 0HKshb-mSBdiPT8rzC35f_ZU7UQ.roa (hash: hF9BYbX+aU6Xe7lbRtg8LFUuOtXHeJr7ExZ5hZljljc=)
                          2: 9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl (hash: xPn7gTe/L0Rr0WmQg5GYgax7jU96I8Ma+7wtWVwXtxo=)
                          3: IVrRWFI1ry1_t1jTghjesJBZcQ0.roa (hash: Gd14w4+1RfDgCwueX1ZHqk/dUawCUFDofpaoy6972KE=)
                          4: X1Og0Lm3K_LkI3EHNFSVJEed5mw.roa (hash: +EXRjqdqdJiElvru0d0HFKlKizfdsCCHpZGqFtTKPDw=)
                          5: fAbOIbHK5-PVtXMOGIO2S4Xc80s.roa (hash: A/R1dGee9i9ll3uzH2uvDgQFeaI46CgRuWCcx8V04Lc=)
                          6: pnlRPUhZWx-18cN9NyZhKYkt_80.roa (hash: 4GEIDeArajdM/SlgOWHtHJwQGutC5XfeEODamrmD5BE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:b1:2b:67:09:e2:48:fd:36:d5:4f:bf:f8:8d:ba:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
        Validity
            Not Before: Apr 27 10:00:44 2025 GMT
            Not After : Apr 28 10:00:44 2025 GMT
        Subject: CN=51779b1ef08d84c4324902243211c117ddc43c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1b:46:fc:85:91:58:06:90:f3:8c:f6:47:1a:
                    44:c2:70:96:af:4b:f9:11:46:fd:c7:5b:61:f6:0d:
                    c8:9c:2c:78:58:d7:26:81:b7:e5:dd:ce:38:7c:7d:
                    6f:30:cf:98:f1:c5:dd:13:0a:dd:a9:1d:f4:40:f9:
                    b2:4d:d5:2c:c2:08:17:65:4e:3e:f5:e3:ee:ec:a7:
                    d6:19:cc:2a:71:36:9c:a3:03:63:a1:99:7d:2b:cb:
                    00:0d:d9:3f:05:26:9d:99:f8:39:0f:5b:c8:ca:b2:
                    d1:ed:27:d3:fd:ef:9d:bc:07:a5:a1:fa:e5:d9:17:
                    3e:ff:a4:25:ef:6a:49:62:ba:48:69:13:8c:8e:bc:
                    96:f6:6e:ed:8c:36:7b:a8:f2:62:6f:7b:06:32:e2:
                    7f:c6:72:97:e0:2d:20:f2:89:25:c8:ea:d9:0e:21:
                    c5:41:dd:f2:74:94:73:46:f0:87:6e:f5:93:a7:e9:
                    0a:11:47:5c:6b:e9:62:bf:bb:16:57:1f:2c:cd:d9:
                    30:1f:ec:cf:96:8d:36:84:99:27:3a:a5:8e:0d:7a:
                    4a:84:ef:5b:ec:70:ea:5e:3a:cf:85:a3:66:46:81:
                    01:cf:a6:bb:cc:31:5c:25:9c:ef:ea:09:4b:54:14:
                    e2:db:21:1c:41:8a:9a:ed:fd:fb:9f:75:5f:cb:53:
                    4c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:77:9B:1E:F0:8D:84:C4:32:49:02:24:32:11:C1:17:DD:C4:3C:61
            X509v3 Authority Key Identifier:
                keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:2b:7c:6c:e5:16:7f:ca:e8:62:72:3a:82:b2:36:f8:39:78:
         ed:db:a3:be:db:f7:e3:31:b5:84:22:88:56:e8:27:8c:b4:63:
         3e:da:4e:d2:1a:a8:22:8a:b6:0f:93:6c:e6:0e:87:84:4f:9b:
         d5:78:8f:20:ae:51:0a:22:c1:14:95:73:2c:13:11:a2:4e:cb:
         37:3e:ec:38:83:f0:30:0a:fd:dc:79:ae:4d:c9:d9:d4:ad:1f:
         09:16:da:6d:b1:ce:84:71:3d:d8:4c:20:b9:9c:a2:af:e9:85:
         f0:69:ff:5a:39:05:90:69:cd:30:8e:4b:81:9a:fd:41:8f:e3:
         30:ad:89:ae:0d:c9:9f:f6:1d:71:47:15:0b:04:3d:4d:6f:d1:
         0e:b6:0e:c2:6a:f5:6d:93:d5:84:82:47:6d:02:b6:47:82:61:
         26:b1:a5:54:fd:4d:32:61:94:87:e5:a4:51:9e:bc:4a:ef:29:
         98:28:ab:a0:fd:46:fb:d1:31:1b:af:1e:a5:08:c9:f1:66:a1:
         4a:c9:de:75:5a:28:e3:29:f4:f9:08:ee:df:6a:ee:8f:10:26:
         cc:d2:fe:f7:dd:70:6d:e8:d4:41:68:4e:dc:ee:05:c3:95:af:
         cc:14:84:e1:fa:85:2a:d2:aa:cc:21:a9:8e:50:af:ae:a0:cc:
         7b:fb:68:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:53:47 2025 by rpki-client