Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
File:                     E38zct9XyBSrqLUakHhh2SueT1U.mft (raw, json)
Hash identifier:          GWErid0X6ZntZtzc/+hgaxMfRcaMoO6Bsjf2jLevpBU=
Subject key identifier:   E1:B9:B6:6D:53:20:7F:30:A5:60:2C:C9:3E:98:78:AA:34:FC:22:05
Authority key identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
Certificate issuer:       /CN=137f3372df57c814aba8b51a907861d92b9e4f55
Certificate serial:       0196959716627C52FA7E85316BE7E96D0C18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
Manifest number:          1522
Signing time:             Sat 03 May 2025 10:00:28 +0000
Manifest this update:     Sat 03 May 2025 10:00:28 +0000
Manifest next update:     Sun 04 May 2025 10:00:28 +0000
Files and hashes:         1: 8gvSRkioiol7AtclW0w3QDNdRw0.roa (hash: pAF2HpC02c8LxHhm/ivKqiw2U8OBqawxXoZZFN2vllM=)
                          2: E38zct9XyBSrqLUakHhh2SueT1U.crl (hash: qBhg6+zh/KeCAzM8UGAAcwR/721MVkfemKCntB2t6gE=)
                          3: VqJZEln3bccahadYDW0ePgV1gdw.roa (hash: CgpHiF36vVgykBJlcL4O9MnI1LRoTpD9E00VJ7RhYwg=)
                          4: wQk6P3JazTtfJ7Qbak1iF7pmDzU.roa (hash: yyhyj8+uWZT4ObCsZinsPoUAt/nN+0r3AmItPKtF2y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:95:97:16:62:7c:52:fa:7e:85:31:6b:e7:e9:6d:0c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137f3372df57c814aba8b51a907861d92b9e4f55
        Validity
            Not Before: May  3 10:00:28 2025 GMT
            Not After : May  4 10:00:28 2025 GMT
        Subject: CN=e1b9b66d53207f30a5602cc93e9878aa34fc2205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:af:d2:47:65:46:ba:28:29:54:75:43:63:10:
                    a2:36:d6:e3:d9:7e:8c:0a:6b:97:51:5a:f8:82:4e:
                    cc:40:8b:cd:ae:f4:bc:39:6e:b0:74:1f:ed:61:59:
                    9d:37:52:36:a9:9e:0a:e2:91:30:20:1e:f3:83:1e:
                    f3:9d:21:c4:65:e8:04:54:af:96:68:a0:e9:1a:6c:
                    70:f8:a1:8f:47:a8:58:75:74:d4:83:6b:88:e1:28:
                    7a:ff:55:7f:fa:24:c5:ed:08:9f:b2:29:a0:a4:94:
                    ff:be:94:c9:f7:90:ab:2d:52:f3:77:66:4e:4f:7c:
                    d7:b4:00:72:eb:a9:d5:04:90:f9:f2:22:d5:08:80:
                    05:6d:63:34:1a:78:89:04:c2:c7:d6:5d:6c:4a:1b:
                    44:f5:36:29:d3:83:93:22:a2:ee:78:0c:da:1e:da:
                    51:1d:bc:32:c9:ee:8b:d5:7c:c3:d1:23:47:e3:1b:
                    57:04:e2:94:ac:dd:1e:45:bf:21:f9:1f:bf:8e:31:
                    f9:35:52:31:52:d0:88:3b:28:f2:f8:4e:aa:e4:f1:
                    1d:dd:fe:d8:f9:15:6a:86:99:59:bc:0b:0a:24:f8:
                    50:3b:7d:51:62:fb:e1:d4:51:ef:10:e7:c9:a6:a9:
                    47:a6:0f:8d:d8:b2:67:22:1e:05:a5:e8:04:f1:15:
                    04:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B9:B6:6D:53:20:7F:30:A5:60:2C:C9:3E:98:78:AA:34:FC:22:05
            X509v3 Authority Key Identifier:
                keyid:13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:29:43:4a:4a:48:4f:a0:e7:4f:a1:f5:15:da:e1:d7:5a:12:
         e8:0e:4a:9b:98:54:db:94:84:4a:a4:75:ac:db:7c:89:ff:4e:
         20:0e:9f:b4:ce:f1:ac:b2:0a:85:f5:25:f2:87:d2:27:94:ee:
         de:38:92:aa:84:a8:34:73:f7:00:b4:1f:ef:1b:21:bb:b9:a7:
         7a:7f:bb:54:bf:1e:30:9d:62:1d:96:41:1e:ba:f6:dc:bc:7f:
         aa:87:ea:a2:a2:ea:a9:5c:32:82:74:e5:15:5b:27:4e:b5:a1:
         92:a3:4c:50:22:c9:73:22:c2:5c:2a:3c:44:03:fb:4b:25:22:
         44:4e:71:2c:71:eb:b0:e9:7b:2d:1e:04:18:5b:5e:d4:cf:a5:
         3e:d8:d5:f5:e5:77:22:ec:be:70:11:58:02:77:71:7d:de:cd:
         27:5f:14:65:fd:6f:0f:f3:b9:f1:62:1f:2b:da:ad:3a:3a:6d:
         2c:33:5e:9d:ea:09:cb:43:21:55:42:49:cc:29:99:3a:12:c8:
         6d:2d:c8:9e:6a:39:f5:80:98:6a:82:19:50:db:4c:8c:95:d5:
         9a:4d:5b:34:a7:0e:9d:0f:f0:ed:ca:ef:13:58:59:a7:65:8c:
         5b:0a:71:20:7b:9c:f3:36:ce:50:97:f9:2e:8f:37:4c:c5:72:
         ed:7e:49:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 18:12:53 2025 by rpki-client