Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
File:                     1-tzmN--ygZRxWsKnISniBXG5g68.mft (raw, json)
Hash identifier:          fps2xd8RIrQjuboqQ2yVYM9YpJqOQAePZnMT+o7XSDg=
Subject key identifier:   C2:43:92:9B:85:11:DE:2B:A3:44:28:18:92:7C:58:13:F8:1C:2A:FA
Authority key identifier: FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
Certificate issuer:       /CN=fadce637efb28194715ac2a72129e20571b983af
Certificate serial:       0196B6A2D5E06A8564E166ADB4069DE46260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
Manifest number:          152F
Signing time:             Fri 09 May 2025 20:00:47 +0000
Manifest this update:     Fri 09 May 2025 20:00:47 +0000
Manifest next update:     Sat 10 May 2025 20:00:47 +0000
Files and hashes:         1: 1-tzmN--ygZRxWsKnISniBXG5g68.crl (hash: dM76hJGRhAy7+72O9snhNGs/4OR+B0JOg/zvxyEsiBk=)
                          2: 5E1ZOs6jBFxTFh2Cf5ZnFlkIOxc.roa (hash: pA+HTgzqmsnmbM9IncUhyb9kGpbMUOBHi5UiEoEtsy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 17:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:a2:d5:e0:6a:85:64:e1:66:ad:b4:06:9d:e4:62:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fadce637efb28194715ac2a72129e20571b983af
        Validity
            Not Before: May  9 20:00:47 2025 GMT
            Not After : May 10 20:00:47 2025 GMT
        Subject: CN=c243929b8511de2ba3442818927c5813f81c2afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0d:52:ce:7d:86:09:1a:35:9f:7b:19:f3:d3:
                    66:97:44:ea:b9:34:3f:84:42:45:83:76:c8:71:54:
                    ae:32:67:4e:4f:f4:3b:75:62:4a:76:09:76:5f:ba:
                    ad:d8:62:ad:88:03:45:16:a0:9c:14:01:05:9a:93:
                    1b:e5:9a:56:77:a7:9d:d8:82:1d:e6:3d:25:72:e1:
                    99:0f:56:76:65:97:d8:5f:b6:7f:78:51:7f:46:13:
                    26:3e:e2:10:35:c6:a0:e3:75:aa:06:74:da:e4:e7:
                    5a:b5:00:d2:a0:1a:d3:88:c1:f1:90:47:62:e9:56:
                    98:c7:4f:5b:f6:5d:ef:c0:3e:6e:7c:a6:b7:a4:cd:
                    6e:45:b8:50:4f:03:fe:84:b8:e6:61:29:e7:20:e2:
                    92:fa:7b:53:e2:88:84:ba:79:3d:60:d1:fa:ce:f2:
                    a8:df:65:33:a8:94:80:31:dd:c8:56:b1:ee:d4:da:
                    8a:7b:36:ba:73:31:09:7e:e8:f8:95:b8:a9:ff:3e:
                    3c:37:e7:37:a6:e2:f8:ed:b9:8a:9d:bd:75:1a:e2:
                    ad:d4:07:46:70:94:db:90:ac:34:f9:97:60:a1:ab:
                    b2:42:6d:3f:7d:37:20:d0:9b:48:37:46:13:58:75:
                    d7:1e:84:12:2c:f7:aa:7a:88:5e:b1:21:b9:19:62:
                    d8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:43:92:9B:85:11:DE:2B:A3:44:28:18:92:7C:58:13:F8:1C:2A:FA
            X509v3 Authority Key Identifier:
                keyid:FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:7f:44:39:12:bf:0d:f9:8b:e5:fd:d9:14:16:cc:7c:5d:a6:
         25:f5:2e:90:b0:56:db:36:9c:8a:06:f7:6b:9c:54:a2:d1:7c:
         6e:8a:cf:3e:d9:3f:0b:02:68:4c:c9:eb:bb:67:df:7a:10:34:
         8a:09:b8:2a:ea:db:d0:cc:e0:a7:7d:42:cc:c3:a9:0e:1a:ae:
         9d:59:92:49:9b:c8:86:72:e6:b1:6b:be:85:58:9b:56:4f:1b:
         db:f6:22:30:23:d0:87:1f:ee:6d:14:76:d3:15:a1:a7:51:48:
         70:07:5f:88:cb:a7:cc:72:0d:30:5b:02:9e:f8:27:42:19:38:
         26:43:d6:87:9c:18:03:24:2a:05:c3:d2:22:2e:dc:28:67:84:
         39:f0:c7:b2:af:1c:4c:3a:2c:c2:65:d1:15:f0:b4:f8:85:92:
         0e:61:0d:ed:11:33:63:67:23:36:8c:08:15:90:da:d0:02:23:
         b0:ad:b1:64:2b:39:16:f1:01:1e:55:da:a9:68:e5:e9:1b:cc:
         dc:59:2f:1a:e4:1c:72:19:0a:a8:a0:75:91:ab:16:de:22:25:
         52:dc:27:36:36:47:47:09:45:94:cd:10:ba:06:07:9d:b4:3e:
         6c:74:7a:6a:37:74:3a:d3:ce:a5:05:61:6a:16:1a:59:54:25:
         7d:cd:32:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:02:55 2025 by rpki-client