Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft
File:                     n7SouTr56pzxiqyk5z8RbsJus1c.mft (raw, json)
Hash identifier:          1bYOIEpmcg/sVoU1DWQeDnVby4UjNs1NcuKajm08nmI=
Subject key identifier:   5B:1D:01:A9:94:C8:89:07:DC:1E:3B:0C:89:FB:0E:11:72:E8:BB:86
Authority key identifier: 9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57
Certificate issuer:       /CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357
Certificate serial:       01969E632416FA24D8EF87AEE5802F98D121
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft
Manifest number:          152D
Signing time:             Mon 05 May 2025 03:00:19 +0000
Manifest this update:     Mon 05 May 2025 03:00:19 +0000
Manifest next update:     Tue 06 May 2025 03:00:19 +0000
Files and hashes:         1: 1PkG4fEwdXoMD-WH6ZRxyY8sELw.roa (hash: a0iYtGmAHDkDdbaG2u7+3yZnQS7AVnDIsCyUz86fNxA=)
                          2: 5jasWjlS1Ump0nRGI3DK46AyE-M.roa (hash: sMi9gwP2+D/zUCH8wz+ohSeZWvK9a9umXNsRtIbAM0g=)
                          3: GNiJG3xpkW82o4W1yrImKoG5MJU.roa (hash: BvuebS9Of4HLpNtbxkNjqKwp5lwh+0N5sWdkwgefagE=)
                          4: hqWfNQU94aa67UD14uMEBc6ivzY.roa (hash: vnr5FfmrkEI+u9/SFiQ11TolMxSSlt2O7OtHyllTQ+I=)
                          5: n7SouTr56pzxiqyk5z8RbsJus1c.crl (hash: 6FYZgbeH5TH7coTusFRPmDf3T1YhhD653HlO46BfFsY=)
                          6: obRnA2DOaX1f1N0VaLSK561MsFg.roa (hash: xpha7L01dte1GwtkALu5D1iKZZKGT07iZI/1woD8rMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:63:24:16:fa:24:d8:ef:87:ae:e5:80:2f:98:d1:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357
        Validity
            Not Before: May  5 03:00:19 2025 GMT
            Not After : May  6 03:00:19 2025 GMT
        Subject: CN=5b1d01a994c88907dc1e3b0c89fb0e1172e8bb86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f9:76:71:96:ec:45:0e:38:3c:69:18:d4:fb:
                    8c:a9:49:5d:4a:98:08:7b:cd:e5:c3:72:66:c5:81:
                    e9:5d:94:32:bb:fa:b7:f6:49:87:6f:5f:16:1b:2c:
                    5a:6b:41:f2:96:c9:13:fb:a0:6f:1b:4e:4a:fc:42:
                    c2:19:63:5d:ce:a5:1d:aa:be:54:01:d0:c4:3f:2c:
                    25:4b:3d:8d:0d:39:62:61:be:8c:a6:e7:c6:0e:93:
                    d7:24:43:61:8e:3e:c2:2e:67:4c:c9:44:64:11:b8:
                    73:a3:49:a9:ea:bb:8d:1b:74:2d:2e:17:38:60:39:
                    5f:34:8c:65:50:77:93:dd:43:bb:7f:d3:ad:b5:9a:
                    66:f7:a7:a3:30:ac:b4:25:38:71:93:d3:62:20:9d:
                    cc:77:2d:98:ed:5d:cd:3a:40:67:35:c2:e7:dd:c2:
                    10:d8:a3:54:14:bf:45:64:9d:38:71:b0:36:bf:dc:
                    83:76:08:b1:5e:9e:18:07:9d:d8:a9:b7:45:e8:47:
                    2b:c2:2b:61:6f:51:21:cc:5a:27:bb:f4:e1:a8:4d:
                    da:8b:6d:98:e0:62:d7:30:be:3d:c9:cf:5a:ff:3f:
                    66:e3:b5:ae:d0:90:ea:ec:c7:93:72:4b:2f:cc:d5:
                    fb:b1:81:46:c1:27:1e:d2:15:47:ec:7b:1f:84:45:
                    dc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1D:01:A9:94:C8:89:07:DC:1E:3B:0C:89:FB:0E:11:72:E8:BB:86
            X509v3 Authority Key Identifier:
                keyid:9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:04:3f:09:86:47:41:ab:2f:c2:57:0e:e4:48:9b:78:dd:ae:
         52:fd:56:cd:82:6c:e0:40:ae:65:95:16:1f:a1:fe:54:a6:ad:
         d9:3b:c0:f5:fe:11:51:b9:76:e1:74:43:4b:57:0f:4b:b8:50:
         ab:97:b3:76:aa:49:50:96:f8:a3:f0:60:bd:bc:de:e9:0b:0d:
         95:51:dc:6e:06:54:1c:b8:f6:de:9a:03:4c:45:dd:5a:9d:22:
         b0:04:03:1b:77:cc:07:2f:d8:9e:01:20:b0:cb:a4:e8:c5:14:
         59:5d:a3:39:07:14:2c:a0:ff:4f:d6:0c:90:d3:c2:7d:78:4e:
         27:ab:b1:05:d7:69:9f:30:98:08:5d:d6:c4:41:39:8c:78:6b:
         11:d4:8d:9f:28:21:40:cd:17:69:b6:28:80:af:0f:62:57:f2:
         08:c4:a8:32:dc:6f:6c:16:4e:7b:14:99:af:3e:b9:e1:41:4f:
         5c:72:44:64:3d:d9:38:14:a4:83:d5:22:85:ff:b8:62:8d:fd:
         90:7f:98:da:9b:cd:1f:13:c6:26:b0:61:ff:d2:15:83:71:22:
         63:14:bd:51:d9:13:65:c9:ea:3f:f1:19:c0:4d:a8:c5:c8:5a:
         8e:1b:39:00:7d:68:62:e3:1c:e8:8a:27:55:42:0f:d8:e8:ab:
         5d:1b:7e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:43:02 2025 by rpki-client