Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
File:                     RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json)
Hash identifier:          xkEGVqP83Ehd5Ze1VWuVYW0Ztge1ShNGqeM3zdDMX6E=
Subject key identifier:   60:BF:16:84:0F:5C:45:14:3A:08:5E:68:B7:E5:A2:C3:BA:AB:2A:C0
Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
Certificate issuer:       /CN=441d4b92dd150364c65b7d21299028678b0a5296
Certificate serial:       0196760C130E105EDA1B9E70E623541C0DCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
Manifest number:          1517
Signing time:             Sun 27 Apr 2025 07:00:24 +0000
Manifest this update:     Sun 27 Apr 2025 07:00:24 +0000
Manifest next update:     Mon 28 Apr 2025 07:00:24 +0000
Files and hashes:         1: 3JkSKP7jBeNBJpMBSaOABWLwqrY.roa (hash: qvkM6RHQW3kH5F1/K52m/X+zUOs3qQZCWijPjerK2kc=)
                          2: I1VO7zMbx-vbjpttTgauG2K9yC0.roa (hash: +jpo7oyuZbYyl/PyBGr6vKJVEKniF9XZYZ9HT6VtMFY=)
                          3: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: RO9tI6/Jov3Zz00UVDHNgm2U8oq9L+rTZfqYwGnUwBg=)
                          4: rtM3C_Rb7MChD47Ga1U2cViLrVM.roa (hash: Bbt4WsyZlaNBYxegxcNZsDU9+mHNhqHf+fOapqUBZAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:13:0e:10:5e:da:1b:9e:70:e6:23:54:1c:0d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296
        Validity
            Not Before: Apr 27 07:00:24 2025 GMT
            Not After : Apr 28 07:00:24 2025 GMT
        Subject: CN=60bf16840f5c45143a085e68b7e5a2c3baab2ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:93:6d:e1:30:c6:6b:f3:65:18:e6:1c:f3:6f:
                    3a:b2:ce:dd:9b:b2:97:03:49:ce:c0:e4:1e:ec:bb:
                    1a:12:6a:0f:8e:f4:64:46:7b:0c:b8:fe:42:e4:3b:
                    aa:56:28:88:e0:98:63:8f:70:e4:97:25:39:56:89:
                    94:95:b8:f0:35:57:7f:c7:01:b4:20:5f:92:15:d0:
                    55:cc:9d:de:47:d1:ee:c4:61:4b:0d:d1:24:2a:f5:
                    87:a6:26:96:85:3d:b3:73:cc:be:68:d3:dc:fe:6c:
                    96:9c:11:24:b2:4e:20:95:47:1f:0b:f0:d9:72:41:
                    c0:53:a4:09:fa:5f:b3:a3:dc:be:fa:8b:9c:d6:83:
                    83:bc:8e:9a:5a:42:38:36:e6:2e:ab:4a:7f:8a:f3:
                    3f:6c:11:43:82:b4:90:99:29:68:56:5b:cf:35:c8:
                    eb:5d:fb:ec:c0:87:94:09:b9:fd:06:e8:d5:73:49:
                    51:1a:7d:15:4d:1b:db:a6:2e:b0:89:28:73:72:76:
                    e2:fe:27:f1:84:e0:ed:d2:99:d4:8d:07:0d:01:2c:
                    77:69:4a:c4:a8:20:dc:d2:78:5f:13:ce:ff:64:40:
                    d6:8e:9c:0f:78:4a:0b:85:8e:99:98:f1:14:94:e5:
                    81:ee:68:7c:68:aa:fc:02:51:2b:01:0f:d2:0e:e2:
                    e9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BF:16:84:0F:5C:45:14:3A:08:5E:68:B7:E5:A2:C3:BA:AB:2A:C0
            X509v3 Authority Key Identifier:
                keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:48:4a:37:e1:3a:cc:27:84:9a:69:3e:cb:92:52:94:2b:2e:
         d1:48:eb:aa:ac:dd:e0:a1:76:78:cf:61:88:d4:9a:8c:2e:d7:
         e3:e4:bc:9d:1b:28:bd:45:2c:d3:20:4d:96:47:06:a9:bf:89:
         eb:e0:aa:4f:c6:58:b6:dd:a4:ef:b9:03:c2:a3:4b:fd:9c:d9:
         b4:62:4d:16:72:af:af:ef:6f:46:32:78:0b:c0:45:5a:08:8e:
         c2:c3:b5:a3:10:04:9a:46:7d:d8:f5:1e:f9:70:c5:56:68:4d:
         9e:b2:f6:61:f0:2b:cd:1f:2a:bf:4f:4d:8a:71:0d:7c:4b:9f:
         fe:2f:78:22:9f:3c:32:77:ca:fd:fc:b3:b9:be:9b:3c:f9:f5:
         31:51:33:ff:c2:69:57:63:1d:e1:30:3c:e6:c6:bd:3b:dc:60:
         a5:9e:61:de:23:2f:b8:48:05:cf:bb:c3:ac:13:6c:6c:f0:36:
         f8:3a:d6:d1:15:a5:ca:f5:44:6c:9f:92:f2:d9:b0:e4:04:7f:
         cc:1a:03:c2:4b:ba:00:14:a4:4d:08:c9:a3:3b:f4:2f:41:8d:
         40:c8:d3:d4:ba:41:39:d0:4b:6f:89:91:73:65:c4:26:d9:92:
         e2:f0:2d:e8:85:f7:16:86:b6:42:c2:27:03:76:41:b8:88:3a:
         97:f5:c5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:49:42 2025 by rpki-client