Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
File:                     fcSs7cuGzd_tf23oyt_KAEabvI4.mft (raw, json)
Hash identifier:          HnodZEb++2QgLKvJyjdCz2c8+7AJEiztLEp23lHhmiE=
Subject key identifier:   C1:1A:6E:20:75:89:02:A3:5F:D0:B8:34:2C:63:20:76:63:20:02:0A
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Certificate issuer:       /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial:       01969295D9CF8E8D3732A58348E01B6B99EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
Manifest number:          152E
Signing time:             Fri 02 May 2025 20:00:16 +0000
Manifest this update:     Fri 02 May 2025 20:00:16 +0000
Manifest next update:     Sat 03 May 2025 20:00:16 +0000
Files and hashes:         1: L3jfVXtRL6_lD6BNoqXy7sEXYVs.roa (hash: bCWcb1OjgRUbcmEWxo5WVJLuY5Wam3mN/c101nJS4g4=)
                          2: aNZOgbC2ct7oBfvfODiPTTzSje4.roa (hash: REnD2uLHHDzM+UgqTv+vmaX5vz4XYKoCVVSGMH/Czts=)
                          3: fcSs7cuGzd_tf23oyt_KAEabvI4.crl (hash: RiVSYPXaNPbnGz8xHJHHiMypLnXlQciBBC2g8p5NEro=)
                          4: iIZa86cRoXzfTgl30QJoI1SOvPY.roa (hash: 8zjLfzmaOcWmBNRerK1/Wq9anwq2ilShQCg9MYrO3HM=)
                          5: xw83wudCk127kiXHqSwTaIW46z8.roa (hash: NELCxFUdkV28jyteAlY6BEFqr7FQW+26sZ4az/+ppAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:92:95:d9:cf:8e:8d:37:32:a5:83:48:e0:1b:6b:99:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
        Validity
            Not Before: May  2 20:00:16 2025 GMT
            Not After : May  3 20:00:16 2025 GMT
        Subject: CN=c11a6e20758902a35fd0b8342c6320766320020a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:57:ec:d7:04:50:58:92:8c:8c:c5:27:59:64:
                    7b:cb:ba:ab:51:e7:21:0d:58:db:97:7a:00:6b:1e:
                    f7:68:67:72:b5:74:81:7a:97:8f:e4:d3:6f:21:3d:
                    fb:2d:5d:2e:58:64:f8:c5:39:2c:a4:73:71:57:39:
                    41:fe:a3:71:f6:ac:96:b3:1b:0a:47:a5:a7:93:b9:
                    0a:06:69:e9:b2:73:21:6e:25:fe:75:eb:20:6c:c2:
                    24:5d:82:10:85:5a:a0:73:6b:21:21:64:dc:e6:a2:
                    3a:26:16:27:74:3d:ca:5a:1b:24:05:a6:52:e1:61:
                    c0:15:cd:97:da:e0:ce:05:1a:13:d3:d0:7e:5c:ca:
                    ca:1b:8e:09:e4:db:38:ad:db:87:36:93:b7:b2:9b:
                    da:bf:90:d5:02:db:66:34:b2:a3:71:3f:5f:2c:ef:
                    5f:24:3a:04:c7:96:e3:91:c9:6f:fe:35:e8:ed:23:
                    d0:28:fe:3b:69:89:5f:c4:65:92:98:6e:1d:c5:da:
                    d3:43:8c:5f:0a:77:2b:05:bd:c1:f9:b5:fd:cb:60:
                    61:78:aa:3a:c8:eb:94:ef:c8:09:76:e7:ca:42:05:
                    85:50:3d:7a:f8:50:d6:42:bd:88:fb:27:85:67:96:
                    3e:5e:3e:b3:19:3a:77:07:5e:11:72:09:8f:7d:e7:
                    f4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1A:6E:20:75:89:02:A3:5F:D0:B8:34:2C:63:20:76:63:20:02:0A
            X509v3 Authority Key Identifier:
                keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:fa:5e:41:2a:6f:b6:48:0e:c6:05:97:57:1b:80:f2:4c:16:
         d8:86:17:0f:98:38:77:23:ec:21:ec:e6:8c:db:65:01:8e:2a:
         21:03:96:3e:4a:41:8c:a8:dd:e1:88:64:46:a7:02:4d:a1:8d:
         9b:a5:fb:d3:5b:d1:a4:06:e5:78:62:25:49:8d:b3:e1:4b:1a:
         80:1b:68:3f:d1:c7:13:6c:df:50:3c:24:65:b9:10:2c:32:7b:
         89:6e:8a:47:82:a6:19:3c:a6:99:5e:cf:06:14:be:eb:ac:3e:
         68:73:1c:41:cf:18:da:40:63:66:56:db:10:bf:e9:70:51:fb:
         e5:62:f3:d0:a5:3f:3e:7f:24:52:a1:64:55:11:6b:c3:1a:59:
         39:7b:f4:d4:4b:3e:58:97:2f:6a:c6:7c:7d:57:05:3b:6e:a4:
         00:4a:77:87:83:6e:8a:9f:11:8b:a8:6d:20:a8:9d:91:68:0a:
         7d:a6:06:59:36:43:dd:69:ab:db:95:b4:57:6c:e1:7d:6c:82:
         0c:4b:c6:7b:e0:2b:95:58:e0:b6:a5:39:b5:7c:85:a0:2b:9c:
         ba:89:a1:a3:aa:fc:b5:b8:4f:3b:51:4c:47:46:1d:f0:77:f8:
         77:c2:57:82:35:8c:5d:95:4c:90:4e:a6:45:1d:9f:c4:16:de:
         1d:fb:4a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:01:08 2025 by rpki-client