Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
File:                     SYbHOZTQLZH8l9kW6YCabZgeaxc.mft (raw, json)
Hash identifier:          AemRWF/voOGKzC2Ohmvyc2QAcPWrqxTSD+V+3LLnbME=
Subject key identifier:   9F:71:AC:E1:80:90:6C:09:6A:86:B2:3B:DD:CD:F5:2B:16:4C:B6:2C
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Certificate issuer:       /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial:       01967153E4F1E322E3DC7D10E50AC6967448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
Manifest number:          1581
Signing time:             Sat 26 Apr 2025 09:00:45 +0000
Manifest this update:     Sat 26 Apr 2025 09:00:45 +0000
Manifest next update:     Sun 27 Apr 2025 09:00:45 +0000
Files and hashes:         1: 0bnoilJqdREsxptDb-ivl7D9RO8.roa (hash: xwj9p29IkVHnJneRSxNDQqnx9KWrH7LG11fEPkl1kbA=)
                          2: Ix9O-i4_zw0G5oouxc3xseGA8Eo.roa (hash: c7xx1EFWXS87VmDm0MCiaBwoUVVt5kZzZI5Y7YpQiDg=)
                          3: NTSXzohORWZtttaszZbsV3DOOYA.roa (hash: MaEVUaFakhLRs6dfJtYL3YU29Q2ZDO5rsA2rJVtVQpY=)
                          4: SYbHOZTQLZH8l9kW6YCabZgeaxc.crl (hash: EcGHfh1HV5ssczuED5OagEG1OvJaLQBZ0EgklpngTXs=)
                          5: aW05ZSlfTB8ioD6Oil22uZMSK2g.roa (hash: iVb2/aNTW22Ew6+G7UumHgob5aDKdgpDjm9XiUoChKc=)
                          6: dEkWV8xPj6ZjKfgx5t3dIacQr1A.roa (hash: ZOk1wKX5K0Mx4fspQclTvx+3kOne5shTmWgvCBY9O/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 09:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:53:e4:f1:e3:22:e3:dc:7d:10:e5:0a:c6:96:74:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
        Validity
            Not Before: Apr 26 09:00:45 2025 GMT
            Not After : Apr 27 09:00:45 2025 GMT
        Subject: CN=9f71ace180906c096a86b23bddcdf52b164cb62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:81:1f:4e:0c:55:98:5c:68:67:08:ff:be:5e:
                    e6:12:4e:da:14:7d:8e:34:3d:2d:5c:27:2e:c5:b6:
                    fb:2f:8a:52:04:f7:63:f3:ad:31:73:92:10:83:ee:
                    e1:42:e9:22:93:7b:34:d4:ec:23:bf:01:cf:c6:f9:
                    6e:41:e7:96:33:bb:9f:ee:1a:86:e1:91:0b:8a:73:
                    65:c6:52:0a:7a:6f:ab:48:26:0e:95:e2:e2:7d:89:
                    1d:78:38:44:8e:00:88:81:e0:4c:4e:f8:0e:08:01:
                    90:d8:a7:ee:aa:5a:b2:6d:b8:02:63:99:6a:1a:96:
                    fc:c4:89:3a:47:2d:5c:e4:0b:63:80:2c:cc:e6:61:
                    35:e8:35:05:95:46:58:ce:32:08:8e:7a:c0:70:1f:
                    4c:e5:87:5f:33:71:bd:d5:5f:58:40:53:94:bd:95:
                    99:f8:f7:08:da:6c:e1:88:4c:bd:bb:8b:62:a3:65:
                    30:57:b5:17:2c:61:31:db:20:db:52:eb:41:a5:0d:
                    9b:61:dd:e6:46:9b:1f:86:62:19:33:20:c7:85:68:
                    4f:1d:c8:4d:8c:13:1c:21:a5:0d:5c:6e:28:59:94:
                    39:1a:d8:47:6c:ce:39:63:a0:b4:b6:68:e9:d6:d2:
                    c4:29:1a:d4:42:2f:15:00:23:ab:7b:5e:e5:fe:51:
                    0f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:71:AC:E1:80:90:6C:09:6A:86:B2:3B:DD:CD:F5:2B:16:4C:B6:2C
            X509v3 Authority Key Identifier:
                keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:5a:6c:9b:e5:80:40:8b:97:de:e0:b9:05:ef:88:dc:65:ed:
         55:0e:d9:95:4c:49:e5:75:88:4f:90:cc:5a:40:d9:a6:71:a7:
         4a:8b:04:53:4f:d8:b4:f6:9d:a4:45:e4:e5:ff:47:ff:17:bb:
         36:50:da:11:70:c0:b8:75:32:72:b0:bd:82:24:49:61:55:10:
         f2:3f:cf:97:8d:95:6c:ae:1a:85:1b:ac:c3:33:5f:91:28:54:
         f1:49:88:bc:ba:08:da:96:88:40:c6:bf:90:98:59:13:62:88:
         ec:b9:d2:d7:99:30:c2:90:86:a4:14:c0:6e:02:4b:6d:53:e0:
         b2:da:39:bb:5c:3a:06:fd:3c:82:c3:ab:a9:d6:0d:a8:8c:da:
         90:b9:c8:44:b2:10:11:7f:e4:4f:1f:4e:64:ee:00:03:13:13:
         b4:73:10:f8:6f:c8:94:85:4c:12:99:b6:98:3e:2d:01:71:fa:
         de:6a:dc:6a:46:1e:d8:e1:d4:6e:7c:f0:1d:d8:00:77:2f:d1:
         98:72:e8:b2:d5:1f:6a:99:45:0e:a2:90:ff:c7:7f:b5:a8:8b:
         29:f9:cb:b9:bc:9f:8f:dc:bd:d9:fa:ae:05:fb:14:37:47:1f:
         3a:cc:f7:45:07:2d:1d:12:f7:b7:a0:9f:d3:f1:c1:af:9b:9a:
         2e:2f:37:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:06:13 2025 by rpki-client