Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File:                     ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier:          FvVVRGb4IayHw24X/rQwDl2aesp1vzRndeE30GCT7Uw=
Subject key identifier:   02:93:6D:69:B0:C0:2A:30:98:2F:2B:A9:23:CD:25:8B:50:55:41:F1
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer:       /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial:       019671C1C8B7512CBE44B03B05D6099B20D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number:          1511
Signing time:             Sat 26 Apr 2025 11:00:47 +0000
Manifest this update:     Sat 26 Apr 2025 11:00:47 +0000
Manifest next update:     Sun 27 Apr 2025 11:00:47 +0000
Files and hashes:         1: 2Oc3FqLDZOIsZ3-ChpBNgzAI1qA.roa (hash: ngieeqkZH2PetACTisY+FlZAWILVipXJYp8vJQiZ9t4=)
                          2: 8h-VrH2OLGuzooixz2EHGOzGj7c.roa (hash: j9xYGg1A7OFK4mnjxkQLlnHkLT4I6Te+j3atszApNdQ=)
                          3: x3vXcqd4rOe3aN_H50pQssbociA.roa (hash: KHAoiYRVl8v/BdqhdcKxO0EIBKUpuD3RXPz3naD0K1c=)
                          4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: XQ6bRPb66GKGoe1GMARuu30rUZLIJLLBVfdDdz81K+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:c1:c8:b7:51:2c:be:44:b0:3b:05:d6:09:9b:20:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
        Validity
            Not Before: Apr 26 11:00:47 2025 GMT
            Not After : Apr 27 11:00:47 2025 GMT
        Subject: CN=02936d69b0c02a30982f2ba923cd258b505541f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:35:bd:c3:aa:4b:bb:43:19:f1:b1:90:0b:71:
                    ec:4f:f7:5a:c2:f0:48:97:3e:16:30:85:42:62:44:
                    c6:f9:e6:b3:cb:23:db:9e:1d:42:19:8a:e0:0b:52:
                    48:3e:c9:03:7a:36:21:12:33:8d:24:28:2e:fe:f2:
                    0f:83:d6:64:44:3d:90:15:a5:9d:11:f5:5b:e2:86:
                    2c:49:6a:a3:8d:3b:76:9e:a0:da:99:f5:f5:5f:12:
                    ed:31:5c:9f:d8:f5:9b:32:b1:88:92:26:97:8f:20:
                    5d:33:65:79:58:7c:a3:20:3e:e5:a7:83:11:95:76:
                    b9:94:ee:eb:35:5d:82:88:29:af:ee:60:6b:47:4c:
                    75:ae:d7:e7:ed:5a:dc:e0:f1:04:27:44:05:56:ed:
                    aa:8c:49:bf:85:da:b8:a9:ee:be:e6:f7:bd:fc:f4:
                    17:d3:d7:03:30:3d:83:5e:e1:3a:fe:91:99:12:26:
                    c6:e3:53:0e:bc:df:5b:f2:7c:ff:d0:85:d6:c7:f4:
                    7c:e5:43:3c:12:a3:39:c3:c7:f2:03:ed:9d:e3:35:
                    1f:08:91:b5:e0:d3:7b:fb:b5:0b:a3:64:5b:eb:4e:
                    97:cf:bb:cf:3d:70:1e:4f:b7:60:8e:53:83:8f:61:
                    c5:13:13:b2:99:6e:ac:20:74:87:6a:87:ca:c7:b2:
                    18:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:93:6D:69:B0:C0:2A:30:98:2F:2B:A9:23:CD:25:8B:50:55:41:F1
            X509v3 Authority Key Identifier:
                keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ef:5a:c6:1b:7b:19:0e:83:da:9e:7a:68:11:8f:c2:bf:b5:
         41:47:84:68:7e:2b:5d:23:e4:16:f2:60:33:31:41:f6:6e:68:
         1d:37:de:a2:94:47:8e:62:da:41:0d:e1:13:c7:a7:c4:60:f3:
         4a:4c:e6:0f:97:3a:10:a7:1b:c0:1c:bc:9c:d1:65:ed:c5:e1:
         e4:52:16:68:cd:60:16:70:c8:6c:3f:b9:c7:d4:ec:9c:1c:ee:
         20:b7:31:84:d6:d4:7a:20:87:6f:f9:7a:f3:4c:3e:42:06:b9:
         3a:e2:4c:a3:b7:0f:aa:17:77:39:b2:87:82:3b:1f:2d:54:38:
         05:3e:34:b9:73:b7:1b:20:f4:44:c6:99:14:35:5f:18:77:50:
         9e:b7:cc:9e:96:5d:e4:a1:92:8c:b2:6e:c7:a8:56:6f:c7:07:
         5b:a3:de:fb:ec:60:b6:4a:10:0e:24:59:fa:94:dc:bf:a4:14:
         e7:a6:0c:fd:9d:11:88:0d:86:90:d2:95:1b:e7:db:62:9a:92:
         36:ac:9c:e8:b5:b5:4d:f7:ac:79:55:ac:62:d2:64:62:b7:57:
         63:bd:e5:44:c2:fb:99:b2:f1:8b:81:6e:f9:e0:5b:e4:b3:fd:
         33:ea:83:31:f6:7b:b0:c0:4a:69:a1:80:6f:6f:4e:e4:c3:0d:
         98:b9:1b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:05:28 2025 by rpki-client