Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
File:                     B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft (raw, json)
Hash identifier:          a0WZ95+/Aea6SWxV70LHB3zb/X/hTjjWILRYXjN9x80=
Subject key identifier:   53:E3:9B:F8:17:32:CA:8E:F2:64:40:F1:AA:41:29:33:3E:B9:05:C5
Authority key identifier: 07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A
Certificate issuer:       /CN=077946f04742c66279acd322009be15e3d588a5a
Certificate serial:       01968C26088861CE72BC0074228F6F9B2B92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
Manifest number:          151C
Signing time:             Thu 01 May 2025 14:00:24 +0000
Manifest this update:     Thu 01 May 2025 14:00:24 +0000
Manifest next update:     Fri 02 May 2025 14:00:24 +0000
Files and hashes:         1: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl (hash: qdwtpmuIXuHGNofAT0Vx9BjoVpPijSdl/+dK9nxY5WM=)
                          2: UuUtfUqV-KgwhgFjzhSy5k-b5wQ.roa (hash: N1q9DTLPcvQy64VHKRJdfX47laqGR6sY8ENSz3JjEqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8c:26:08:88:61:ce:72:bc:00:74:22:8f:6f:9b:2b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077946f04742c66279acd322009be15e3d588a5a
        Validity
            Not Before: May  1 14:00:24 2025 GMT
            Not After : May  2 14:00:24 2025 GMT
        Subject: CN=53e39bf81732ca8ef26440f1aa4129333eb905c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:59:d0:7d:dc:6a:2f:6c:1a:37:db:94:29:20:
                    e7:a8:ef:10:60:58:e9:42:21:ab:af:f6:41:8f:88:
                    4e:03:24:f2:0a:73:56:61:f9:82:99:e9:9c:ff:5f:
                    62:0f:05:e7:af:8f:dc:59:21:ad:14:37:5f:ce:5f:
                    07:68:80:a3:1f:f1:8f:c1:78:43:6a:55:f1:bd:ff:
                    78:86:a1:08:e8:37:2d:7e:7c:0c:04:f4:25:57:04:
                    66:43:aa:17:e0:cf:4d:c8:b1:f1:21:a1:fb:60:9c:
                    01:e6:fb:11:d2:f9:1f:a9:0c:f8:6a:0b:29:73:54:
                    10:ff:25:b0:0f:ca:5c:75:06:3d:1f:93:89:44:6b:
                    4d:c6:38:02:e0:a2:42:eb:bc:63:53:aa:5b:97:3d:
                    12:9d:92:7c:e0:10:b5:5a:b8:cf:74:c0:8f:6f:63:
                    f3:91:1d:a5:72:09:4a:e6:6a:91:d6:b5:91:84:8f:
                    82:3c:44:4f:0e:39:dd:17:63:2e:31:21:1e:d4:bc:
                    3d:e0:d0:39:54:6d:97:96:36:fd:bc:7a:7a:43:c0:
                    ad:1f:40:8e:98:67:6d:2a:6c:94:23:dd:ad:a1:a0:
                    d7:ff:5d:70:2b:9d:7f:54:01:4d:c6:67:2a:a9:63:
                    3a:bd:59:d3:57:f9:ee:3c:2a:8c:f4:00:9f:a9:5e:
                    5f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E3:9B:F8:17:32:CA:8E:F2:64:40:F1:AA:41:29:33:3E:B9:05:C5
            X509v3 Authority Key Identifier:
                keyid:07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:83:a8:6e:47:ff:02:61:fb:b2:ad:5d:f3:cc:fa:84:0e:5d:
         0c:78:05:da:d9:2b:7e:91:40:db:76:60:6b:09:7f:89:38:2d:
         5a:a3:97:62:07:c5:8a:43:15:5f:6d:24:ac:49:8a:3a:46:84:
         94:69:d1:eb:61:34:12:d2:da:3a:68:78:25:e3:e4:f5:1e:ea:
         ae:f3:90:39:d7:f6:23:2b:54:7d:dc:c9:f3:64:96:6f:e3:1c:
         74:19:4c:5d:3b:dd:d1:7c:fe:1f:e9:02:d5:a7:2c:28:2c:1f:
         e8:c4:8f:f3:f7:dc:31:f0:d2:d0:a9:02:eb:49:a1:8d:71:cf:
         c8:51:f7:96:ef:6c:8b:1b:2e:fa:10:10:e8:a9:c0:61:f0:74:
         9d:08:ee:d8:7a:49:8d:63:36:aa:e1:97:80:72:37:55:58:0d:
         68:a7:b5:e9:27:34:5e:ee:d6:91:f9:bf:53:e8:10:0f:27:30:
         ea:c6:3f:88:64:39:60:aa:34:d2:61:26:20:c2:07:c0:d0:e8:
         2e:4d:f3:02:af:d6:a0:3f:03:d5:ca:74:b1:14:71:18:80:a0:
         f4:29:35:82:10:3d:2f:bb:6e:62:2d:70:6e:0c:96:98:0c:8f:
         e2:a0:dc:d4:f3:95:2e:71:64:1c:96:e6:04:cc:21:85:6b:f6:
         64:dc:2f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:28:06 2025 by rpki-client