Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
File:                     bn8ivutSxuUaJCKxORQu6gP7XU0.mft (raw, json)
Hash identifier:          JGq3NKMj0eY8KYrpOknk+alQHy48bW1Kp2VaywQlt+Q=
Subject key identifier:   5E:90:0D:84:41:92:87:35:B6:B3:1F:B9:E9:53:4B:B6:EB:D6:43:6A
Authority key identifier: 6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
Certificate issuer:       /CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Certificate serial:       019684360FC9C1385D195C5A8B3763E27986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
Manifest number:          1515
Signing time:             Wed 30 Apr 2025 01:00:57 +0000
Manifest this update:     Wed 30 Apr 2025 01:00:57 +0000
Manifest next update:     Thu 01 May 2025 01:00:57 +0000
Files and hashes:         1: bn8ivutSxuUaJCKxORQu6gP7XU0.crl (hash: NNmPUGVv8lJ31caMYM7gZdb9l4fdLo3MFyGnKiNyno4=)
                          2: z4IVFfra9dO93PZl7xdhmVhqzoE.roa (hash: 90ivV2dV0BSclFTId5ah7Fo9mKfLvO9taEvtncU7b/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:36:0f:c9:c1:38:5d:19:5c:5a:8b:37:63:e2:79:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
        Validity
            Not Before: Apr 30 01:00:57 2025 GMT
            Not After : May  1 01:00:57 2025 GMT
        Subject: CN=5e900d8441928735b6b31fb9e9534bb6ebd6436a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:95:c2:46:a5:57:df:23:bd:6f:c6:cf:fb:e6:
                    2f:36:8b:7c:48:b7:85:36:93:6e:97:95:cb:fd:6a:
                    ef:94:26:05:93:11:cc:48:07:cb:5a:19:8f:4c:4e:
                    d7:dd:d3:30:1d:08:98:40:e8:1f:c5:64:95:3e:22:
                    99:b8:95:db:63:ff:cd:91:19:02:c3:30:d2:51:55:
                    48:15:24:d2:23:99:0d:25:2a:5b:10:93:16:ee:03:
                    1e:fb:08:bf:5f:04:45:a4:b2:03:a2:a3:9c:18:77:
                    ab:fa:4e:05:1c:94:5d:26:43:90:06:94:72:03:63:
                    1f:62:2c:fb:24:f8:87:3a:ff:52:7b:70:6f:d4:6c:
                    57:1b:cd:01:b2:d8:32:45:4c:7f:94:f3:f5:22:e5:
                    f1:2f:f5:3e:d3:03:21:4c:30:a6:50:01:57:fa:49:
                    7e:10:c5:02:ff:7a:b4:ac:4a:84:f1:3d:30:96:38:
                    66:28:7c:79:97:49:f4:b9:b5:a6:7b:bf:45:df:01:
                    2a:97:44:d9:0c:a1:54:af:4e:0c:06:45:6f:53:c0:
                    53:2e:59:73:8d:7a:a8:e4:8d:25:d3:a7:f2:15:fd:
                    b9:81:41:18:12:65:75:ef:83:af:99:fd:05:15:26:
                    2f:cd:71:31:15:2c:2e:9a:cd:a1:f1:0d:39:7b:94:
                    a2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:90:0D:84:41:92:87:35:B6:B3:1F:B9:E9:53:4B:B6:EB:D6:43:6A
            X509v3 Authority Key Identifier:
                keyid:6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b5:0e:0b:26:94:e1:79:1c:d8:10:97:2c:d3:0c:46:f0:46:
         c3:ad:e4:78:df:17:fc:ef:36:c4:f9:b0:86:7a:d7:d9:ef:a0:
         6d:28:b9:ce:ec:dc:ba:6b:21:e8:3d:8a:64:13:b2:1f:20:04:
         ac:8d:d5:3b:f4:c4:42:51:65:a0:c8:6c:53:1a:e5:3b:60:81:
         7c:3c:67:25:6e:58:82:20:60:ff:e3:62:e0:da:65:43:bd:8b:
         ce:f2:d6:f7:21:15:ef:b8:75:5c:f9:e6:8d:82:6c:e1:cb:a9:
         4f:49:03:f7:64:c8:c2:54:86:1a:6e:76:29:f7:08:cb:7e:0d:
         d4:6b:10:2f:11:b7:da:2d:93:30:19:51:d9:20:e0:3a:69:a4:
         4d:90:71:de:f9:81:64:c7:31:f9:e4:f0:d3:52:cc:0c:f1:ed:
         03:a3:26:7b:6e:90:bc:5e:85:a2:66:9b:e1:58:dc:60:ae:52:
         ae:28:ce:e8:a7:7c:ef:22:f6:95:82:ac:87:51:1e:6d:7f:f3:
         33:2e:cb:e2:6f:28:06:dc:63:7d:bc:67:e5:1f:35:d1:3e:71:
         20:ff:21:ae:36:5c:26:1e:fd:b5:09:47:2e:f5:a1:ca:61:83:
         12:8e:de:91:3d:86:a7:61:c5:41:7b:2a:b0:0a:25:b6:a1:a2:
         f2:5e:a9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:47:34 2025 by rpki-client