Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
File:                     imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft (raw, json)
Hash identifier:          8CW/se6gxW9RCwAbL12URbFGXsXdf4TXwGei9CVdGvI=
Subject key identifier:   71:93:A9:B5:08:51:82:47:FA:A4:DF:25:CC:F8:E5:CC:8A:8B:6B:C8
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Certificate issuer:       /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial:       01964CD927BC84826931DAAEE53CD030821D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
Manifest number:          1514
Signing time:             Sat 19 Apr 2025 07:00:21 +0000
Manifest this update:     Sat 19 Apr 2025 07:00:21 +0000
Manifest next update:     Sun 20 Apr 2025 07:00:21 +0000
Files and hashes:         1: 1-ytL3MQL4QkgTO5M87Ngx4l0rX4.roa (hash: cV/JZjXqlK0Ai67oOxA83/8y7fRmowTguIDArz2zLJQ=)
                          2: 5hN1_iD-LZxHAhEyBgtlC238G_I.roa (hash: l8+npfa+10nPLJ6F7ekx7l+emy/4/lpiXsSvRC05Yys=)
                          3: AmbhHmgyu8yrBMkbzGnkI8tsxAo.roa (hash: uwxXW79FBxLkGN+Si8BRtGUDQUqQKGnxx/ByuHQICRk=)
                          4: ODrsbMjG9qdaweSVu2hQiAWib_4.roa (hash: dfEGlvo51D/Az6e2gNlFUybGMrG7MrWpkapNXLlycXI=)
                          5: XfGWZo7cWfWs0AeA21V-Q-Ft8as.roa (hash: wdeLE3gHNM1FBTeMpoIo0xzT6JjYdbIh/aFzX+q2qOI=)
                          6: djclzzPckUbxpiPz0aT2KIeq3vg.roa (hash: qMAON/McMcYGiRAj8ZSkjcUFapaBDpY0uWQQ678R//0=)
                          7: imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl (hash: erhK0BgVVYzWJ26xpE83KmJW8cQtzzvVKBwdAHW/+bc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:d9:27:bc:84:82:69:31:da:ae:e5:3c:d0:30:82:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
        Validity
            Not Before: Apr 19 07:00:21 2025 GMT
            Not After : Apr 20 07:00:21 2025 GMT
        Subject: CN=7193a9b508518247faa4df25ccf8e5cc8a8b6bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:76:ee:5f:22:11:41:fc:df:28:ab:b8:87:31:
                    96:f5:25:e9:c9:18:d3:3d:73:41:f6:8b:98:09:72:
                    02:9a:dd:a3:cc:9f:8e:93:1b:54:64:66:d0:6b:57:
                    b4:61:0b:a3:7a:ff:41:58:83:ac:73:74:eb:26:31:
                    42:ca:71:a6:f5:23:14:7b:8e:1e:c2:01:3e:de:50:
                    16:9c:e2:5f:bb:03:83:ea:10:b0:cc:58:58:27:66:
                    b0:a7:57:15:c7:24:0b:33:d6:c9:48:52:c3:d8:76:
                    e4:8e:57:12:76:81:75:6e:e1:54:bb:6b:79:2a:29:
                    8b:9f:2c:25:da:22:55:23:bc:d8:39:9c:2f:89:19:
                    5b:d6:41:9c:46:c3:94:21:fd:24:b2:cc:88:60:ce:
                    64:0a:78:39:60:3e:24:e0:73:86:16:8d:69:65:87:
                    4a:ec:db:f3:4a:7a:96:25:72:a1:fe:59:bd:7b:e2:
                    77:e9:df:1d:d1:47:2d:6c:d3:22:c9:40:eb:fa:12:
                    70:76:92:84:a2:e6:a6:a1:4c:0a:c2:10:32:54:3d:
                    17:c5:2b:d6:35:88:a4:73:4a:3a:25:d9:ed:46:7a:
                    07:53:63:03:f1:40:e6:2d:bd:09:55:0a:1a:92:7f:
                    bf:4f:12:cb:e4:27:4c:3c:3c:fc:45:0e:2e:ab:03:
                    3d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:93:A9:B5:08:51:82:47:FA:A4:DF:25:CC:F8:E5:CC:8A:8B:6B:C8
            X509v3 Authority Key Identifier:
                keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d0:a2:82:5c:c1:34:dd:bd:b7:31:fd:ab:4d:de:19:ab:6b:
         70:f8:9a:64:2e:f3:0a:d4:ff:ae:43:b1:8c:f1:84:42:75:54:
         97:c4:b8:77:5c:a5:79:8c:97:10:0a:2f:10:e3:00:dd:2d:68:
         da:a5:4f:45:cc:02:c9:02:39:eb:a4:c7:0a:06:b0:8a:cd:94:
         1f:b8:94:40:60:42:b3:86:5f:3c:ef:be:26:80:80:25:0b:ad:
         14:8f:21:e4:d5:ce:a2:97:23:64:3f:2e:74:c6:b3:26:31:66:
         18:ff:93:2b:9e:25:6e:55:d9:52:44:e4:81:54:bf:28:3f:d2:
         5e:9d:4d:8e:9f:d9:60:0e:4b:b8:4b:c6:99:09:99:0a:4e:06:
         eb:54:00:d6:b1:23:1b:9a:98:57:ad:0a:72:10:0d:76:00:26:
         3c:8c:d3:e8:4d:32:7f:3f:d9:64:af:48:7d:3c:77:1b:07:30:
         6e:4e:8d:8c:be:3b:b5:68:9a:d2:9a:f5:e8:b8:79:b2:78:7e:
         62:f4:31:fd:f7:fa:79:5e:71:04:e5:94:ba:46:e9:9d:93:a5:
         84:43:12:01:81:60:f6:9d:b9:d6:2f:05:07:45:86:a1:43:a5:
         79:74:4f:4b:d8:ef:b2:c4:80:b5:66:d1:8e:80:35:53:1b:e0:
         57:42:8f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:31:02 2025 by rpki-client