Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
File:                     AH5rWqQ302kxUVAqIRSW431K4sU.mft (raw, json)
Hash identifier:          OzQWTtfwsy3/2xX8b6R6p6d3EECS0kHNYsmIifPRtjo=
Subject key identifier:   AE:36:5E:31:75:B4:46:EE:C3:4B:64:F7:33:2C:AD:17:AD:29:74:80
Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
Certificate issuer:       /CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Certificate serial:       01962A4E2920795EDB23575F75AFA1E1224A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
Manifest number:          1265
Signing time:             Sat 12 Apr 2025 14:01:27 +0000
Manifest this update:     Sat 12 Apr 2025 14:01:27 +0000
Manifest next update:     Sun 13 Apr 2025 14:01:27 +0000
Files and hashes:         1: 6F_Q4XpRKgEexZcCv84M_kGGwx8.roa (hash: jzUe5knYI2NZSGwBtOwn1dJh+2wMTZvaI6KEnoCDN6M=)
                          2: AH5rWqQ302kxUVAqIRSW431K4sU.crl (hash: 4Mpa9bBIi5ZEMKiXKjamOUky54JVVEh0HR7IPZQciYs=)
                          3: Ry-o6BvHlNuOD_d14wdLVmhDsgM.roa (hash: S/jHrYJPbAAtdA+RZZOotd+GpMfWfmGdhS0b8Kc0V30=)
                          4: VFSqRzcGMZ3Y2JFZb1Fsblb27nQ.roa (hash: UUfcXkF0GWrqVSNu+3z9VDCb/uLRbXj4ZsTEe5POQ7M=)
                          5: W_b0Ax5Mpx_fhvv-92F8GttV04I.roa (hash: y/SVVGY3IuSmMubg1JbInzxD9q8qop1Ol37UDvpp3pE=)
                          6: gZrmTs3ukQIINjYb9akCKLL_iZM.roa (hash: WbSg2tywBgMqpLgEuUZPOKgd7CPp10c7QuJJvyuvaco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2a:4e:29:20:79:5e:db:23:57:5f:75:af:a1:e1:22:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5
        Validity
            Not Before: Apr 12 14:01:27 2025 GMT
            Not After : Apr 13 14:01:27 2025 GMT
        Subject: CN=ae365e3175b446eec34b64f7332cad17ad297480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:05:79:6c:ba:7b:55:8f:8e:3f:16:70:25:ac:
                    c8:62:79:5d:a4:6c:48:97:5b:25:7a:29:28:a2:a1:
                    78:df:a5:20:88:10:e0:98:d1:9b:b8:9e:e1:71:1d:
                    ec:df:4b:7d:0f:58:7d:c3:d6:22:02:74:c5:aa:1e:
                    da:9f:b1:41:c1:3a:e0:6c:ce:5c:c6:73:73:ed:83:
                    c1:28:6f:39:b4:0a:65:8d:e2:87:ab:ad:43:3d:8f:
                    0a:14:b9:48:db:01:94:b2:e5:c3:49:31:61:e3:09:
                    1f:a7:11:3e:c1:c4:19:5a:09:c4:15:62:3b:83:f2:
                    6c:4e:c2:f3:30:56:a8:9d:28:4f:1f:39:2f:bc:da:
                    5e:5b:e4:ae:47:1e:26:18:bd:ab:7f:5f:a2:42:12:
                    df:48:63:aa:79:9a:e7:8a:bd:f5:37:46:ef:41:9b:
                    dc:50:3e:14:11:11:80:93:00:4e:e5:37:fb:76:51:
                    6c:79:3a:04:95:a1:70:dd:26:ca:6d:82:b0:15:81:
                    fd:45:21:6f:0f:8d:78:31:9e:28:c3:e6:28:51:a2:
                    91:4c:ad:cc:ff:4f:e4:ea:bf:7c:28:ec:d8:78:ef:
                    1f:2b:e2:71:e8:42:42:38:a4:13:23:df:a6:9e:7f:
                    0c:d5:e4:e6:78:b5:d6:af:21:48:d4:59:aa:39:de:
                    28:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:36:5E:31:75:B4:46:EE:C3:4B:64:F7:33:2C:AD:17:AD:29:74:80
            X509v3 Authority Key Identifier:
                keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:0e:46:91:d2:64:be:80:e1:03:c8:36:ec:33:4d:b7:3c:05:
         5b:f0:bc:86:c9:b1:09:e3:23:03:9b:62:ad:87:f2:ac:88:e3:
         0e:b8:8c:7d:a7:80:a8:8c:bf:f8:72:50:81:b3:b5:8e:e8:5a:
         4e:46:fb:f7:5f:be:db:0a:8e:52:cc:15:61:5d:48:8b:fc:e5:
         35:b8:b1:35:0f:32:94:2f:1e:ec:12:ee:02:7e:a2:4e:dd:de:
         73:81:b9:62:ae:d2:91:84:a5:b7:09:86:6d:0b:30:fc:13:fa:
         63:91:d4:dd:6e:31:b8:21:a3:bd:82:13:8b:20:f8:bb:fc:82:
         4d:a0:71:e2:fd:e7:9c:58:0e:23:16:43:26:fc:41:4e:56:e1:
         41:8d:2d:87:ac:d1:c4:97:f0:be:4f:70:2c:5c:90:71:b8:85:
         da:fe:f0:75:df:c5:f0:89:a3:00:af:a2:22:a6:36:3b:2e:3a:
         34:6b:a4:b9:8d:42:61:32:aa:33:24:64:a1:4b:9e:73:1e:e8:
         57:59:d2:61:c3:b8:79:91:e2:69:32:a0:2d:48:c1:fc:e8:8f:
         fc:82:9b:1e:33:4e:57:0c:de:a3:4c:6c:10:6c:e3:56:e7:ad:
         ad:ab:49:d8:11:7b:8b:fa:fb:12:3b:fc:40:94:78:36:89:a1:
         ad:83:2b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:47:57 2025 by rpki-client