Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
File:                     rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft (raw, json)
Hash identifier:          B4alYb+cGFQGGiYDJ2OmsDQm8MzDqHjffx/8x4T5N2s=
Subject key identifier:   4A:1C:11:5A:D5:94:52:06:19:E1:F7:CE:B6:60:D3:7C:06:E5:3E:91
Authority key identifier: AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47
Certificate issuer:       /CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
Certificate serial:       0195797E1E9307E3784DF028F9D375606A5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
Manifest number:          148C
Signing time:             Sun 09 Mar 2025 06:01:03 +0000
Manifest this update:     Sun 09 Mar 2025 06:01:03 +0000
Manifest next update:     Mon 10 Mar 2025 06:01:03 +0000
Files and hashes:         1: FbMzdZ6d131ZqxxEpoI_GtnkvJI.roa (hash: 7d7wChwbMGPeRXkmkbPscoua0cT1OAJDT7heJW95UEI=)
                          2: rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl (hash: 5DUojQd5Q22gLrgRvwLW5kmf8TeIFDSeacWIY+lPdPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 10 Mar 2025 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:79:7e:1e:93:07:e3:78:4d:f0:28:f9:d3:75:60:6a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
        Validity
            Not Before: Mar  9 06:01:03 2025 GMT
            Not After : Mar 10 06:01:03 2025 GMT
        Subject: CN=4a1c115ad594520619e1f7ceb660d37c06e53e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:13:a1:73:b0:46:0c:1b:0d:90:20:f5:eb:5d:
                    98:3b:0c:b2:95:b8:b5:12:ca:b8:d8:3f:9c:64:52:
                    5e:1a:08:ca:b6:b5:c5:0d:65:ca:a2:05:7a:79:8b:
                    9f:6b:57:f0:ff:84:15:3f:e0:74:e3:5e:e3:f1:62:
                    dc:47:10:7b:fa:f0:33:cc:dc:a9:e1:ab:c3:31:38:
                    9d:6c:c4:d4:dc:48:34:37:36:0f:23:c3:09:e1:16:
                    5a:92:e9:b6:73:2b:ae:c1:af:5d:b0:6b:8c:41:36:
                    5a:4c:55:28:83:bc:a0:d8:fd:60:aa:b6:38:9c:e0:
                    99:fa:94:0a:c2:cf:40:b4:0d:9b:b9:96:94:31:90:
                    5d:a6:7c:15:0f:10:c7:35:ef:e9:1e:be:b0:fa:5d:
                    87:9f:63:f2:01:af:cd:c1:74:01:d0:c2:58:7e:8f:
                    78:e2:20:f5:87:2b:64:3b:cb:60:de:ce:0f:aa:a5:
                    24:f1:16:79:5c:0d:6b:1e:51:f3:d4:f4:de:6b:31:
                    94:cc:6f:9f:65:ed:aa:74:80:2d:53:40:ef:df:31:
                    71:9e:84:7e:33:25:5a:d4:ef:f9:93:fb:c6:90:4d:
                    e9:48:80:77:09:43:d1:4a:a2:1c:e4:c2:27:82:0f:
                    84:44:02:84:cc:8b:cc:2a:f9:05:94:49:c9:7e:c3:
                    3e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1C:11:5A:D5:94:52:06:19:E1:F7:CE:B6:60:D3:7C:06:E5:3E:91
            X509v3 Authority Key Identifier:
                keyid:AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d2:ff:a9:31:b9:65:fe:dc:7d:b0:f7:c1:0a:9e:cd:4c:f2:
         63:b3:ad:88:48:99:02:02:7e:b6:01:d5:97:d5:6e:e5:77:b7:
         6b:e9:91:8b:39:dd:f4:d2:87:8c:86:9a:5a:4a:32:d4:fa:ae:
         a9:33:2f:17:c6:b4:8b:1e:0d:ad:04:7f:f3:20:20:b4:71:23:
         0a:d6:3a:94:3b:40:ba:60:6f:cf:7f:99:52:8b:4e:06:d3:f3:
         47:a2:6e:03:2e:85:a9:f7:c6:78:ac:4c:72:fa:2d:11:c9:50:
         7f:0b:57:bf:3b:4f:a7:de:e0:51:69:a6:62:78:2b:25:10:a5:
         3c:95:dc:f0:b7:b3:f1:71:fd:35:ae:d7:c6:82:74:13:a5:e0:
         d5:3e:1c:a4:dc:bf:11:10:20:50:7e:11:ef:7a:59:32:9e:48:
         fc:61:38:2a:d2:30:89:ee:16:43:b3:3c:7f:d0:e1:cc:35:19:
         77:d1:9a:02:48:2e:cd:6c:de:3c:be:35:75:b9:ca:27:66:c4:
         cf:f3:f1:2c:d9:59:9d:3e:f0:92:c3:e3:bd:66:b8:2d:ad:ed:
         24:58:20:f4:10:8f:b5:ee:7f:e4:94:32:36:d6:48:18:4b:a4:
         29:89:b7:fb:32:12:a9:98:ff:10:ee:ed:09:aa:0d:4b:00:4b:
         b3:df:12:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:18:14 2025 by rpki-client