Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
File:                     h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft (raw, json)
Hash identifier:          cK62PauROn8NPFieyUCrBdGAjgQbHVwtuuvzjoYeveQ=
Subject key identifier:   6D:D6:A1:7E:F7:52:D9:DB:06:83:22:7B:57:01:5F:71:3D:3F:52:74
Authority key identifier: 87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65
Certificate issuer:       /CN=8751759bb92cba5520536945ed1b3fa5ad151b65
Certificate serial:       01965538321620A41F1547E494516F65EF1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
Manifest number:          1500
Signing time:             Sun 20 Apr 2025 22:01:08 +0000
Manifest this update:     Sun 20 Apr 2025 22:01:08 +0000
Manifest next update:     Mon 21 Apr 2025 22:01:08 +0000
Files and hashes:         1: E-8vbhQrqOgxDM421GCrllAKNII.roa (hash: i8JO2h6EgpqD2l/z1ws1vhndMFZtWe/14XyRVS+B6/I=)
                          2: h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl (hash: Wv0/2bfdb5Q4b+9Ai/2XdqZjgDQl02SObYkxi4uEWdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 22:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:38:32:16:20:a4:1f:15:47:e4:94:51:6f:65:ef:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8751759bb92cba5520536945ed1b3fa5ad151b65
        Validity
            Not Before: Apr 20 22:01:08 2025 GMT
            Not After : Apr 21 22:01:08 2025 GMT
        Subject: CN=6dd6a17ef752d9db0683227b57015f713d3f5274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1d:3a:fc:1a:f1:95:0f:d5:e1:07:a5:4d:47:
                    2f:ad:44:fb:9a:82:51:8e:3e:80:a8:26:d5:8c:48:
                    ec:99:0b:94:d2:9a:44:3e:0d:93:81:c4:f2:ee:43:
                    09:e2:c8:e6:2b:31:43:c6:da:a7:38:11:42:bf:20:
                    9f:14:04:1e:4d:db:2e:06:94:71:36:cc:57:06:c5:
                    a8:5e:7f:f9:e2:1f:f0:9f:0c:4b:78:5c:64:23:e4:
                    d8:d0:c0:8e:10:f1:59:1e:58:96:db:2f:08:d1:c0:
                    be:56:1e:c6:d4:f4:d0:c7:10:ef:ec:d6:93:92:5f:
                    a9:46:c2:68:91:13:f0:89:aa:29:73:84:89:e3:02:
                    a3:c0:ea:9f:da:24:ae:22:9b:c5:12:9b:a1:54:2f:
                    a9:dc:ce:96:df:17:b9:22:f7:07:96:2b:25:f4:50:
                    7e:27:be:99:92:21:3b:f8:b1:74:9e:df:4c:93:44:
                    d3:9d:b9:d8:7f:f7:8c:a5:cc:6b:4c:71:15:73:cd:
                    42:a1:eb:d4:b2:0f:78:cc:86:48:25:e8:07:23:11:
                    24:a5:f1:27:a5:c8:15:77:35:99:ed:30:66:55:77:
                    54:f5:c9:f1:c3:dd:be:13:69:45:32:b7:56:e1:1a:
                    34:c9:70:59:77:c5:b4:76:4f:5f:38:ea:82:dc:85:
                    3c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D6:A1:7E:F7:52:D9:DB:06:83:22:7B:57:01:5F:71:3D:3F:52:74
            X509v3 Authority Key Identifier:
                keyid:87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b5:fa:c9:66:83:ea:e5:8e:c4:38:de:72:0b:a4:7f:f8:8d:
         a1:3a:da:46:9e:b0:93:af:46:75:8a:dd:a2:1b:c2:7b:6a:5e:
         59:f6:da:6c:40:54:89:af:e1:70:1a:ee:5f:e1:7f:ce:1d:12:
         f8:2f:6c:32:65:42:25:83:e0:9d:bd:2b:52:55:3c:00:59:ae:
         f7:a0:83:7a:fa:d4:2e:3f:cb:cc:71:86:d0:66:f6:e0:b6:fe:
         78:74:80:d6:e2:08:75:b7:4c:d1:ae:04:43:d9:10:fc:86:1e:
         e6:80:31:90:a8:3b:6b:8b:f0:e2:7f:d7:53:5b:29:70:6e:9a:
         ab:25:1e:b7:74:e2:90:b7:64:21:f6:56:15:be:17:bd:3d:92:
         89:2e:f4:a6:07:94:5a:4a:26:0f:87:3c:de:6e:01:18:dc:3e:
         1d:88:02:65:bc:87:81:45:df:11:5d:3f:42:61:66:27:43:11:
         12:ff:35:67:73:1d:b5:9f:21:ab:56:e6:52:f8:96:08:28:78:
         0c:d2:25:b0:53:83:2e:17:ee:ee:7c:c0:fc:b5:c2:dd:43:17:
         3a:3e:19:b8:9f:c5:1f:f9:6c:07:41:1d:e9:f4:04:80:a1:70:
         c8:df:21:e7:66:ba:e5:96:b9:45:7e:95:ef:f5:49:91:bc:1d:
         cc:b4:20:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:21:33 2025 by rpki-client