Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
File:                     yuzkHLwsMGJu8qKNGDny1sR1fz8.mft (raw, json)
Hash identifier:          sRSCEQvpIom0gTLZdU6URiYqAi0Rfm7PMW6k6m9tmgo=
Subject key identifier:   21:21:2C:27:9B:0D:40:F9:C9:11:60:87:C3:06:14:56:46:1A:53:C6
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Certificate issuer:       /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial:       0196433184AAD4A8C13ADBB00497AA518810
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
Manifest number:          1500
Signing time:             Thu 17 Apr 2025 10:00:40 +0000
Manifest this update:     Thu 17 Apr 2025 10:00:40 +0000
Manifest next update:     Fri 18 Apr 2025 10:00:40 +0000
Files and hashes:         1: 4e_esTadQCaE3n5sXcrWU4jOosk.roa (hash: 6WRB/tXZjMM79bwzWzJPIybrouf6h4CCu2BnZyX47DM=)
                          2: 6-71hsfN7Sg9SqcN7ij5Ydd4vxY.roa (hash: iJ+ODuzSS+eoKFDYbDz9e9c9YTvR+yNB1U32FzztfQg=)
                          3: HCBFWHPbguHhYNXyj3CYrDXYNWo.roa (hash: YWHjbWrm4zcEsBNnp7QDqMn1mBuhsTvb3ueYJ3IoUgs=)
                          4: V_-pi-_FRBXageOHGy8QNDeBiFk.roa (hash: VgqGvjscQM+9CLy4OZeK0OAAcSQ66x9VqqFHfhpG7Dw=)
                          5: gKm9U9kV3usN6GfYJPy4pqvULX0.roa (hash: K9fqqKzRvHHDY8DtMbWp1xPSx9UsJ8K3o3kBsz7gZhU=)
                          6: hDp1-1e9H-OB_XxdhBwbZmZOjwU.roa (hash: RlVKHFwEDLlyQQzASoSjM9hIAoQIeVOrf1r1UW38OlQ=)
                          7: tTtHoX1wSZCp5whsaQk__p5Qj-c.roa (hash: XeNLM4ma2PLd2XIUXqACuWWh4dYsZ4F8oRpJO/BVSZc=)
                          8: yuzkHLwsMGJu8qKNGDny1sR1fz8.crl (hash: sf1X4HXwnirTPG4h5aUKQ/HdwPFRdQ8/Nd5qv0RM+BE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 10:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:43:31:84:aa:d4:a8:c1:3a:db:b0:04:97:aa:51:88:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
        Validity
            Not Before: Apr 17 10:00:40 2025 GMT
            Not After : Apr 18 10:00:40 2025 GMT
        Subject: CN=21212c279b0d40f9c9116087c3061456461a53c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a7:aa:59:a2:6e:82:3b:33:36:5c:9e:2f:36:
                    c4:13:25:78:64:c7:28:7f:87:2e:7f:b7:da:f2:33:
                    9c:6b:8e:73:b9:05:d8:0b:7b:9c:8c:d1:8a:07:0d:
                    ef:a8:14:74:cb:bb:9f:19:c4:53:04:f0:b9:b2:c2:
                    90:a0:9f:5e:f4:a3:1a:71:13:ed:bb:a8:1c:20:e3:
                    8f:16:59:f1:f7:7a:ec:23:db:f8:59:45:fa:79:e5:
                    78:bf:45:f0:79:b0:c0:c2:2a:0b:9a:ac:b9:06:6f:
                    31:bd:39:e3:91:23:99:4a:a1:25:4b:a9:ea:d5:1e:
                    32:18:51:5c:0d:07:24:f6:0d:47:6d:34:21:cc:50:
                    a0:8d:d9:99:47:a3:2f:f0:51:f4:77:fc:7d:35:8b:
                    bf:33:e7:4c:77:2d:9d:bb:d0:e7:91:8a:a7:b9:fa:
                    da:1d:dd:31:2f:98:42:fe:00:bc:3b:14:f3:f6:8a:
                    a8:e3:fe:0c:ad:a1:a3:f2:73:b7:52:1b:78:0f:bc:
                    39:86:e4:52:1e:18:97:06:57:49:56:be:11:69:06:
                    4d:d0:8c:93:65:e8:a4:67:89:bd:b9:43:2b:b7:45:
                    40:a4:e6:77:3d:18:58:cb:73:95:f3:6f:7c:49:46:
                    d3:d9:aa:01:af:1a:64:32:ee:27:38:f9:a8:da:02:
                    24:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:21:2C:27:9B:0D:40:F9:C9:11:60:87:C3:06:14:56:46:1A:53:C6
            X509v3 Authority Key Identifier:
                keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:7e:3a:69:85:cc:97:cd:8f:e7:f5:22:ca:04:4c:71:1b:fa:
         6a:6d:9e:ce:ab:7f:5f:bf:4b:dd:44:b2:51:1a:23:c7:88:6b:
         af:a8:0e:ad:b5:9e:39:1a:02:a5:e1:19:68:d6:16:1d:60:29:
         57:82:30:09:ae:28:b5:82:c0:4e:1d:19:ca:68:11:cf:6d:63:
         d7:f2:d0:ff:9e:49:6d:1d:25:18:56:ce:06:b0:4d:cf:72:78:
         dd:da:35:7e:79:c8:a0:d1:ac:4e:64:09:36:e8:f5:42:ed:e3:
         83:5f:cb:bc:5f:78:4b:6a:49:32:7f:d5:25:f3:2f:9b:cc:58:
         4f:ce:5b:c8:60:d0:40:15:45:89:37:02:17:51:d1:71:76:1a:
         fb:37:81:84:f8:35:54:a6:71:96:be:9b:5a:3b:75:52:a9:b1:
         c3:51:4e:f9:09:db:6d:52:ec:91:a5:6b:fe:cf:fe:19:38:76:
         6d:d1:67:01:81:72:a1:a6:f3:d0:d1:02:16:04:11:30:be:4d:
         a3:94:0f:4c:d2:54:0b:85:b1:78:4b:6f:d9:24:e6:78:ff:3e:
         28:f2:04:3b:70:c8:1a:5e:a2:55:45:10:f9:bb:08:9f:a7:38:
         f8:fd:20:28:e0:62:d5:8e:15:ff:c8:a1:24:7e:6c:69:ba:34:
         a6:0e:bf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:16:53 2025 by rpki-client