Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
File:                     IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft (raw, json)
Hash identifier:          b1m/YXMw92xaWvDqk9DOSVzRbxtSVO6MzTVaRGgPdJ8=
Subject key identifier:   2E:53:8C:01:52:CC:CC:FA:B8:76:3D:0D:FC:08:C6:EF:D9:51:27:3C
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Certificate issuer:       /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial:       01960E31B8CE3EABEE923C0E9DCBF4E1FE66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
Manifest number:          1503
Signing time:             Mon 07 Apr 2025 03:01:01 +0000
Manifest this update:     Mon 07 Apr 2025 03:01:01 +0000
Manifest next update:     Tue 08 Apr 2025 03:01:01 +0000
Files and hashes:         1: 0V8p8L8dtXBYUhLAsONxVlRlhCQ.roa (hash: FSFySJSs/qbloIagr9SbP4wNuB1HL9DbTkgN9N81Lx4=)
                          2: IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl (hash: EU/LQF/py3d7gwZjDiA4YaSW30P6Gc6O/ee/JYdxO9U=)
                          3: Q8etSu2zHMkh6fhsXllq0m85sqg.roa (hash: Aasfzwuv8iCEYaBcficgkTOl5p9Jnx6y2dL1fKqUxfY=)
                          4: R99dYNqYsBqUsChphTk93qUHPQI.roa (hash: oITPzkMB7sLtvkSUO+8ORkUXyH71yZzthGpvgYu/GMw=)
                          5: jMxhOzBSeMP0LtXLXP7EcBhoAB8.roa (hash: 0uCBihxg/sVC+EOc4ZTIYJf8x4v2kocHLJVgzm9lM24=)
                          6: wxI5PYnsJV_pw-ZAaHHG4istOuM.roa (hash: MuOSU2DUhtvwHObwNbqVRHZsUbztYSCYXG4GZ/vH3/I=)
                          7: xT6LSHcklUc3M3cH3H2fye8Rh5Q.roa (hash: TTxYyL6eHUVGHRRaGbbWfPgpApE3u59SB8dEYudVkS8=)
                          8: xv12OPtaTpKWrICjs27-0WrsmIg.roa (hash: X8XG/cdIF+kjQf+VKvmL60lRdGE9r9sJ1I4ddr9jEgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0e:31:b8:ce:3e:ab:ee:92:3c:0e:9d:cb:f4:e1:fe:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
        Validity
            Not Before: Apr  7 03:01:01 2025 GMT
            Not After : Apr  8 03:01:01 2025 GMT
        Subject: CN=2e538c0152ccccfab8763d0dfc08c6efd951273c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7c:31:82:41:1d:c8:2f:bb:73:82:1c:56:af:
                    50:05:b2:79:1f:31:05:3a:e5:e8:79:09:78:4a:11:
                    00:f6:3f:58:8f:a8:43:72:8c:db:8b:a8:fd:79:50:
                    59:56:e3:78:58:92:7c:b0:4d:db:ef:23:9e:87:31:
                    21:06:e5:f3:32:24:48:cc:b5:79:87:e8:51:ca:ec:
                    ae:85:46:b1:f0:82:40:b6:38:bb:4e:1d:0b:dd:e4:
                    d3:45:f8:2b:59:c9:46:5f:c7:b2:ba:2a:91:a0:62:
                    6b:8d:be:03:27:64:e2:d4:87:a3:11:be:b5:35:96:
                    a1:66:41:77:e8:cb:d8:86:99:2e:e2:dc:92:cd:77:
                    5e:50:09:26:ca:d2:fa:9c:c5:90:01:fd:f5:bb:96:
                    e1:49:4a:87:8e:39:a6:0f:10:b0:d9:e7:74:c5:81:
                    33:63:95:bd:32:10:04:c0:9c:36:a4:a8:ce:2e:39:
                    86:a8:8d:35:94:6d:09:12:51:9d:95:6c:6d:7d:ee:
                    2d:86:0b:55:be:46:1a:13:48:79:1b:00:c1:6c:0a:
                    5f:03:be:30:96:34:c8:19:d8:9d:80:9e:b3:d1:ad:
                    d5:b8:42:71:ba:f6:3b:8b:cd:bc:b5:4a:6d:23:53:
                    b0:50:17:40:d5:c3:b9:76:32:c1:f7:7a:3d:1a:73:
                    97:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:53:8C:01:52:CC:CC:FA:B8:76:3D:0D:FC:08:C6:EF:D9:51:27:3C
            X509v3 Authority Key Identifier:
                keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:14:a6:95:c7:48:c4:4d:2a:16:39:3d:fb:c5:9a:60:4e:ce:
         6e:e8:2d:cc:3f:89:1e:38:ca:e3:6b:59:2f:9d:45:df:4f:1d:
         d5:c6:0f:81:98:d3:87:96:38:e8:10:9b:02:8a:97:91:aa:8b:
         3d:64:3f:c4:f2:65:d0:fa:76:20:6c:3a:be:e5:5f:ea:81:e5:
         99:c2:04:b6:c4:14:74:f4:d9:70:73:81:cb:f6:83:70:d8:89:
         24:a7:ee:34:32:d2:28:58:2c:f3:b0:1a:8b:ac:cc:21:05:19:
         4a:8f:74:97:75:a7:8f:75:0a:a5:e5:3a:84:40:ff:99:62:c0:
         f3:6e:cc:97:16:08:05:9a:cd:d2:c8:c7:9a:09:80:95:e7:07:
         99:2d:0b:62:54:5d:6a:b1:d7:0c:b1:a7:98:9c:be:0b:07:4d:
         40:4c:27:0a:41:34:c3:68:a9:ee:d7:9b:46:bb:19:4d:ef:c2:
         e8:b5:83:ab:5f:fe:04:2c:9f:e9:be:a9:50:7d:08:6d:cb:25:
         0b:dc:cb:54:b9:85:10:6f:ef:72:dd:e3:90:9e:42:da:43:ad:
         bb:07:68:57:84:11:fb:37:fd:eb:6b:bb:bf:36:4e:d9:84:e0:
         ad:ff:ee:8e:8d:fa:a9:cd:77:05:e4:43:0b:ba:f7:a3:bd:4a:
         5b:9b:12:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:40:02 2025 by rpki-client