Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft
File:                     evV91Sx1_OOf_ikVRp2eZW28uHM.mft (raw, json)
Hash identifier:          FrHJExqbrKK9EgqNdncE2aa0nVUxY7feSA3torM6ulM=
Subject key identifier:   FB:21:B4:92:92:83:AD:60:92:6E:46:E6:68:F1:71:DB:94:11:A9:51
Authority key identifier: 7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
Certificate issuer:       /CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Certificate serial:       01964CD91CF57148C18CADB3D8CD9090D242
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft
Manifest number:          0152
Signing time:             Sat 19 Apr 2025 07:00:19 +0000
Manifest this update:     Sat 19 Apr 2025 07:00:19 +0000
Manifest next update:     Sun 20 Apr 2025 07:00:19 +0000
Files and hashes:         1: BG_3zKuOT7_cjnF9POkFtbvMS5o.roa (hash: 5BKguR1fraSafJ4sAR4xcrcTLRANwDpsPJzlqiUGbA4=)
                          2: Ju4W4EtU2nog7kQC4aXtFa8Hecc.roa (hash: tPAmYhNOUqRIJRD4J2TRhKcrPldpUpw9J1YTx+CS3dg=)
                          3: evV91Sx1_OOf_ikVRp2eZW28uHM.crl (hash: kunsBjSXcuUQ7YeK8nmdRyaKNPkg0iguwTqgQiOkwCQ=)
                          4: fM8xeQxkoJSIoALDtoZFL6CSUo0.roa (hash: LcVjaA+2kIEDTRTVcEKC7frWbhDk906Dn35ydCZYT1Q=)
                          5: w2cifThx8liTp2UosKmPtTuVnbg.roa (hash: 4M3/VZ3vA0bwXmuEW9DfiaSDaEw4jhqFMcpDjEAK5AY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:d9:1c:f5:71:48:c1:8c:ad:b3:d8:cd:90:90:d2:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
        Validity
            Not Before: Apr 19 07:00:19 2025 GMT
            Not After : Apr 20 07:00:19 2025 GMT
        Subject: CN=fb21b4929283ad60926e46e668f171db9411a951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4f:42:0e:8d:8f:2b:e9:4f:ea:0d:10:64:dc:
                    1d:a3:04:82:0f:dd:45:b9:fe:fc:b5:df:c4:3c:fd:
                    e3:8b:f6:31:80:4d:56:7e:dc:34:29:ac:58:24:bf:
                    75:fa:5f:06:b7:9e:23:9d:c2:71:bb:40:e4:d0:a7:
                    a5:ca:09:c3:b3:a4:08:a3:05:21:dd:3c:a3:74:c5:
                    90:61:41:2d:4f:07:88:16:e7:23:b2:bf:93:74:74:
                    89:21:49:1c:fd:6a:36:d0:e9:d3:8a:1f:f9:d8:f9:
                    a3:43:81:fc:60:96:ba:36:db:be:0c:35:c3:f0:b7:
                    1e:87:8e:9e:4f:7d:b3:5a:96:7b:12:84:30:e1:f3:
                    50:44:44:e2:89:09:02:9e:28:90:ed:17:5b:86:02:
                    58:9f:c0:a3:71:b8:9c:7d:cf:a3:85:12:a4:7a:eb:
                    ef:18:e2:8d:5d:a1:30:92:d6:45:c2:ed:12:ea:f0:
                    78:c1:c1:9c:c4:31:d5:fd:07:ca:73:50:b9:fd:35:
                    5b:02:5a:f0:d2:44:18:2c:93:9c:a0:4a:b2:43:4b:
                    67:a9:f2:22:25:f8:f6:c6:49:f5:53:89:5d:c6:de:
                    5c:95:e1:5e:2b:19:90:53:a5:06:dd:cc:a9:cb:6a:
                    8c:c4:87:a2:86:db:d9:fb:96:ce:91:38:1e:31:70:
                    bb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:21:B4:92:92:83:AD:60:92:6E:46:E6:68:F1:71:DB:94:11:A9:51
            X509v3 Authority Key Identifier:
                keyid:7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e6:22:31:99:b1:d6:02:0e:c3:20:18:0b:fe:9d:8e:0f:bb:
         74:7c:4b:c7:7e:32:df:ae:ec:bf:ab:bb:d7:1e:db:8d:62:76:
         e0:43:2c:49:6e:0f:f8:a0:f5:fd:c8:86:9b:b6:94:0d:42:92:
         16:66:56:f0:a1:11:cc:dc:5f:f4:05:d4:8a:d6:ed:94:52:a4:
         f6:65:69:47:43:7c:d7:fd:cf:8e:2a:03:0d:8c:78:ca:5b:67:
         3c:f1:a1:43:c8:07:b9:ef:73:39:30:9e:8f:ca:bf:5d:1b:fe:
         d6:fd:ea:92:f2:d9:d1:b4:f1:1e:b0:9f:80:e9:8e:e9:34:ac:
         74:33:c8:2f:fd:c4:e0:8c:9a:ac:1f:c7:9b:b3:8b:af:a3:9a:
         0f:70:dd:33:c4:d4:6c:8d:be:bd:c6:8a:f7:78:d9:e2:69:b4:
         1f:9b:5e:ce:da:2e:c0:bb:43:7d:50:3a:d9:70:c4:1b:be:46:
         76:c5:f6:09:14:6d:20:aa:75:a6:cd:c1:08:9e:b8:30:27:1f:
         11:b1:6b:16:55:3a:68:69:11:00:21:95:3f:73:b7:d3:94:89:
         ae:ca:2c:a6:1a:77:05:84:0c:b9:9b:07:97:8f:bf:1e:23:31:
         8a:79:3f:4e:a9:03:14:f5:d4:cb:32:fb:d6:1e:b3:5e:5f:a9:
         86:31:a4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:12:17 2025 by rpki-client