Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
File:                     u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft (raw, json)
Hash identifier:          WO7F7AegAZeWDRQ1YTcLLjhqZ3MR5eZVhJxeNaKhiAM=
Subject key identifier:   AE:8D:5E:C4:53:63:8B:23:D5:EF:51:32:C4:E6:A1:E0:47:6D:97:3D
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Certificate issuer:       /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial:       01959073A48BB3491E256B54B7A327DCC44F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
Manifest number:          1499
Signing time:             Thu 13 Mar 2025 17:00:52 +0000
Manifest this update:     Thu 13 Mar 2025 17:00:52 +0000
Manifest next update:     Fri 14 Mar 2025 17:00:52 +0000
Files and hashes:         1: 5g1tjgsfll7LK-waAj9bTQ2h-3c.roa (hash: 8D1n33aMnmCgAozOd2zA5z3xSs5pmebBm8HLBHCuK3k=)
                          2: LH7w3vOlTcRmJHq2EtyJwGzFlEE.roa (hash: BdRuTFIKBfgw0BiPV5lECgqiOEd6ZtJOGCfbNoIAYBE=)
                          3: Q6nJt5OyB3yAAOcFFRG5qOehAok.roa (hash: KO9C76YDm/Okx701iaZdKEGFLB0y+hfe45N6CADpuPc=)
                          4: mSE5jFaDyQq229roQ5L8OUwLYf8.roa (hash: 9syYjhG++XjU5LLyMYmj6GtRt7K4tV+VTMTyeR8mVrI=)
                          5: mrSrlKE7xCslqlPTXvwVWDdiqIY.roa (hash: p/QlzvPV8hfJGKn1J+54dIx9OQB/pBF0YHBs+kQo1HM=)
                          6: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl (hash: up6PQIO6Z95/kKanm89GCa649M07MF3p1QanoUtdRsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:90:73:a4:8b:b3:49:1e:25:6b:54:b7:a3:27:dc:c4:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
        Validity
            Not Before: Mar 13 17:00:52 2025 GMT
            Not After : Mar 14 17:00:52 2025 GMT
        Subject: CN=ae8d5ec453638b23d5ef5132c4e6a1e0476d973d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:96:f8:64:25:c2:12:5c:96:18:ba:31:80:
                    8b:df:fd:56:ad:8b:b6:ea:94:1e:f6:48:62:b8:9c:
                    40:1d:7e:0d:78:93:e4:f7:60:6f:12:29:c7:46:0f:
                    48:bc:91:ed:43:c3:fa:20:c7:73:d4:21:7a:dc:25:
                    8a:48:2a:ec:c5:e7:d1:0e:68:3b:22:5a:43:96:68:
                    ab:ca:c5:06:36:15:14:36:93:c3:39:c6:96:a0:25:
                    3c:34:af:a2:f8:75:00:22:bb:82:31:67:6f:48:fc:
                    5f:93:36:7b:a1:d4:f9:25:dc:52:5b:f4:21:b6:a7:
                    65:3d:ab:b2:1b:be:c4:2d:7b:bd:5a:d5:77:05:40:
                    c1:00:e3:ff:5a:af:d2:e0:28:bc:fe:d8:87:a0:34:
                    d0:aa:67:51:35:be:5a:19:7b:31:3d:4c:ad:09:3b:
                    6c:66:74:cd:c7:7c:04:6d:60:4b:ac:c0:87:e4:9c:
                    0e:10:a1:c4:6b:f4:e8:b8:84:e9:6e:28:16:d0:06:
                    04:fc:fa:82:a1:9a:be:97:5f:e8:88:62:ff:e6:50:
                    5a:53:a8:15:f5:f0:c0:19:25:57:24:7d:50:02:2f:
                    a2:71:a7:1c:f2:66:2d:e2:7c:bd:2f:2e:9e:80:f0:
                    c3:58:49:3c:5a:20:50:38:0c:11:3d:c2:e3:ad:23:
                    18:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8D:5E:C4:53:63:8B:23:D5:EF:51:32:C4:E6:A1:E0:47:6D:97:3D
            X509v3 Authority Key Identifier:
                keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:9e:f6:82:d4:51:85:a6:c4:17:2f:64:c2:dc:e3:79:04:e9:
         4d:10:e8:fe:21:2e:21:a6:1b:f7:07:84:c4:86:50:fd:cf:10:
         e4:ec:32:bd:61:69:50:7a:52:f5:6f:42:74:8d:35:eb:d0:ef:
         62:df:22:80:61:fc:3c:ef:a9:70:7c:92:80:a4:33:e3:cf:0b:
         75:4c:5a:19:87:ce:44:6d:38:86:8e:cf:34:d8:94:df:fd:2d:
         b5:de:a4:7e:b6:39:22:e5:18:17:bf:ce:f3:96:bc:df:ca:98:
         ac:ee:63:06:a7:d6:a7:40:bd:6e:7a:aa:5a:34:c6:84:98:9d:
         f1:c7:8e:79:37:96:e4:1b:6c:70:15:7c:0f:43:c3:81:cb:76:
         7b:a9:e6:a7:06:a8:70:ff:e5:49:1b:2a:3a:07:92:26:b8:b7:
         fd:8a:ce:6e:da:66:ef:e2:36:cb:01:d3:6e:19:a3:b0:9f:44:
         16:fc:d3:b8:35:70:79:61:34:df:be:f5:ad:6e:86:c3:d5:e5:
         a4:73:2a:43:98:f6:c4:e3:ed:98:c6:f5:f6:7a:ba:5c:98:b9:
         91:ef:64:8f:1b:a3:a8:85:90:4b:78:dc:d4:15:75:30:f1:fe:
         54:d4:2c:04:62:f2:74:a8:83:7a:c2:68:65:67:b2:97:3b:db:
         d3:00:3a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:09:05 2025 by rpki-client