Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
File:                     pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft (raw, json)
Hash identifier:          +jLKEoKH2eoYzQiHE7yog6wP3R+Xu7hhynDlcBgvRcI=
Subject key identifier:   78:60:9C:FC:81:38:74:07:9F:A7:66:3B:94:B9:51:68:A8:47:51:0A
Authority key identifier: A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2
Certificate issuer:       /CN=a566d8337776c98746bd231e69e185db2a9a5be2
Certificate serial:       01964F6D6A83195727B76F580619F94E69B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
Manifest number:          1500
Signing time:             Sat 19 Apr 2025 19:01:32 +0000
Manifest this update:     Sat 19 Apr 2025 19:01:32 +0000
Manifest next update:     Sun 20 Apr 2025 19:01:32 +0000
Files and hashes:         1: 7SmeLFPOio4_Ky8cQI7MC0iIdXA.roa (hash: XAYT9N7Wxwu1sDqxP3875BlVYpctWhwDpAfUj0zPhpw=)
                          2: RruUWaulD3Ts5bLhPekvKUpKn6Q.roa (hash: MWhOe4vkp6Dp9lK3nL7VGv6jbmHEX1p3ZT+EvK2+o70=)
                          3: T1ExYbnMScXpW49W3TzA2j25m2g.roa (hash: y19xXSPvsH3iQpElfEG+Wwae1lHCoSGQlARfuGWM2P0=)
                          4: XUdNcNwhMqFtYsebg1gOrES8fg8.roa (hash: 1SCBRGG9BH3bL2AIx7nLNmgCfpwCw1UXMhqNEU4goqY=)
                          5: lQBaepPxUTQndrJtXUT4fAXM3dQ.roa (hash: GNjGYOD9FpKkiBDma5mL88iC58tqUffFR4KSPc0aU8Q=)
                          6: pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl (hash: SAupzV3yBvUtvgPmrhVuczXT8+2lJjRwTuWR/TMVaPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6d:6a:83:19:57:27:b7:6f:58:06:19:f9:4e:69:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a566d8337776c98746bd231e69e185db2a9a5be2
        Validity
            Not Before: Apr 19 19:01:32 2025 GMT
            Not After : Apr 20 19:01:32 2025 GMT
        Subject: CN=78609cfc813874079fa7663b94b95168a847510a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ef:cb:39:12:5f:f1:88:ec:36:2e:84:45:c3:
                    a2:b0:50:ee:0e:0c:a1:da:7a:e5:9a:9a:d2:09:a5:
                    a5:84:30:2c:b0:30:20:fb:10:6c:55:fc:d8:31:45:
                    56:84:10:3d:8f:12:1c:66:3a:21:76:4a:6e:4d:45:
                    e0:4e:93:41:3b:64:97:a7:7e:3d:1a:8e:e2:fe:dd:
                    dd:ba:50:c0:22:39:5d:5c:3a:55:7e:74:52:36:af:
                    3d:a6:1b:63:96:12:b6:2c:62:65:3c:38:af:38:c2:
                    24:d0:35:8d:85:a5:e4:bd:30:04:32:4e:66:bd:62:
                    6b:91:80:1c:0d:31:9e:0d:18:a2:a8:57:48:f4:36:
                    3a:18:fd:fa:9d:f2:42:a4:7e:9a:39:77:f4:71:13:
                    ab:f4:24:d8:28:fd:98:d1:d0:db:14:37:c8:33:8f:
                    32:25:e8:81:e1:24:0d:39:9e:fb:1f:f6:70:ad:b8:
                    98:03:81:72:85:54:e0:69:88:83:09:01:a8:33:8b:
                    73:6c:0a:ec:6b:58:2f:62:2b:c2:a9:c7:2b:d7:d9:
                    0f:00:f0:22:00:64:ef:22:2c:01:8e:e3:b6:cc:47:
                    55:48:9a:cb:d9:89:07:f3:e3:2d:7a:43:47:6c:42:
                    dc:13:7c:fc:af:9e:2c:e0:c7:3e:db:7d:0b:d0:47:
                    5d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:60:9C:FC:81:38:74:07:9F:A7:66:3B:94:B9:51:68:A8:47:51:0A
            X509v3 Authority Key Identifier:
                keyid:A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:37:5f:c3:07:04:12:4b:be:ab:49:e6:40:64:ad:01:af:a1:
         3a:4f:97:af:c6:e9:29:2a:bc:07:fb:6e:ad:e6:a0:7e:98:3a:
         6e:8f:d7:1c:67:5c:62:81:b5:68:38:01:c9:d5:1e:7e:4e:3c:
         ba:26:ff:16:8b:5a:33:b7:39:fc:f6:b5:05:e6:a0:fc:3a:61:
         e5:69:04:9c:26:99:7e:03:74:8b:51:47:88:6c:a1:8e:67:22:
         8f:52:b3:34:50:d2:81:33:b8:d3:15:79:1f:3d:31:3a:db:4a:
         2c:7e:ee:d7:6e:8b:f1:c3:92:c1:ad:80:92:54:43:4a:6d:00:
         9d:bb:81:e9:a4:13:4b:2a:f7:92:9d:51:55:33:b3:d5:56:60:
         6d:22:9c:c9:ea:2e:7b:bf:37:6a:d6:aa:8a:f7:5d:ea:2f:93:
         9b:43:52:36:16:c3:07:06:4f:a6:bd:45:03:6a:60:1b:df:47:
         fe:6d:fd:04:7e:66:40:b3:68:e5:7a:73:c1:ab:9b:2b:80:26:
         17:24:a4:ce:3c:ea:33:81:6a:6d:3d:18:43:de:a4:9e:3f:dd:
         19:2f:f3:b7:db:5f:20:a8:0a:52:31:3c:4d:f4:1d:cd:68:41:
         d0:08:bc:44:8e:8f:03:3f:42:4c:95:1a:cb:32:26:78:da:f3:
         fa:81:e4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:08:43 2025 by rpki-client