Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
File:                     d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft (raw, json)
Hash identifier:          hDL3qTHZoPqVvu4lVyVEC6N2NPDP1JSF+oiI/EXKOY8=
Subject key identifier:   52:84:B4:4A:4A:A4:D4:B8:0F:AC:DE:4F:0B:E4:0A:30:D3:6F:F5:C9
Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
Certificate issuer:       /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Certificate serial:       0196760CE4AC16B97632A1BF03CAC0652D62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
Manifest number:          103D
Signing time:             Sun 27 Apr 2025 07:01:18 +0000
Manifest this update:     Sun 27 Apr 2025 07:01:18 +0000
Manifest next update:     Mon 28 Apr 2025 07:01:18 +0000
Files and hashes:         1: FVyOtMSkw-0Vg62ACMKcfYtFTZg.roa (hash: 19Vo/+e85FEDOozBk9ulyjhvlWCZUEMrSObfkurwei4=)
                          2: bGBL61Pb5C5jQn9lTt04zeAidWQ.roa (hash: tcI+1ZDPgb0dQJ/mWEWyrYgZXPfZZ/VnqvsqqlmCxEY=)
                          3: d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl (hash: JITLKANBSP9uKf9cr9biwAEhSQkzYoXpje67Y79DVG8=)
                          4: kfH4Hfcw2DAA4uCH3S-0NOLLLIE.roa (hash: +ssFltk6eznRSfe1ZkEA/pnveLfuNyk/DPp5U5STMlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:e4:ac:16:b9:76:32:a1:bf:03:ca:c0:65:2d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
        Validity
            Not Before: Apr 27 07:01:18 2025 GMT
            Not After : Apr 28 07:01:18 2025 GMT
        Subject: CN=5284b44a4aa4d4b80facde4f0be40a30d36ff5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8f:5f:cd:d7:66:47:37:fe:7b:99:cb:cd:82:
                    35:7a:6e:d2:16:df:5f:a2:88:97:2c:39:39:68:50:
                    83:6a:6d:e1:bd:50:e4:e6:c7:48:cc:2d:9d:65:08:
                    18:b5:c5:e2:3b:9f:47:8b:ac:8c:1d:64:e7:00:7c:
                    15:1c:97:b0:fb:35:ed:ec:d0:98:58:00:96:0a:8f:
                    bd:fb:36:13:ac:8b:07:88:1f:07:73:23:e8:bb:d5:
                    dc:d3:c2:9a:25:fd:2c:c7:a7:38:6d:f2:64:ea:f1:
                    75:42:42:d3:10:94:56:14:7f:22:aa:4d:ab:09:7c:
                    4b:36:25:3c:a5:85:2d:38:c9:c5:77:cb:91:b1:af:
                    d3:b2:90:85:51:4d:fb:ac:d8:69:f4:cc:78:34:4c:
                    94:d1:0b:95:1d:f9:22:d5:83:12:20:b2:93:85:87:
                    c1:01:74:2c:45:65:67:67:f9:8f:a1:b8:85:2d:e9:
                    1c:d7:4d:f5:cc:1d:e6:14:d9:67:c5:66:23:e9:8f:
                    ef:9e:8d:56:44:a0:92:5d:a5:05:11:cf:ed:70:b9:
                    5e:3e:36:61:d4:db:2b:0d:68:85:23:43:d3:b2:58:
                    d2:b7:81:4d:3c:7e:95:e7:1e:19:e4:02:c5:89:71:
                    72:23:78:9e:d7:15:93:2d:04:ee:84:1b:46:d7:b1:
                    e7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:84:B4:4A:4A:A4:D4:B8:0F:AC:DE:4F:0B:E4:0A:30:D3:6F:F5:C9
            X509v3 Authority Key Identifier:
                keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:95:57:ef:f3:01:90:83:4d:b6:62:b5:84:ab:6e:1a:40:13:
         e9:40:29:95:6c:f3:44:a7:df:b5:a8:ee:18:a6:9f:14:fa:73:
         04:65:bf:40:a7:75:92:94:e0:a6:45:27:12:11:76:d0:19:47:
         53:2b:10:79:01:82:5c:82:f4:26:eb:ad:96:d2:76:a6:e2:88:
         97:68:0c:a2:a9:73:df:2b:9c:8f:ed:ea:4c:62:1e:e0:63:ba:
         f5:a3:f6:01:f5:c1:63:49:84:17:49:ff:63:62:c7:cc:44:55:
         70:5a:77:b5:10:b1:fa:06:24:2c:39:70:29:f1:4d:0a:87:5b:
         bb:84:b2:10:79:d7:05:a5:f4:4e:36:a4:02:68:18:83:e5:28:
         0d:01:1f:38:df:cd:dc:da:e7:63:97:45:df:77:34:40:be:9a:
         ea:bd:ea:0c:1e:b2:c3:b7:91:fb:db:cc:d1:d7:34:54:5f:d7:
         ac:f6:3e:d5:cb:41:02:5e:af:4c:d7:cf:18:34:65:e3:c3:8b:
         a4:5f:70:1f:51:7a:8c:13:94:12:72:06:c8:d6:ce:71:1a:6e:
         08:86:b0:5f:72:97:a1:f0:25:f7:2f:16:cb:ba:ae:01:bd:76:
         52:ce:c9:15:95:31:1d:06:e3:aa:24:80:8e:85:e2:bf:a2:6e:
         19:1f:d8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:40:12 2025 by rpki-client