Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft
File:                     9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft (raw, json)
Hash identifier:          bv4Q29dn4M7/lLrMdRXlnt56irVtJknB80wfjLnQGec=
Subject key identifier:   2C:A7:65:91:2D:D2:B4:33:B4:52:7B:00:3F:1B:36:88:DD:92:69:4C
Authority key identifier: F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A
Certificate issuer:       /CN=f58acd43c0033b13b88bb397415583aa51d9303a
Certificate serial:       019695CE602D64C596FCC3DC9A3365F4F45A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft
Manifest number:          0A9B
Signing time:             Sat 03 May 2025 11:00:52 +0000
Manifest this update:     Sat 03 May 2025 11:00:52 +0000
Manifest next update:     Sun 04 May 2025 11:00:52 +0000
Files and hashes:         1: 1UQBMdlNIZpuxIjnKkgzjfvJqNM.roa (hash: UTR1XEenqcPOEfPniiaYd7rNcv8miNRFy/ZF8QAlsyg=)
                          2: 7CQK4uvhSVq6o2wWxOh9gTQ5PNA.roa (hash: DkMR/Y4unY7wIHXEWKNCRJfO23Nc5dcWAz953GA+1qE=)
                          3: 9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl (hash: 32aMoGiIOT1I6ZeV6gC/LIp6jYSTAjFdkCKJz/sgJOs=)
                          4: WeTCj5MkYCzvVik2-EKKBNmp8H4.roa (hash: PNmIO1vYOijeHMCQXtkzfyn0VP6CUVr/x//KeB07G6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 10:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:95:ce:60:2d:64:c5:96:fc:c3:dc:9a:33:65:f4:f4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58acd43c0033b13b88bb397415583aa51d9303a
        Validity
            Not Before: May  3 11:00:52 2025 GMT
            Not After : May  4 11:00:52 2025 GMT
        Subject: CN=2ca765912dd2b433b4527b003f1b3688dd92694c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9a:b7:e7:91:5f:eb:0e:d1:e5:ae:99:51:f3:
                    aa:35:4a:a9:2e:14:06:95:4e:4c:cb:e2:55:08:af:
                    54:d6:bb:80:f3:68:17:d0:8c:1d:55:68:11:5a:29:
                    37:d0:d1:e4:9e:da:85:9c:ac:2b:33:31:fb:85:f4:
                    a7:68:b5:16:2d:80:00:e2:50:b3:1b:39:a8:0e:43:
                    e6:7f:7e:6e:31:22:1c:9c:a4:68:b8:75:d5:03:1f:
                    a1:df:1a:35:1a:c2:83:51:13:c0:df:3b:65:c4:58:
                    a5:da:91:ec:f1:13:e2:55:50:46:b6:ae:04:8d:69:
                    ff:5b:78:b2:dc:7a:b2:b1:7f:56:8b:db:e5:b5:28:
                    cf:f2:ec:7b:f9:a1:de:fb:66:59:8e:e4:ea:8f:4b:
                    51:3d:25:73:68:c5:57:43:b8:52:0d:74:5e:2d:9a:
                    2e:c4:4e:5c:f5:d5:c8:ff:c2:b8:ae:9f:f2:46:16:
                    aa:3e:71:55:70:a8:61:62:07:df:62:33:c1:06:34:
                    4d:7b:9b:4f:7b:ca:cb:cd:fe:1b:b2:73:5b:5d:44:
                    0b:56:25:eb:78:01:ee:58:43:0e:40:14:ec:64:c0:
                    d4:ca:a1:06:bf:98:06:d4:d8:f9:44:a5:27:d5:63:
                    1b:e0:0a:3a:60:13:bf:bf:1e:34:bb:11:73:46:f6:
                    17:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A7:65:91:2D:D2:B4:33:B4:52:7B:00:3F:1B:36:88:DD:92:69:4C
            X509v3 Authority Key Identifier:
                keyid:F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:25:77:68:0f:7c:a2:dd:43:f7:9e:e8:0c:0a:dc:06:3e:cc:
         f9:4c:95:5c:4e:d3:5e:94:f1:2c:d4:40:2a:69:3a:a0:d0:95:
         fa:47:30:76:a5:20:9b:e0:9b:a5:59:32:06:96:f5:8c:2e:50:
         b3:15:fe:b4:4e:b8:08:dd:c5:19:a8:a9:16:7d:04:4c:93:77:
         af:32:a2:7b:b3:9f:89:9c:76:d1:92:50:b0:0f:4b:b1:4f:af:
         f1:39:f6:b2:09:3c:5a:2d:54:bd:bb:1b:48:af:4e:4e:b5:4e:
         5c:a9:dd:ce:0c:db:45:68:c7:56:f1:cc:35:02:da:9d:b7:25:
         c0:bd:a4:73:4b:8e:64:94:14:10:7e:7e:bd:ab:ff:8d:bd:aa:
         71:7f:8e:18:ad:d7:3b:cd:d9:3a:68:7b:33:15:44:b7:3b:06:
         ee:04:5e:f8:94:88:56:02:71:9e:5b:6a:29:1a:ac:1a:55:17:
         a9:c1:a0:96:b1:d9:7f:47:d1:fa:37:8b:20:26:06:65:d2:9d:
         a1:fc:9c:5d:e6:44:11:59:2f:dc:2c:19:d1:de:01:d2:de:a2:
         90:bb:23:36:29:bc:b1:9f:89:c7:30:ee:76:13:9b:8c:d0:6f:
         a4:41:1b:38:2b:39:17:bd:74:e3:38:b7:21:62:48:da:c9:9b:
         ba:f2:97:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 18:10:46 2025 by rpki-client