Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
File:                     MNWOQMbZHzcp5X4zRNMItZkv5G4.mft (raw, json)
Hash identifier:          fe9NnBnVTERtg6Dic9WkI2IjGAZqE+748RVjwZ0RTdQ=
Subject key identifier:   F9:F3:B2:7E:82:F5:2D:42:65:47:B6:43:B1:F0:E2:E0:07:60:00:AD
Authority key identifier: 30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E
Certificate issuer:       /CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
Certificate serial:       0196729D458242125D35B3D0E9AEBEA8FF2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
Manifest number:          0A05
Signing time:             Sat 26 Apr 2025 15:00:31 +0000
Manifest this update:     Sat 26 Apr 2025 15:00:31 +0000
Manifest next update:     Sun 27 Apr 2025 15:00:31 +0000
Files and hashes:         1: BhR4gh6niMuAg5TJ32ur0BjKaqs.roa (hash: Zv2rwkQ5zJHX1INCUgBx9oQ77dKwpoY1KIJrtlNZemo=)
                          2: MNWOQMbZHzcp5X4zRNMItZkv5G4.crl (hash: SLSBAS/HzopjgfGX13PYOcAPY1mWmzRZ1yVmKEPG600=)
                          3: XXRk-2utC2qSFmq343z5VXrm2u4.roa (hash: ytRglwlu3WOrTr72XPTW+Woc0VzZSF5e3VxmBUNFs3g=)
                          4: Xp6Av0k8Jw85tGpea19kV0rC7zU.roa (hash: HoTKGzCgPJaXTFRgn8HDd9Uw/rl7lFS8MklAEJByUKE=)
                          5: uaxf2AGptn0k5nSChIQ5U9I-OzM.roa (hash: bH20ytgUK7nqS56x69xVlTEkEDFzbypHFv+jFwf5Z1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:9d:45:82:42:12:5d:35:b3:d0:e9:ae:be:a8:ff:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
        Validity
            Not Before: Apr 26 15:00:31 2025 GMT
            Not After : Apr 27 15:00:31 2025 GMT
        Subject: CN=f9f3b27e82f52d426547b643b1f0e2e0076000ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:28:95:bb:eb:f5:f3:99:ea:ad:60:53:94:e3:
                    94:bf:2c:b6:0f:8a:dd:0a:c6:d5:c5:03:1d:d6:9f:
                    9a:0a:d0:b2:c1:86:d4:b6:28:56:e7:b0:1c:7f:33:
                    94:b5:7c:fa:2c:7b:83:8f:78:e1:0b:ed:be:d8:74:
                    fa:1e:24:43:71:0a:22:69:31:05:ce:62:e2:e8:ac:
                    e4:a6:82:c1:9f:1b:01:b4:19:21:a7:2f:24:a3:ab:
                    04:ef:b1:6c:7e:d2:ee:3d:fc:fa:bb:48:e2:7f:4c:
                    a3:43:95:89:0f:ed:6e:fd:6f:11:8e:33:d4:a7:db:
                    f4:fe:24:83:c7:7d:86:a4:7a:55:f4:ca:cb:ba:73:
                    22:79:ac:76:6e:71:dc:8d:50:0a:34:5f:59:03:88:
                    8a:17:19:77:a4:d9:c1:4e:a0:e1:eb:ac:77:37:ae:
                    2c:7b:66:67:1d:f6:59:94:0a:fe:28:78:b3:fa:d4:
                    8a:52:36:4f:ac:87:0c:78:94:17:2e:57:36:61:df:
                    23:07:6f:33:e0:dc:e5:54:ea:06:f8:9e:95:fa:7f:
                    02:86:6b:2d:43:19:95:bc:de:86:24:9b:e0:30:f5:
                    7e:6b:fb:96:3d:9c:25:4b:36:ed:4d:f1:33:33:7f:
                    b1:aa:32:65:60:b4:59:96:ae:c0:cb:53:45:a5:b8:
                    72:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F3:B2:7E:82:F5:2D:42:65:47:B6:43:B1:F0:E2:E0:07:60:00:AD
            X509v3 Authority Key Identifier:
                keyid:30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:19:4e:10:c9:de:83:a6:39:5f:66:4e:0a:05:8a:35:db:d8:
         ea:38:d6:a0:80:3d:c5:74:53:ce:fa:0b:62:f1:98:21:18:c6:
         8b:66:4c:2e:cb:ac:e9:b8:ee:de:1a:fb:2a:eb:02:c6:12:12:
         0e:97:8a:a8:14:a5:22:31:31:94:31:9a:de:93:25:39:19:bb:
         b1:68:2c:f8:c6:4c:e5:29:a1:56:0a:6b:6f:ac:ca:d7:29:53:
         2f:7d:33:d6:5f:06:bb:dc:d2:d2:80:db:70:47:40:0d:73:a6:
         3f:f7:53:98:58:1e:db:9e:8a:01:63:56:36:c2:be:9f:c1:aa:
         de:03:c3:7d:d2:b7:ce:4c:c0:ea:80:dc:e3:3c:39:17:b9:05:
         2f:5a:f7:2e:25:1e:0d:37:85:17:f6:ed:1e:38:78:28:6d:62:
         07:10:bc:f2:d6:3d:56:5b:8a:5c:ad:64:6a:a7:82:d6:cc:c9:
         5f:f1:10:e9:e8:92:85:df:62:ff:cd:79:c9:d6:e7:b6:8b:64:
         b7:0e:34:8f:8b:79:84:77:96:50:d6:4c:e2:8e:57:f3:4d:5e:
         ac:3e:b5:6c:a6:4b:9e:0b:45:05:a6:cc:3a:86:db:b3:83:0d:
         30:a0:80:76:0d:c3:49:fa:ff:05:f1:65:6f:05:59:d1:1d:c0:
         e8:d7:36:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:48:56 2025 by rpki-client