Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.mft
File:                     m7wD9sWihPoA27WqYJxRW3xYmWk.mft (raw, json)
Hash identifier:          l/FAoI9B1UGXHSU91cOSC87edoGz/CFDHs0E+o3ONdQ=
Subject key identifier:   09:41:D2:DD:8D:07:CB:7D:84:EE:FD:81:FC:83:24:EA:6C:0A:52:DC
Authority key identifier: 9B:BC:03:F6:C5:A2:84:FA:00:DB:B5:AA:60:9C:51:5B:7C:58:99:69
Certificate issuer:       /CN=9bbc03f6c5a284fa00dbb5aa609c515b7c589969
Certificate serial:       0196722FD1D4AE05605388574D8D9139AD3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.mft
Manifest number:          0D1F
Signing time:             Sat 26 Apr 2025 13:00:58 +0000
Manifest this update:     Sat 26 Apr 2025 13:00:58 +0000
Manifest next update:     Sun 27 Apr 2025 13:00:58 +0000
Files and hashes:         1: 3sPU2X2zzDRvsMfK94CkKzBQsU4.roa (hash: R00sfB2denxS/OHNxg4q8pRCPm0SOYbizoeUhKRjq4k=)
                          2: m7wD9sWihPoA27WqYJxRW3xYmWk.crl (hash: ZsTaBb191gw5Eq6hXH/b3V3seRcnRYi8MXNIYcK60Yk=)
                          3: opItG7iycfoqyIbeJkA-iBhJGY4.roa (hash: 3K1U6liu+Oy3aeOJx85XxOBGN8iAYZ7rHauSs3gu8HQ=)
                          4: p85mwjNpw2DPiEwmt3DneLuJKMU.roa (hash: 9txQiYeTXR7ltBlHFbZo2A2VUj0ra3QUmGnLHYSLM/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:2f:d1:d4:ae:05:60:53:88:57:4d:8d:91:39:ad:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbc03f6c5a284fa00dbb5aa609c515b7c589969
        Validity
            Not Before: Apr 26 13:00:58 2025 GMT
            Not After : Apr 27 13:00:58 2025 GMT
        Subject: CN=0941d2dd8d07cb7d84eefd81fc8324ea6c0a52dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:cd:b8:ac:c4:1d:86:38:80:31:30:9e:a4:
                    4e:10:27:2f:35:8f:23:88:de:5a:4a:a4:1d:7b:80:
                    d4:4b:7c:8d:22:7b:46:1f:2a:ea:33:7e:98:d0:b2:
                    dc:81:50:c0:80:9a:04:92:fb:db:bb:21:5a:9d:f7:
                    97:51:6d:e4:1f:c0:f4:b6:ab:6b:da:ed:3e:d4:c1:
                    8d:82:07:47:eb:21:17:e8:68:2d:0e:56:63:80:62:
                    59:d8:c0:53:63:45:f8:fb:be:25:d4:c5:6a:33:4a:
                    40:e5:74:e4:24:5f:28:b0:03:da:29:39:73:b2:c4:
                    e5:51:03:e6:2c:ac:64:7d:2e:11:8c:80:b7:aa:33:
                    18:6c:1c:cf:ea:77:1c:e3:77:df:23:d6:cc:ab:df:
                    de:57:c3:49:60:cd:43:d9:3f:2b:16:1f:14:73:0a:
                    70:7f:52:5b:cd:55:08:28:ef:00:97:ec:8b:d1:07:
                    2f:4b:ac:9f:85:39:4e:c9:e4:6f:33:15:76:6f:d1:
                    04:01:f9:e5:02:56:e6:64:31:d4:7a:de:47:d2:c1:
                    44:77:20:01:fe:b7:0f:fa:b7:e4:c7:30:0e:60:dd:
                    94:27:d0:ba:c7:14:fc:12:3b:26:d1:bb:cb:ab:1c:
                    64:e1:0c:cc:86:20:43:9a:55:e4:4e:09:56:f0:b9:
                    27:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:41:D2:DD:8D:07:CB:7D:84:EE:FD:81:FC:83:24:EA:6C:0A:52:DC
            X509v3 Authority Key Identifier:
                keyid:9B:BC:03:F6:C5:A2:84:FA:00:DB:B5:AA:60:9C:51:5B:7C:58:99:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a1:08:f5:8e:71:c3:c5:3b:55:e4:c8:9e:11:eb:50:18:47:
         6f:14:b3:37:26:ae:98:98:12:9f:19:f2:d9:44:4a:15:0d:e8:
         02:5f:f3:fc:b5:12:ee:c8:d9:1c:d3:f8:01:56:20:be:1d:81:
         9a:62:9a:5e:f2:81:83:85:79:bc:a8:b8:5d:e7:f5:bd:1c:a9:
         a9:e9:7b:ae:88:fc:16:20:f3:13:69:67:ab:ea:1d:4a:75:85:
         43:ab:67:0c:1d:09:86:fa:3e:f4:10:21:1a:17:4e:2d:19:24:
         1b:4f:fa:d7:93:9e:4d:1e:66:e3:41:5b:65:0a:84:ee:83:74:
         8a:9d:ca:cd:5e:a7:e6:fc:ec:ac:0b:9e:84:dd:64:03:9f:53:
         ca:4f:22:a1:93:ce:2d:0e:8e:23:d3:ae:15:52:2e:64:a7:81:
         15:0e:0c:99:b1:27:c0:5f:62:88:06:64:0d:7d:2b:5d:d9:d0:
         8f:4a:cb:7a:65:6a:80:eb:af:d6:b1:35:7e:0b:3d:0f:bd:bf:
         75:1e:54:a4:c0:e5:56:cc:c9:80:f6:82:e0:60:cf:4b:8c:03:
         a2:d6:23:19:a7:55:c4:b8:5d:ed:ff:f7:76:c3:c1:72:ff:11:
         7b:1b:6f:b6:76:91:22:69:00:e1:9f:34:a5:b8:ac:1f:a5:f0:
         6c:d6:30:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:00:26 2025 by rpki-client