Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
File:                     CWmio5Y1t5dHbx8WM66PJ78ztTM.mft (raw, json)
Hash identifier:          0rcmR6ocDdOj8yHLLVO//ijGUcgBc9EIb1vN9l72SYE=
Subject key identifier:   0B:4F:10:5F:6D:25:6B:D6:BC:E9:EC:F6:75:C4:38:BF:ED:DF:B9:CC
Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
Certificate issuer:       /CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Certificate serial:       01968548658B97342593614AF9F349F83A7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
Manifest number:          0670
Signing time:             Wed 30 Apr 2025 06:00:36 +0000
Manifest this update:     Wed 30 Apr 2025 06:00:36 +0000
Manifest next update:     Thu 01 May 2025 06:00:36 +0000
Files and hashes:         1: CWmio5Y1t5dHbx8WM66PJ78ztTM.crl (hash: x0eRovOb1RlhkJm0UvO2GZ5IWVpCvx4aD4B3gxuH7QU=)
                          2: MzxQnXbI2W7tTUv9-GpYRiwer6Y.roa (hash: ShncGR7jcZH4xdPF/fjNQO1+bVZJWb8hKZoGUpL2aXI=)
                          3: NsSedmTQW8OnTTsqv3X8CBZy-xU.roa (hash: WFkKh3bAC4MDDNtqyFfpo7GUVyreugPfu/r7LcM/fN4=)
                          4: TeB088r0q83Xt0BxDsUFRJ09n_w.roa (hash: G48KXbKrX68pg0VWA7DNE58/xU413WQGSqX5xHVo4rY=)
                          5: eZ1oRKw2ZmvD0_NWa-kdmh2g-eo.roa (hash: 2jAE9EFeYAI0mBmHLdLHHE90HLI9cIG+7iKSbXwklN4=)
                          6: l5LQQJ1hscP11M9PGOZJoYipJjA.roa (hash: 1Qefj38Zjj0ROOLLrKtBW86/Osz3b9lr4tBY77Lptdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 06:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:48:65:8b:97:34:25:93:61:4a:f9:f3:49:f8:3a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533
        Validity
            Not Before: Apr 30 06:00:36 2025 GMT
            Not After : May  1 06:00:36 2025 GMT
        Subject: CN=0b4f105f6d256bd6bce9ecf675c438bfeddfb9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a8:c8:1f:29:4c:c0:1d:c5:88:be:38:a4:35:
                    0c:b4:2b:24:f7:20:63:2b:34:34:f0:e9:7c:6b:7e:
                    be:fa:1f:bb:d3:54:34:d4:4b:26:34:e8:c2:5a:14:
                    35:3d:0c:f2:57:7b:97:e7:bd:39:00:86:2d:29:01:
                    09:ea:65:86:ec:b0:e3:c8:80:72:c6:fb:aa:7a:67:
                    4b:92:ac:99:d2:a0:b5:3d:72:e5:ca:39:95:69:33:
                    8d:d9:4c:47:31:d1:3d:20:e4:53:d2:2b:44:bd:c1:
                    5e:93:70:a3:69:31:b8:a5:ef:9a:c4:b5:a4:d6:4b:
                    94:4a:bc:22:f3:0b:de:e9:f6:87:0c:57:9c:52:7c:
                    ae:e3:57:14:93:3d:a2:08:d0:3f:92:9c:95:8e:a7:
                    09:f3:d2:9d:1f:1b:2b:5e:db:17:6f:c4:a3:02:3f:
                    39:97:0c:3a:89:8e:87:40:a6:0e:14:d3:6e:e4:05:
                    e5:cc:cb:bf:73:44:1c:fb:6e:08:7f:fa:58:f8:4a:
                    0c:d2:f3:cc:6a:83:e7:7a:f1:ac:6b:91:40:4e:9a:
                    62:ac:1d:a9:34:c5:46:6c:43:df:ea:11:b2:4a:bb:
                    5a:61:c6:f8:95:56:c8:a7:98:af:e6:cd:0e:dd:77:
                    c9:34:92:a5:6d:eb:7f:f7:3b:d9:a8:9d:c0:04:e5:
                    ad:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4F:10:5F:6D:25:6B:D6:BC:E9:EC:F6:75:C4:38:BF:ED:DF:B9:CC
            X509v3 Authority Key Identifier:
                keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:bf:3c:c8:7f:8d:06:33:a5:c8:8b:04:83:41:7f:79:28:f0:
         21:c3:26:b4:10:70:f5:0c:1e:2b:f2:d4:af:35:05:7e:f2:98:
         cb:94:c5:34:e2:c2:39:82:bb:24:81:13:49:11:0c:ed:86:8e:
         be:de:f7:6a:71:84:e8:a9:30:78:c6:4b:db:7b:95:3a:48:6f:
         ce:66:d7:9e:18:cd:33:f8:a9:3a:f9:2e:c9:df:64:81:df:49:
         cf:b3:1b:c8:25:35:b4:40:8b:71:f9:db:10:8e:54:d8:36:f8:
         09:56:90:97:6b:42:68:80:7f:ba:e8:bb:28:23:81:97:40:3d:
         49:c3:7b:f6:a1:f7:2d:28:09:50:42:24:9a:de:77:b6:2a:44:
         73:2c:6d:d4:88:bf:61:5c:e9:47:03:69:9c:44:93:0d:ce:0a:
         ca:c5:6e:69:84:d6:d2:59:08:55:dd:66:86:f0:2c:0c:16:cb:
         16:14:28:67:3e:c9:c1:62:57:72:60:3d:66:5a:3c:f3:7d:65:
         2e:50:e1:e2:91:af:0b:5f:af:75:13:39:6e:f6:a0:9d:04:4a:
         60:79:d1:de:f9:4d:42:cc:47:ce:6a:f5:09:0b:69:2e:a7:a0:
         45:a4:5c:a3:c1:08:ff:dd:57:aa:ef:04:63:21:08:dc:8f:0c:
         2d:0e:ba:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:39:16 2025 by rpki-client