Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
File:                     _rhNn4-eMxVliaXr9yIgOomeClE.mft (raw, json)
Hash identifier:          9W/wG6nlVRmxZAUoM+2b2vualkGJwrQ5NEYSJ2mraug=
Subject key identifier:   DB:0F:37:DB:B7:31:E9:0F:AA:13:A8:42:6B:C5:E7:02:32:55:FE:1B
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Certificate issuer:       /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial:       019673796B9407E7D2472A6EFC25EC488169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
Manifest number:          0EC9
Signing time:             Sat 26 Apr 2025 19:00:59 +0000
Manifest this update:     Sat 26 Apr 2025 19:00:59 +0000
Manifest next update:     Sun 27 Apr 2025 19:00:59 +0000
Files and hashes:         1: H-luNIooxpaPFael1QMBE9cTc2Q.roa (hash: 8PAzKkQGy3uQODeK1TdyR0ZOhf0X+RsaaEkCZwpxl6k=)
                          2: MWUNq-ftYkXKNHhiuPmUDR8aNAY.roa (hash: sRHJK0hHdEHRSKSboElSRlINRVoo+ylHVvGY64QPq+U=)
                          3: Oyop5ie0J1YYtu5t_uGmCo3zIS8.roa (hash: 874fXZpydXHD1cFuDPyWOHD0dYaQUqKnVNs6jbCBZlc=)
                          4: _rhNn4-eMxVliaXr9yIgOomeClE.crl (hash: Za1mG7loD9SX6iMGFErxLNv/WqD5WpnYT0hiDGh1W50=)
                          5: nNMaXspw-MfqxfuqJhcYFV82jgA.roa (hash: gu+ocwTZMdArCv67tGJH3aJs58XUzblrFVAVRYDEBOQ=)
                          6: vB6CmOcoFoubesxgyY0CLzYdM60.roa (hash: /W1q8tG5f08hM4qxFSwUdMUcXBLHBHpaugnqW8pYfMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:79:6b:94:07:e7:d2:47:2a:6e:fc:25:ec:48:81:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
        Validity
            Not Before: Apr 26 19:00:59 2025 GMT
            Not After : Apr 27 19:00:59 2025 GMT
        Subject: CN=db0f37dbb731e90faa13a8426bc5e7023255fe1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8f:e9:b4:f9:da:5d:84:6d:2f:d4:6c:cf:d3:
                    b4:d1:b2:8e:b8:7f:83:cb:2c:e5:55:a5:14:f4:34:
                    06:af:0e:ee:43:63:73:bb:00:11:c0:e5:ca:61:11:
                    09:38:4d:ab:53:65:1d:6e:99:58:46:9d:07:27:4d:
                    89:f1:e1:db:a9:89:00:35:98:d7:e1:f5:64:76:aa:
                    f8:50:3d:8e:36:b9:10:7a:3f:3f:59:6a:4c:bd:4e:
                    ea:8c:54:1b:4b:11:54:e0:69:ad:67:f7:d7:e1:ac:
                    b6:ea:1d:3f:7e:07:25:46:9c:d7:c8:4b:61:ef:d3:
                    2b:45:27:19:52:5b:6c:17:55:14:00:ab:2d:f9:75:
                    97:af:8d:3f:a0:e7:76:5c:64:8a:9d:0f:57:55:74:
                    80:e4:81:d8:f4:b8:c3:0d:f3:c7:a1:1e:83:79:10:
                    38:e1:f1:f9:0e:e6:21:49:42:f0:e1:38:55:5a:9f:
                    5d:b7:79:f0:4d:bf:ad:a7:40:f1:43:ce:b7:e2:9e:
                    c0:34:7b:ba:4a:1e:77:34:67:ab:27:ad:18:13:15:
                    32:6e:7a:8b:81:21:2b:b0:13:58:fc:8f:b3:11:66:
                    29:6a:af:c0:f9:55:b0:d0:61:cc:37:db:b8:96:dc:
                    cb:cc:31:16:c7:8d:75:5d:d5:1b:e8:04:36:32:c0:
                    f2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0F:37:DB:B7:31:E9:0F:AA:13:A8:42:6B:C5:E7:02:32:55:FE:1B
            X509v3 Authority Key Identifier:
                keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ad:c9:b0:a8:43:3b:29:4e:5f:51:bb:dc:69:69:8f:b8:63:
         b3:2e:93:83:20:16:a5:70:be:cd:69:64:2d:64:77:43:f2:a1:
         a6:7f:24:81:b7:5e:57:a0:a3:9a:98:ff:c6:85:01:4d:70:ce:
         3b:58:5d:c1:dd:8d:2e:7a:e4:80:59:02:6a:14:27:7d:8f:8e:
         20:39:71:a9:07:b1:35:4a:61:11:7e:c6:76:42:8e:08:ae:ed:
         d3:a7:b1:5a:62:2a:e0:e6:41:c3:7b:67:91:b7:fa:bb:de:69:
         c1:4a:6d:22:44:ca:7a:e2:ed:df:c7:25:ca:db:06:54:89:8a:
         99:03:fa:0f:f3:2b:af:33:6a:ba:33:fc:b6:51:8c:46:ee:ae:
         58:ae:22:a8:aa:85:47:3e:4c:e0:8f:d3:7e:e9:c7:41:99:a9:
         ba:3e:a7:9e:af:88:b3:81:7e:06:6e:31:dd:9f:c4:1b:aa:71:
         66:45:ad:70:71:8e:0b:a5:54:2e:fd:e3:dd:0c:81:40:9a:bf:
         22:51:e7:bb:71:3a:93:bd:2a:03:b1:98:74:c7:fd:7e:2d:3c:
         a2:f5:8e:65:d0:6c:31:f7:50:87:dd:c7:d1:aa:2b:e3:07:59:
         b2:b0:ea:ca:5d:14:89:f0:66:95:12:1e:8a:5f:b5:f5:2f:37:
         6b:70:68:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:02:03 2025 by rpki-client