Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
File:                     v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json)
Hash identifier:          IBaITVR8hMUC8cCxUdTgLBYIIRRXpPZQDc+3SFZKIgw=
Subject key identifier:   6D:1F:DB:6F:79:BC:B2:8B:22:58:10:80:EA:AC:62:30:55:5D:1C:47
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Certificate issuer:       /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial:       01967567149D4A459216D9EC0FB37BCB6EA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
Manifest number:          150F
Signing time:             Sun 27 Apr 2025 04:00:11 +0000
Manifest this update:     Sun 27 Apr 2025 04:00:11 +0000
Manifest next update:     Mon 28 Apr 2025 04:00:11 +0000
Files and hashes:         1: 9UunLY0e7RvMMeMDRjD3u7_pf2Y.roa (hash: 7lRPIrPRKCCE3BPTd9dDNpxXDgXsPWg+ml+ju6JbueA=)
                          2: ncR4oR_y2D6exGXXU4466Dj_Hq0.roa (hash: QHWP1FBTjP+R0Pof3RRPjusJf04L/sCOEBJrDKRdhZ4=)
                          3: rOoYFHKRe7ghGBjkeruHV6kIlyA.roa (hash: elXY8PrAbFgsd98hRj7mkOX8iG0smL3sFgAD/6xBNtE=)
                          4: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: CZGuD2+1ZGpR0BkWloCALt+2Zex+rHURrkGbGObx1Jk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:67:14:9d:4a:45:92:16:d9:ec:0f:b3:7b:cb:6e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
        Validity
            Not Before: Apr 27 04:00:11 2025 GMT
            Not After : Apr 28 04:00:11 2025 GMT
        Subject: CN=6d1fdb6f79bcb28b22581080eaac6230555d1c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:42:76:c8:ae:93:50:e6:be:bc:d5:bb:44:a1:
                    6d:f3:2e:18:63:29:47:cb:d7:3f:15:3b:0b:48:c1:
                    47:29:57:1e:3e:78:23:50:89:89:2e:78:fb:56:90:
                    77:7d:18:03:00:4f:79:b5:e7:18:cf:19:71:f3:3c:
                    60:f9:b8:ce:3a:cb:21:be:c4:be:80:96:79:6e:71:
                    de:a3:43:d0:f7:ed:a0:ad:ca:79:5f:c1:f3:3e:d1:
                    36:d9:c9:af:d3:72:33:4b:59:9b:5f:7a:ae:01:ef:
                    78:05:b6:c6:b4:a6:ba:96:20:f3:bb:2b:6b:e0:0c:
                    b8:c3:b4:a5:fd:da:7f:fb:36:38:8c:c1:fd:1f:ed:
                    41:ff:80:21:1c:f6:27:a3:74:ac:a3:e0:13:ad:75:
                    f9:cf:c6:c9:53:af:f3:4a:4b:20:fc:01:7a:83:9c:
                    ac:75:8f:f3:72:58:a0:22:f0:f3:7e:24:be:36:87:
                    e8:84:c0:04:7c:60:ca:64:18:4f:f3:bb:a0:86:de:
                    64:43:22:bb:d8:36:a2:8a:fe:10:bc:86:2e:d1:36:
                    dc:1f:66:8d:00:e7:41:e4:a7:99:36:b2:d7:bd:f8:
                    f9:ba:24:ac:0c:5a:b8:0b:ec:ab:04:74:76:e9:cb:
                    0b:89:26:47:95:eb:50:ba:22:d7:1c:ef:8d:30:06:
                    31:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1F:DB:6F:79:BC:B2:8B:22:58:10:80:EA:AC:62:30:55:5D:1C:47
            X509v3 Authority Key Identifier:
                keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:10:df:82:2e:08:66:63:cb:61:9c:ba:1a:91:56:7c:8e:39:
         bc:e5:d7:40:67:87:7f:b6:c1:f4:34:cc:fe:d0:d6:0a:d7:69:
         e7:0c:04:fd:1c:9e:8b:f7:25:50:9c:c5:08:b4:fe:c9:35:b0:
         49:fa:a6:12:66:84:72:86:2d:92:f5:e5:c1:4e:bc:19:88:ab:
         c6:8e:2d:4c:ea:c3:72:0d:2b:ae:9b:c9:49:9d:a2:54:28:a7:
         9a:77:3d:80:f1:b8:a6:7e:e6:db:c0:91:31:4e:b6:86:bc:f3:
         dc:15:1a:a9:ef:0b:b5:ee:2c:8c:b4:cf:69:65:47:87:ad:52:
         6c:b1:93:b8:df:5a:18:16:f0:85:91:30:ab:8e:58:de:24:eb:
         1b:cd:ac:67:c0:f0:65:db:a0:8a:11:a2:aa:cb:b5:c1:6b:e0:
         83:7d:b3:ee:ef:17:8d:b0:ce:45:6e:60:4a:14:41:f4:b4:77:
         34:bf:4d:db:4d:01:62:ad:77:8a:f3:c4:16:08:b9:10:a2:ac:
         a3:51:4b:22:fc:b9:0a:e7:94:25:77:5a:63:ca:53:a1:cc:2a:
         c6:8e:ce:b1:44:13:71:93:9b:f6:85:59:d6:31:e6:8c:9b:8d:
         87:b8:2e:34:47:d0:f9:cc:e7:fd:c5:cb:e5:22:77:43:f5:72:
         e1:b9:e4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:11:56 2025 by rpki-client