Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File:                     mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier:          yQXg+f2iIwOCVhKIvLo+rHVYOU/pwhx9P7F2CnFPMyU=
Subject key identifier:   91:7C:0C:77:48:9F:F7:DF:40:72:AA:38:F7:27:F9:92:A0:5C:2B:98
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer:       /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial:       01967AFBD753868D9249327660D0487E2513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number:          1082
Signing time:             Mon 28 Apr 2025 06:00:47 +0000
Manifest this update:     Mon 28 Apr 2025 06:00:47 +0000
Manifest next update:     Tue 29 Apr 2025 06:00:47 +0000
Files and hashes:         1: GS3n997-WSAnBFI5sxW4oYhya68.roa (hash: 9uLSgMiqXXeu2TS+gBYSbYKO48DlZM21pWe2MUShNG8=)
                          2: K1RZ-_Fg9dSZIebCMUhpe6gbgJc.roa (hash: DeEJ/lwM2EUWvyFmV2osr5NnI9rnfMu9oAVwUv2cQPg=)
                          3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: 9fX5M6bTG9928ay4SkSyguEPTuo+Ou7Dnao0nNEicWQ=)
                          4: tKjpgYt3F1U92FlxxtExmwv_VJA.roa (hash: PCobIxyuHsntJ/hl1UTuu1qlban1/mIdUKP0z5QY3l0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:fb:d7:53:86:8d:92:49:32:76:60:d0:48:7e:25:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
        Validity
            Not Before: Apr 28 06:00:47 2025 GMT
            Not After : Apr 29 06:00:47 2025 GMT
        Subject: CN=917c0c77489ff7df4072aa38f727f992a05c2b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1e:19:b4:74:1f:61:83:12:3c:f4:10:8f:1e:
                    d7:e5:cf:f1:b8:f4:70:d5:cb:51:72:d6:27:62:65:
                    45:ae:9f:53:43:08:ed:86:06:82:70:cb:36:24:00:
                    39:55:84:5c:b0:f6:02:a0:ed:97:03:f6:63:b0:f3:
                    fd:b5:07:77:a1:ff:51:a2:5c:49:17:ef:a9:93:af:
                    3b:31:dc:32:5b:ed:7f:44:1d:e8:a2:b4:6a:04:f9:
                    47:8c:7b:d9:88:dd:06:11:f3:b3:07:2f:69:e8:00:
                    3a:b0:1b:19:7f:d7:d7:3a:56:4a:d1:33:2e:69:ef:
                    73:7e:a1:f9:d2:39:a8:00:35:e1:95:30:6e:f5:c8:
                    a8:e1:53:60:1b:4a:c1:22:1d:12:a5:f1:06:9e:4b:
                    9b:9a:a4:af:0d:ce:ca:33:31:18:bb:e7:85:93:3a:
                    b4:ab:29:68:27:17:1c:75:41:cc:0a:5d:a6:51:2d:
                    55:7d:76:48:6a:a6:94:87:df:9e:06:a3:56:34:11:
                    f0:93:92:e4:d6:a0:c6:d0:bd:64:b4:be:37:65:a7:
                    5e:21:9c:6d:55:a2:25:f2:6c:dc:09:36:45:30:8e:
                    d5:84:5b:f2:49:7a:2e:ae:21:f0:db:f7:f8:55:4a:
                    58:e7:93:e8:b9:09:45:92:07:27:d2:6b:9f:ba:16:
                    b9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7C:0C:77:48:9F:F7:DF:40:72:AA:38:F7:27:F9:92:A0:5C:2B:98
            X509v3 Authority Key Identifier:
                keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f6:eb:74:72:7c:0c:36:f9:46:cc:19:c9:47:6a:e6:e0:28:
         98:44:cb:ec:d1:d5:3c:81:6a:91:7d:0e:7c:5e:06:41:ba:5f:
         d9:15:b8:44:2c:3d:3d:43:5c:df:9d:7f:2c:2d:7c:16:3e:10:
         59:6f:6c:1d:e6:36:07:7a:0d:42:bc:0f:e1:c0:84:90:c5:c7:
         78:4c:63:92:75:a3:ce:eb:f2:3f:df:ca:51:0f:6f:43:c5:0d:
         ad:2d:34:ed:8c:35:b6:3e:51:a7:46:19:17:ad:f7:ee:b3:c4:
         63:6b:33:43:d4:73:4c:22:b7:ca:21:dd:9a:75:46:34:30:a6:
         dd:6f:bb:fe:25:23:be:75:6a:10:2f:d9:1c:23:47:6d:16:34:
         c1:09:90:05:d4:cc:c6:e6:82:52:cc:14:51:72:16:02:c1:16:
         8c:c5:8c:a6:f2:93:17:5f:22:23:cc:d4:34:3a:4d:af:b3:98:
         a8:cc:df:6a:f5:a9:97:c3:27:db:20:b7:ec:80:af:01:e8:42:
         24:d4:52:35:f3:7e:30:af:d5:53:1a:24:48:d1:e5:0b:4d:bd:
         9d:ea:ab:79:55:62:6f:b8:98:c1:25:63:49:1f:69:b8:d3:98:
         b8:91:d8:e0:17:f2:43:90:7d:9f:3f:20:4a:20:e5:0f:98:dc:
         f7:5c:eb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:30:00 2025 by rpki-client