Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
File:                     0mpECeqR9QbWM4ccbDVUDUYDN9E.mft (raw, json)
Hash identifier:          MvlAWqs2Hx+IPT8LAjVlUbKUoFmBuIJv0Kj3hO3dW34=
Subject key identifier:   E0:87:71:E4:65:39:1C:05:9C:0F:42:FD:9B:27:4A:16:56:AE:19:E0
Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
Certificate issuer:       /CN=d26a4409ea91f506d633871c6c35540d460337d1
Certificate serial:       0196760C8175928A1D8F91AEB5BC76968945
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
Manifest number:          0CDB
Signing time:             Sun 27 Apr 2025 07:00:53 +0000
Manifest this update:     Sun 27 Apr 2025 07:00:53 +0000
Manifest next update:     Mon 28 Apr 2025 07:00:53 +0000
Files and hashes:         1: 0mpECeqR9QbWM4ccbDVUDUYDN9E.crl (hash: 4r9B2LP3khHPI/7RJ1+SYLxcS58rkvoq9Upcw1ECjzY=)
                          2: 3KNWi4PLke2pc0vhx5QOX6ZuOCA.roa (hash: tpM6u4qaCB/SIK4Ynv1MNnqK+07Rhub80n1mFXvkjwo=)
                          3: 8jp9A2yp5Ctl0aMaJZj7S5h9uCE.roa (hash: WHkL8yvON59diJqVD7F/Lsgn1viIvZplizI2VcPWz8c=)
                          4: o0naTY2lU_XCKHCOD4HRfjiAS20.roa (hash: ctUbEkyNdhuq/LnXlhlDp6xaZ2CRNDEI5dgg4y7saV4=)
                          5: q2PhtlxaWPMFB5GcAwVXc_wKZRg.roa (hash: 7exTPbh4OHsbAofG4+Te19GLuWs10iEQg0/XWCeBGJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:81:75:92:8a:1d:8f:91:ae:b5:bc:76:96:89:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1
        Validity
            Not Before: Apr 27 07:00:53 2025 GMT
            Not After : Apr 28 07:00:53 2025 GMT
        Subject: CN=e08771e465391c059c0f42fd9b274a1656ae19e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d8:9f:00:5c:a0:07:56:1b:b2:fa:34:a4:81:
                    2b:b7:fa:a8:1d:7e:c8:2a:e6:70:a3:26:50:dd:93:
                    1b:a0:51:d7:24:bf:b2:bd:03:dc:53:fa:87:5e:5b:
                    a9:63:0d:eb:1c:49:13:c2:7a:fc:19:6b:cc:36:d6:
                    d3:40:ec:03:1f:6c:3f:ce:6e:51:2b:c3:35:ad:28:
                    c5:10:ce:71:02:ed:4d:0a:0b:53:de:75:43:98:95:
                    69:82:02:c9:ad:c5:ce:18:56:80:0b:d8:53:b3:77:
                    bf:7e:6f:a9:4c:29:d2:9f:ef:30:1d:d7:cd:86:57:
                    c8:dd:39:6a:e7:64:22:d2:c5:54:12:37:9e:b0:70:
                    c3:6e:69:a9:29:c3:5d:39:8b:0c:87:a7:46:5d:72:
                    1b:8f:21:b2:2f:37:5f:b8:1c:f1:48:05:69:ee:dc:
                    f6:09:63:e5:99:be:ef:58:05:81:ff:ca:79:62:97:
                    69:4f:87:74:f3:37:69:b3:22:9d:19:0c:21:58:86:
                    46:db:6b:2f:11:88:5f:79:58:36:e9:1c:29:89:07:
                    dd:22:b5:58:19:02:cb:b1:bc:8f:11:13:c3:79:4f:
                    7d:d1:f6:08:7f:a6:a4:bd:4a:7b:db:62:e9:01:87:
                    c7:89:dc:be:ee:61:fb:56:d8:3b:d1:d4:24:60:6d:
                    23:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:87:71:E4:65:39:1C:05:9C:0F:42:FD:9B:27:4A:16:56:AE:19:E0
            X509v3 Authority Key Identifier:
                keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:88:eb:d1:37:9d:b6:ab:14:fc:06:46:c2:df:8c:17:63:58:
         5e:fc:ba:c7:21:6b:84:3c:02:51:f9:90:33:10:9d:cd:d1:03:
         3b:13:47:d6:57:b6:5e:a1:64:3f:dc:17:55:15:b6:73:d8:c9:
         41:66:88:e0:3a:7f:96:a3:6f:55:83:d4:18:b8:9a:02:20:c1:
         c9:f4:26:e6:1d:6f:90:5c:ef:05:e0:20:c0:67:da:d4:85:7a:
         2d:8a:88:70:ab:c7:6b:3a:34:15:70:08:65:8c:c0:b1:d3:e2:
         a5:14:5d:05:3b:d8:e2:41:d1:4a:8b:3a:84:45:79:fa:a9:e3:
         ac:5e:27:f7:37:ba:e8:82:da:e8:0b:ea:94:e2:55:45:85:ad:
         54:74:77:ae:59:61:ba:1e:8c:8d:26:80:d1:c0:cb:c3:87:6e:
         59:02:3a:69:0c:b2:f7:56:4e:9a:88:e3:e4:8a:b1:09:a6:23:
         ec:a2:18:b9:75:c7:58:9c:b7:39:bf:1d:27:8f:ea:0a:d2:d8:
         d0:cb:63:85:51:d3:c2:6e:0b:3c:35:cd:d5:c5:49:d3:b0:24:
         26:c8:3d:0c:3b:06:b7:db:78:49:20:45:9a:07:6b:37:65:f8:
         c0:99:12:fe:d9:8a:4e:45:f2:7f:fd:b4:43:38:4d:93:b1:ec:
         9a:82:0c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:26 2025 by rpki-client