Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
File:                     Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft (raw, json)
Hash identifier:          uzHi++LE2tfAC6DXPx+zXe/BUhKxQiYLq4j4a3Ivd3E=
Subject key identifier:   CB:EE:72:B3:5E:D3:88:31:25:32:FA:29:02:B2:26:CE:A5:DE:8E:92
Authority key identifier: 31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E
Certificate issuer:       /CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e
Certificate serial:       019680FDC257C51BA3EECE64D46D7A5BF42B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
Manifest number:          078C
Signing time:             Tue 29 Apr 2025 10:00:36 +0000
Manifest this update:     Tue 29 Apr 2025 10:00:36 +0000
Manifest next update:     Wed 30 Apr 2025 10:00:36 +0000
Files and hashes:         1: 5_iMF-a8NMa1YPR_P3PyRQQW0y4.roa (hash: WcT24IP06Ufo9Qw11IKoVe7vKY2EcXtQIG8CxBVwap8=)
                          2: Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl (hash: orCb9veUzc60qc4ea5E1gBJTNzu39UBIp8J3JOipps0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 10:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:fd:c2:57:c5:1b:a3:ee:ce:64:d4:6d:7a:5b:f4:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e
        Validity
            Not Before: Apr 29 10:00:36 2025 GMT
            Not After : Apr 30 10:00:36 2025 GMT
        Subject: CN=cbee72b35ed388312532fa2902b226cea5de8e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d7:06:10:4d:f0:52:e1:4a:b9:fc:4e:a8:8b:
                    b0:56:29:40:ce:ee:b5:cd:87:a2:d4:85:87:33:dd:
                    f9:69:f3:60:96:53:ee:e1:78:5b:06:df:99:1c:55:
                    52:84:4f:4b:31:c0:a7:38:ac:f6:4c:13:b5:c9:e5:
                    f7:9f:28:48:68:8a:61:09:8f:1b:e5:93:11:70:9e:
                    ee:92:c1:20:6d:c2:fe:dc:90:b6:18:00:ba:3b:8f:
                    2b:ce:7b:aa:9e:b7:99:b0:33:42:09:59:ff:23:ae:
                    45:28:ae:52:eb:30:57:a4:25:55:28:3d:35:f9:09:
                    1a:c7:c2:b3:05:8a:bc:cb:55:95:c8:f3:bb:b9:90:
                    e5:de:a6:31:76:72:b3:87:9c:dc:d5:4b:0b:d0:af:
                    6a:89:3e:2b:3d:15:a7:e8:67:49:35:b8:8a:8b:9f:
                    d2:05:56:97:9c:29:1a:5c:e2:c2:34:30:2e:d4:2c:
                    66:59:5c:d0:47:60:ec:24:91:f6:93:7c:48:1b:8c:
                    1f:2a:14:5e:5e:f8:19:72:78:cd:46:9b:3f:41:82:
                    96:8a:91:01:56:bb:3c:5e:40:6d:ab:cd:8b:07:a9:
                    c5:a1:f0:db:18:86:66:5d:02:ce:ca:80:ab:75:0d:
                    dc:cd:a7:bd:42:85:80:86:cd:13:e7:d8:9b:58:1b:
                    db:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EE:72:B3:5E:D3:88:31:25:32:FA:29:02:B2:26:CE:A5:DE:8E:92
            X509v3 Authority Key Identifier:
                keyid:31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:a7:9c:35:14:b2:c2:d8:56:a9:19:a4:84:28:d7:14:a6:7c:
         cf:a2:12:4a:17:79:f5:a7:8d:ca:40:72:fd:80:a7:de:3f:8f:
         97:c8:3e:5a:8a:41:41:db:6a:38:89:36:bd:c8:d6:b0:f4:26:
         90:3e:e9:9e:e7:f4:d4:e8:12:e1:a5:4b:a5:10:c3:b4:dc:02:
         68:bc:af:de:e5:08:e7:ee:71:98:03:46:a2:3c:fa:0d:cd:c0:
         c7:43:34:a9:69:b3:ee:8a:84:b6:02:d5:d8:59:12:7b:ca:03:
         cb:d6:22:d0:90:2e:a1:0d:eb:4f:ef:3f:b0:12:9d:73:33:d2:
         96:a7:63:0e:5f:39:65:1a:76:00:89:41:fc:dd:a9:aa:6b:10:
         7b:13:0a:3e:4a:8a:66:99:89:95:2d:6b:95:f8:a7:1e:dd:73:
         8e:56:a1:84:05:0c:f0:4f:33:3b:a2:72:cc:9e:57:23:3e:00:
         84:94:3b:1c:26:6e:96:be:f2:38:89:c3:c3:71:e8:f4:01:70:
         bb:ef:9f:32:55:2d:84:c2:59:40:6f:05:74:98:cb:7e:6d:26:
         18:b7:12:b2:02:8c:47:e0:e3:c2:e8:ef:27:20:49:82:1d:77:
         d6:c5:3e:ed:c4:5c:fa:64:43:dc:37:56:b5:c4:14:7e:2a:7d:
         da:1e:33:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:35:25 2025 by rpki-client