Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
File:                     66jbO1TQgcML9Rvcexnk9kgLf1M.mft (raw, json)
Hash identifier:          6dD5eWbBykmLP8EQ1VPnvu+FPAZP8RRoHekaR7xNtj8=
Subject key identifier:   D3:21:7D:F6:26:BF:31:8B:10:6E:0A:CF:B4:F5:A0:0C:CC:DA:F9:7F
Authority key identifier: EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
Certificate issuer:       /CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Certificate serial:       01967378AE335CAA41849747AC3CF8F27AE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
Manifest number:          0FED
Signing time:             Sat 26 Apr 2025 19:00:10 +0000
Manifest this update:     Sat 26 Apr 2025 19:00:10 +0000
Manifest next update:     Sun 27 Apr 2025 19:00:10 +0000
Files and hashes:         1: 1-mBckpLEw9UGTfJd1V4E5TNfyV8.roa (hash: M/XKBZLQ+3xBfpkOhilnQwbN0qvFhcpTK4PjZ6r6TmI=)
                          2: 66jbO1TQgcML9Rvcexnk9kgLf1M.crl (hash: DWKnnKvtw9XysJy4EXlm2Je0Q5NtjXUwQBrqMvlqbiE=)
                          3: X59ioMe9M1azoJ6cRzkgIdEAa8w.roa (hash: Ldadp9gWZoAj6JkNflGn39JNMaPrFhlEg4BvEteUS6k=)
                          4: bvd1QkEb9SyVP1-MG1wkMVZ-iKE.roa (hash: H7HXfAZbCHLAR5KhYd5VTNdDAtOCH60344oqrEfBcQ8=)
                          5: z9Yv58abFhPjrR8RFukcWH5etZM.roa (hash: liHiIFHDq5nMOD1zCG5Omq4zbgZPC8dhY7RR/YINHTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:78:ae:33:5c:aa:41:84:97:47:ac:3c:f8:f2:7a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
        Validity
            Not Before: Apr 26 19:00:10 2025 GMT
            Not After : Apr 27 19:00:10 2025 GMT
        Subject: CN=d3217df626bf318b106e0acfb4f5a00cccdaf97f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6f:77:73:34:b3:e7:51:a0:65:0c:ef:d7:c8:
                    0c:a1:90:1e:14:d7:09:b1:4e:dc:5a:99:ce:53:d4:
                    34:e4:f6:2a:cf:c4:87:d9:c8:25:03:cc:88:2e:8e:
                    2a:b8:8f:1e:6a:37:df:25:b1:55:c2:b4:11:8f:f1:
                    19:df:0d:8b:bd:9d:be:b9:dc:65:72:a0:d8:20:63:
                    50:d2:f3:cc:cb:72:7e:09:d6:9b:83:8d:75:fa:74:
                    ca:c6:83:5e:63:c6:52:ec:60:89:c6:25:3f:f8:08:
                    27:ad:27:ef:11:98:2c:3a:17:4e:41:9b:33:8e:dd:
                    9a:35:86:5f:16:01:06:fe:8e:ea:38:e6:3a:73:34:
                    f2:3e:b5:38:e1:6a:83:1d:bc:fe:77:e5:9a:fa:c2:
                    b0:87:6a:7f:c6:5a:10:4b:9b:49:6a:87:02:a3:6f:
                    71:7c:1d:ee:7a:9c:ea:9c:5c:41:d8:6b:ed:79:73:
                    07:48:4a:f7:91:c6:3e:b2:d5:ca:44:86:e0:b5:7e:
                    35:f2:f9:46:80:29:03:a0:c4:78:fc:fd:c2:ac:ee:
                    72:ee:ba:2a:69:59:1f:9a:f2:a7:44:b1:de:97:ef:
                    e5:a8:d7:2d:f7:74:b4:eb:7c:a3:d3:ee:1c:29:9d:
                    f5:16:3f:55:55:c4:62:84:c7:ca:ab:63:91:eb:b8:
                    3c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:21:7D:F6:26:BF:31:8B:10:6E:0A:CF:B4:F5:A0:0C:CC:DA:F9:7F
            X509v3 Authority Key Identifier:
                keyid:EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:85:c0:19:75:59:19:ec:68:83:08:14:22:17:14:22:c6:3f:
         b0:45:9b:6b:65:8f:c9:96:d2:4d:7f:47:01:7c:56:91:40:0f:
         a2:9c:b4:4c:86:3b:a1:6c:f7:eb:a7:ac:a2:bc:d8:4b:3e:18:
         f6:e3:d2:db:76:1f:ec:86:bd:ce:f7:43:b4:77:12:8a:ee:b4:
         20:86:5b:31:d4:3c:fe:b7:ef:f5:63:41:0d:cb:79:2a:7d:5b:
         74:92:41:ef:a9:43:cf:d6:e2:90:c5:9d:a6:6f:49:bb:b3:bd:
         83:a0:12:8b:3a:16:19:c4:ad:16:3c:2a:77:dd:67:a1:75:ce:
         94:cb:89:5f:5f:fd:1c:ea:ee:51:d1:ad:b3:c2:e6:9d:63:26:
         43:ae:d0:b8:c2:4b:b4:16:77:3b:e3:2f:75:99:51:03:fe:a7:
         a5:98:e6:36:2b:a2:f6:28:08:36:63:27:43:6a:fa:b1:b4:5d:
         83:eb:90:0b:75:96:26:46:70:cf:79:a7:6e:d8:49:bf:6d:98:
         8f:32:ba:44:0c:ee:51:7b:10:cf:51:ee:30:98:b5:02:3e:9c:
         55:f2:3b:5b:6d:ad:20:97:09:ac:ab:3b:b4:78:70:a7:83:a8:
         8b:95:f2:f3:a7:ef:1f:b0:71:b1:38:be:50:48:72:2d:ea:b8:
         e0:4b:c2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:06:46 2025 by rpki-client