Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
File:                     w98u83AH1U-Gu6J1c9M61pXJ7lw.mft (raw, json)
Hash identifier:          ab1r0kndS9Nc2T6/fdK9VTr4A6dzeDGGpuuUzHeNK4o=
Subject key identifier:   12:D9:74:DA:9D:5F:00:87:3F:5C:4A:FE:99:1D:E3:4F:83:93:F2:44
Authority key identifier: C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C
Certificate issuer:       /CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
Certificate serial:       01968D6FEED81A12D30C7CC9BDF4B3AF62D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
Manifest number:          09C9
Signing time:             Thu 01 May 2025 20:00:45 +0000
Manifest this update:     Thu 01 May 2025 20:00:45 +0000
Manifest next update:     Fri 02 May 2025 20:00:45 +0000
Files and hashes:         1: MSS8bajhBaU5VhOzrfA52HmDj84.roa (hash: YEJDRIIvwqwjWO6NfGeQmsZ7v3rXxoUkegHU1CblIHc=)
                          2: w98u83AH1U-Gu6J1c9M61pXJ7lw.crl (hash: fMTDYIizhSCfqwPA4a8AksuNKNi0DC0wPygcu7NsRzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 19:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8d:6f:ee:d8:1a:12:d3:0c:7c:c9:bd:f4:b3:af:62:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
        Validity
            Not Before: May  1 20:00:45 2025 GMT
            Not After : May  2 20:00:45 2025 GMT
        Subject: CN=12d974da9d5f00873f5c4afe991de34f8393f244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:56:5b:24:42:be:51:52:14:5d:b6:e0:b0:5d:
                    58:e0:5d:83:b0:69:6c:55:e0:26:70:de:78:11:e4:
                    b3:34:c7:6a:59:4c:4f:c9:50:18:3f:02:1e:c1:33:
                    fc:da:3f:33:ba:3d:d5:62:c4:25:de:e4:76:da:da:
                    dd:2c:50:61:bb:a2:d4:b8:94:24:e5:ea:d6:b2:c2:
                    a3:89:d3:0e:52:52:7a:c4:85:55:d3:b6:f0:f5:7d:
                    de:2d:12:45:da:dd:1f:1e:5c:ba:2f:2e:db:81:88:
                    85:62:2f:a4:b3:82:03:fb:59:92:20:de:a1:0a:fa:
                    7e:53:58:a9:42:17:2f:a1:4e:46:51:48:f2:e9:14:
                    d6:a5:9c:d2:01:4b:57:c1:d1:33:c5:84:8a:da:2f:
                    43:a1:03:d1:0c:68:03:ca:50:c6:9d:1b:24:15:24:
                    26:0d:22:4a:3d:da:21:63:59:98:5b:37:78:53:d1:
                    26:19:30:72:17:e8:c1:11:58:63:0e:ff:5d:47:76:
                    46:84:b8:a2:79:98:dc:84:cc:e0:a4:68:98:2c:b5:
                    bb:db:cc:af:43:ba:4e:f9:5e:5f:90:40:cb:07:f8:
                    a1:f9:4c:1e:94:96:a1:09:c9:7b:d3:5f:d3:00:1e:
                    67:db:6b:68:62:2c:ce:62:b4:b9:1e:91:d6:22:23:
                    f1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D9:74:DA:9D:5F:00:87:3F:5C:4A:FE:99:1D:E3:4F:83:93:F2:44
            X509v3 Authority Key Identifier:
                keyid:C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:dc:dd:21:00:4d:26:0b:e3:57:ce:db:30:7b:b7:81:8f:a4:
         d0:6c:1e:5c:80:cd:4b:85:81:9f:b3:e8:3a:26:e2:aa:98:f4:
         6d:4f:82:99:52:43:86:ff:9d:fc:b1:76:15:66:a1:fe:a3:16:
         3c:67:f9:20:f1:ad:5e:96:d0:77:fb:b4:53:1c:fb:92:e8:e2:
         6d:90:c4:f5:2d:e6:af:25:d7:2b:88:a1:9d:2d:d9:25:e8:10:
         f0:d2:57:88:b2:9e:9f:82:b5:cf:11:68:f5:5b:3b:31:54:0e:
         61:41:f5:dd:f0:fc:01:af:f0:f1:d6:56:3a:63:b6:55:81:c3:
         49:cd:c5:d2:42:68:31:43:93:28:d1:89:b6:79:31:f1:c5:a1:
         03:92:8e:a7:59:c4:7a:d8:c4:aa:06:b1:de:e2:37:43:55:c2:
         6c:c1:20:04:86:96:22:9a:38:51:36:21:63:d0:66:7c:51:5c:
         44:31:4b:22:3f:23:22:f2:01:cd:79:d2:2d:02:a7:b0:ec:1b:
         ec:c0:cf:6f:cb:35:c6:ba:e7:b2:cf:24:07:bb:39:1a:35:32:
         a9:84:4d:58:88:57:5b:49:eb:06:d9:a0:87:6b:cb:8b:ea:77:
         7d:f2:e5:e6:5b:11:03:14:86:4a:a0:05:72:f4:73:be:48:c4:
         8d:84:4a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:03:15 2025 by rpki-client