Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
File:                     nMYO2IFBiiF-jdPB-lI-JWXK65s.mft (raw, json)
Hash identifier:          zpQW3ArsZ54VHUW325l/JPS/UJFOIsDhqy7quZTOm5E=
Subject key identifier:   84:53:C9:6D:35:5E:10:00:DC:E0:58:C9:61:B4:D0:0C:F0:E7:92:19
Authority key identifier: 9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B
Certificate issuer:       /CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
Certificate serial:       019675D51E660DD5829B56D3E394C3706231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
Manifest number:          150E
Signing time:             Sun 27 Apr 2025 06:00:23 +0000
Manifest this update:     Sun 27 Apr 2025 06:00:23 +0000
Manifest next update:     Mon 28 Apr 2025 06:00:23 +0000
Files and hashes:         1: EP3bkF_F-0JN_ikpcovpxVorS-8.roa (hash: hqxhbHTgDziJ5finpaZT0guvZfxkt53C1CG9ZliF94Y=)
                          2: nMYO2IFBiiF-jdPB-lI-JWXK65s.crl (hash: Iwks4UFVTAVwh9CYnAXandhHHVQAjGcTmCrcr3HSG4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:d5:1e:66:0d:d5:82:9b:56:d3:e3:94:c3:70:62:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
        Validity
            Not Before: Apr 27 06:00:23 2025 GMT
            Not After : Apr 28 06:00:23 2025 GMT
        Subject: CN=8453c96d355e1000dce058c961b4d00cf0e79219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:41:e2:32:cb:e5:f9:d9:0c:62:7d:65:9b:25:
                    67:93:c1:70:b9:4c:22:f9:b7:5d:21:29:3e:75:aa:
                    5b:9d:96:7c:e7:06:14:98:30:91:05:ab:91:a7:73:
                    5e:a2:74:fd:07:9d:93:d5:16:50:f4:34:e7:0a:5f:
                    5c:8b:c3:20:9d:1f:d5:96:cc:78:84:69:13:b3:01:
                    65:05:99:d4:41:ad:02:de:c4:f1:42:06:05:7f:29:
                    52:ff:65:55:07:0f:a8:22:de:9d:23:9f:34:46:b4:
                    2b:91:3a:64:7f:f1:9e:15:7d:cd:a0:31:ba:4c:3b:
                    b8:d5:4b:0a:59:08:0f:3b:8c:7d:56:ec:14:6d:e9:
                    09:0d:16:b2:9d:42:49:c5:ad:a4:ec:4f:49:a7:0c:
                    c4:6d:9c:be:3c:51:4f:d9:18:9c:2c:ba:be:ed:8a:
                    82:f4:0f:e7:5d:21:06:c7:03:2e:2d:a1:76:fd:0d:
                    6b:8f:3b:c1:07:82:7f:e6:d7:3f:c3:1c:ed:af:f5:
                    7d:72:2a:67:2d:5f:c8:e9:43:fd:2d:88:a4:b1:c1:
                    ac:a7:c7:ce:89:da:ec:cc:86:15:da:61:2f:89:48:
                    57:cf:ac:81:7a:0f:22:dc:0a:55:44:0a:f3:4f:a9:
                    74:6c:9b:8b:0b:26:7f:db:18:ca:38:9a:07:77:c7:
                    28:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:53:C9:6D:35:5E:10:00:DC:E0:58:C9:61:B4:D0:0C:F0:E7:92:19
            X509v3 Authority Key Identifier:
                keyid:9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:b4:83:bd:82:2a:22:32:96:f8:65:f9:6d:5e:3f:43:a7:5e:
         fc:95:54:aa:57:20:7b:aa:80:2a:ff:5c:ef:88:63:37:8b:2b:
         2d:f7:21:01:3a:af:d9:8b:a3:7f:43:2b:7d:9b:ba:c1:2c:4f:
         d0:03:96:c3:b8:2d:3e:c3:3d:ed:08:db:0b:e4:ab:2c:c3:ba:
         0e:e9:39:cc:27:6d:75:a5:1c:ae:46:80:d7:56:67:e2:80:77:
         64:82:89:4b:9e:0e:49:8c:70:96:ba:31:0d:ae:38:b4:04:26:
         ac:6d:30:bf:c6:75:df:5f:13:d5:69:74:0d:6b:1a:78:75:dc:
         00:c3:93:f9:d6:70:fe:64:9b:40:5e:24:3a:8f:e8:96:e0:96:
         80:58:1a:69:ec:e7:f5:32:eb:cb:a9:86:21:6e:f9:bb:e4:ef:
         a7:22:71:52:12:10:5a:ea:6c:06:29:cd:f6:df:08:76:e9:ed:
         3d:4b:9e:ce:73:9b:5d:97:e3:96:d7:59:e0:d8:bb:ed:99:35:
         fb:11:ab:02:22:33:36:51:bc:6d:a3:e4:1b:32:5b:52:50:a4:
         17:b8:4d:5c:de:89:53:24:6c:90:a3:2b:42:69:77:7b:c2:cb:
         ac:71:7b:67:0d:7f:52:15:32:62:32:2d:61:7f:f5:41:78:7f:
         88:b0:4d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:49:23 2025 by rpki-client