Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
File:                     mnuajNgZ9KkgM01-cuwjQIcNd0k.mft (raw, json)
Hash identifier:          QNIV71O8iL/Incajrd+s8NnsBLKds/zjRfFq7Cl8gdk=
Subject key identifier:   41:FD:3C:DA:38:C7:28:5C:9C:D8:46:2B:6D:F8:F9:E4:8D:34:20:39
Authority key identifier: 9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
Certificate issuer:       /CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Certificate serial:       01968992D3B93250FE3D02FEF11116BFA089
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
Manifest number:          0784
Signing time:             Thu 01 May 2025 02:00:23 +0000
Manifest this update:     Thu 01 May 2025 02:00:23 +0000
Manifest next update:     Fri 02 May 2025 02:00:23 +0000
Files and hashes:         1: IKlMOdkuHyBNZAexC-GSK-hjGW0.roa (hash: uA4Q2gsvRlV+sSD0ED9KoTfpAy2mm9Pd7yFqglVpNvQ=)
                          2: ksVbRwAzzCZHci4kH2kQ6u8coqY.roa (hash: QaqWPpVajjOVbtuXKzhecjPRXn+V4yoJpRPVeesXbzw=)
                          3: mnuajNgZ9KkgM01-cuwjQIcNd0k.crl (hash: iZpWYBJ2juRyt0IPHWEc1MALdVoVuzN7QhcvXlmNCVg=)
                          4: uOUxSiBIbzpDJ7EaKMdYFnC-HEQ.roa (hash: P7xU7zipmmpWbMdR+tIYpEi0SHoYEWAWhVNCw2vAWTE=)
                          5: xH_26XIR8lPG36a6e_UAuv1nVvs.roa (hash: skoMmZjq1jRGHL/wRavlOMxLKJaRep20S4gGa/juF00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:92:d3:b9:32:50:fe:3d:02:fe:f1:11:16:bf:a0:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
        Validity
            Not Before: May  1 02:00:23 2025 GMT
            Not After : May  2 02:00:23 2025 GMT
        Subject: CN=41fd3cda38c7285c9cd8462b6df8f9e48d342039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:16:d1:a3:3f:59:a1:ef:c5:a2:b3:03:f5:c2:
                    88:37:cb:72:c5:7a:4a:a9:d1:70:83:34:a5:9a:11:
                    f3:e2:52:86:64:41:6f:68:17:06:4d:08:83:1b:6f:
                    19:80:cf:aa:99:8c:b1:7b:91:1a:e3:0e:d2:70:fd:
                    67:47:23:df:22:95:04:53:f3:b8:82:86:68:62:f6:
                    74:b8:9c:cc:88:b0:ed:4e:77:ba:35:1f:c3:90:2f:
                    0a:c8:18:34:f9:65:f7:f8:c2:6e:2a:0f:84:4f:4c:
                    a9:79:68:ff:46:16:01:b8:0e:2a:5b:34:64:a6:0e:
                    db:61:a8:be:6a:be:aa:51:62:a5:4d:50:b0:29:d4:
                    0f:2e:13:e7:c0:d9:cd:40:cb:e6:6b:19:d4:58:09:
                    4d:40:9d:03:76:b5:8a:6d:9d:20:e0:3d:3f:e8:9b:
                    02:01:77:d2:6c:6b:40:a2:6d:a3:aa:d9:1e:a5:f0:
                    da:b7:ad:76:73:c9:c9:d4:e0:be:17:55:6e:6c:0f:
                    70:6d:84:4c:93:28:9a:07:ef:bc:f9:f0:e2:65:9b:
                    5e:61:d3:e4:0b:b2:33:7f:21:2e:9e:04:7a:4a:8b:
                    25:71:1e:dd:01:f4:03:53:78:c0:f1:34:99:95:b1:
                    c6:05:3b:a4:7d:2a:31:45:ba:cd:04:52:c5:20:07:
                    52:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FD:3C:DA:38:C7:28:5C:9C:D8:46:2B:6D:F8:F9:E4:8D:34:20:39
            X509v3 Authority Key Identifier:
                keyid:9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:65:29:50:c3:a7:15:aa:bc:67:04:8b:b1:1e:d7:b1:83:ad:
         2a:03:79:b2:f8:98:3b:18:d7:99:53:6f:31:92:f8:60:80:b7:
         d2:01:34:89:c8:2a:88:a4:65:79:08:cc:f3:cd:17:c4:1c:52:
         43:f4:f7:69:fe:16:5c:de:ef:35:04:ff:f2:9b:5c:ca:37:cd:
         09:e5:7c:c0:6d:5e:85:d4:b1:ae:79:35:e1:40:82:08:8b:51:
         e1:11:dc:a1:be:74:bf:34:b7:7e:bf:09:0b:49:b8:92:1b:18:
         a4:88:13:07:71:ef:26:90:ff:3b:00:fc:e2:21:ae:d2:31:b8:
         8a:6f:9a:68:f4:e2:6d:12:f0:68:95:ea:11:0f:fa:8b:e8:49:
         13:57:a8:fa:9a:55:f8:78:c6:92:4b:bb:f7:ae:47:cb:9d:d6:
         0a:05:f1:ca:23:bc:d2:d0:b7:5e:6a:a0:bb:63:bf:a9:a0:37:
         98:ec:97:15:68:05:ab:64:8d:17:48:2f:9f:a6:8d:6f:3b:2a:
         2a:3a:57:1c:1f:c9:a9:da:77:81:ce:24:49:35:45:d3:2f:6d:
         34:0e:24:e2:42:1d:fe:6c:d6:13:d5:1d:d5:f2:a6:29:5e:b3:
         85:d5:ec:91:92:b3:aa:fe:00:c8:cd:55:d2:51:f9:3b:b4:9a:
         cd:dc:46:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:14:10 2025 by rpki-client