Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
File:                     iZJBoANIMVwCwOKpFQuGMIfRyFc.mft (raw, json)
Hash identifier:          YOJM75ofmTWWvBEfXYkeh8VbNoFoKjeX/okGNSAWGkM=
Subject key identifier:   E7:CF:34:75:08:7B:9A:F4:DC:20:E2:96:E2:7E:F3:38:5E:35:FE:7C
Authority key identifier: 89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
Certificate issuer:       /CN=899241a00348315c02c0e2a9150b863087d1c857
Certificate serial:       019674F9EBEAD5FAD7C8E796B73D5CBB753F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
Manifest number:          0341
Signing time:             Sun 27 Apr 2025 02:00:58 +0000
Manifest this update:     Sun 27 Apr 2025 02:00:58 +0000
Manifest next update:     Mon 28 Apr 2025 02:00:58 +0000
Files and hashes:         1: 4ttxHqG59duZ5ALfvPB_x9iVGCs.roa (hash: fJvQbvQakJgNuM3dzhqnbPVFRMsvp98NzyW7hIi8pio=)
                          2: NhicUss_-kBiNIFBTBFdbugxZaU.roa (hash: x3eOaLcQnmMrFRkUTb/8DthAE9edvP0YO/DPYux9zTE=)
                          3: UZiFFztRfeKmfRhqu-DMXiBHSwY.roa (hash: LxeETqbIhKu+XVMzaqPP2mnLDNqdpGhRBtoYHWGJNkY=)
                          4: WDn1mbHRkiQwKXkGzlfqrEUF0Pw.roa (hash: L1bh3lJQlQbB+0euiek2LnVAf5GTLk4lwBwlyM5cRJ0=)
                          5: eeMUvhikn7BcQGcUG3J_KumqmI0.roa (hash: rMyPtHGXVd59N7ATnOyDSnVnrrZL6fZtXGf2fhRBUW8=)
                          6: iZJBoANIMVwCwOKpFQuGMIfRyFc.crl (hash: IG+bIOTBZQRQGK3ThVMyqtJkXv2zVOoyR4zoEvXijOQ=)
                          7: yHRWciFFOnDT7mIADGdvOTHOJRI.roa (hash: OaAq5TmHl/2ctslO8/QJcZi4nuJ1WFnqWLqN1q7rq1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:f9:eb:ea:d5:fa:d7:c8:e7:96:b7:3d:5c:bb:75:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=899241a00348315c02c0e2a9150b863087d1c857
        Validity
            Not Before: Apr 27 02:00:58 2025 GMT
            Not After : Apr 28 02:00:58 2025 GMT
        Subject: CN=e7cf3475087b9af4dc20e296e27ef3385e35fe7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:89:05:fd:5f:e0:f5:8a:55:07:83:03:86:33:
                    57:39:64:36:f0:1f:78:69:16:54:fe:94:d6:ce:8d:
                    14:8e:f0:27:99:11:0c:e3:a0:3a:54:b6:d5:3c:6e:
                    e1:dc:45:a1:91:49:d1:ce:ff:5d:1f:60:3f:54:ef:
                    50:16:24:97:fd:af:62:5c:0a:c1:d4:79:81:e9:13:
                    da:b3:52:38:f3:af:8f:0d:ef:ba:37:ce:c9:73:96:
                    37:95:5c:f9:52:fe:75:94:af:47:8e:91:db:51:5b:
                    de:59:fd:15:29:fa:fe:93:db:b6:c9:3e:cd:a2:7b:
                    79:b4:23:f6:ef:30:a4:8b:67:87:62:97:b0:aa:fc:
                    6f:a7:ee:c3:ce:16:93:0d:5f:e6:08:7d:7c:8f:95:
                    50:b5:3b:65:cb:31:3b:87:b3:b8:ce:ea:36:eb:b1:
                    ac:e8:0e:8a:b0:d7:7d:0e:24:58:6f:e7:5c:46:5b:
                    98:d9:d9:30:d5:3b:7f:32:0d:ff:e4:c0:0b:1c:04:
                    f4:5a:27:1f:4a:8f:21:e8:9e:c1:62:d6:6b:59:a4:
                    7a:7b:b2:f4:e6:80:ef:04:ac:ca:d3:54:41:de:cc:
                    2a:3d:6e:db:fe:90:31:e0:24:47:5e:a3:28:e8:a0:
                    06:db:cd:ee:86:32:72:90:d6:e0:2f:91:62:e7:20:
                    ce:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CF:34:75:08:7B:9A:F4:DC:20:E2:96:E2:7E:F3:38:5E:35:FE:7C
            X509v3 Authority Key Identifier:
                keyid:89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:8d:68:e1:17:bf:ef:72:ae:6a:71:9f:ec:8e:6e:98:c6:52:
         dc:ce:53:b3:95:81:7b:b2:89:ee:14:16:cc:21:02:54:6b:bf:
         d2:81:0c:e9:51:ba:3d:7c:68:07:70:a6:89:68:ea:68:35:8f:
         8a:32:b5:e4:7a:87:67:2b:e9:54:ee:9a:28:84:89:9c:1d:9b:
         5d:49:57:dc:fd:71:08:43:ec:04:12:1d:a0:22:7b:be:90:34:
         95:08:1b:6e:b3:51:48:3f:c4:6f:9c:a9:26:0a:b5:1b:7b:73:
         78:53:ec:0f:7d:ef:72:6c:65:a8:5e:d6:b1:43:ef:45:b4:6b:
         60:5e:69:e5:50:6b:72:7f:46:8b:6f:12:df:60:d1:00:3b:a8:
         c4:ac:a6:9c:85:ee:c4:81:50:df:56:a9:9a:3f:91:e9:41:9f:
         70:86:06:14:77:13:2a:7b:bf:9c:eb:1c:ba:10:4b:c4:cc:60:
         e9:17:9a:a0:ae:bd:5a:3c:c9:67:5e:08:2c:d8:6f:df:a9:03:
         c6:8e:5d:47:b9:c3:e4:f9:6d:f5:c1:96:6b:f1:9d:f0:92:df:
         d2:e5:bd:65:59:9a:f1:69:f0:3a:c4:02:61:e3:72:f5:93:72:
         8d:ee:a0:20:e9:b4:17:60:71:25:a5:28:3a:a1:96:78:6c:52:
         e1:a3:f9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:07:42 2025 by rpki-client