Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
File:                     pi8tPCadk1InaQsot_vdlT4entw.mft (raw, json)
Hash identifier:          6y9YuCDCGRv9byhB7965WhXZ0pGbExZglSL+m261nGI=
Subject key identifier:   E6:99:DE:E1:10:CA:42:20:FA:27:23:C2:AC:5B:97:CE:9E:4A:94:98
Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
Certificate issuer:       /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Certificate serial:       019674C2932E19E15AE40959B4C36BA124FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
Manifest number:          09CB
Signing time:             Sun 27 Apr 2025 01:00:30 +0000
Manifest this update:     Sun 27 Apr 2025 01:00:30 +0000
Manifest next update:     Mon 28 Apr 2025 01:00:30 +0000
Files and hashes:         1: 2bwoacVhn9Ey8-WA6HPqgOWaS3w.roa (hash: +4RKvBlDgq1ptS9Kf/qX9i6nHjxZCbfdf3DtkVyJdE4=)
                          2: OFc0yBZFy4Wa20RcLrHQGW0n8Z0.roa (hash: TB30ZCImx4FabUXsP6FrJ/8xR1ebGEeWXJhQyL3afw0=)
                          3: gBycawi1ika7Vj_3TGa6n8ZyOcc.roa (hash: eGdxhHwT3weYIz4n0K5fQnn/ZNevVWIphIjoit3SpJE=)
                          4: pi8tPCadk1InaQsot_vdlT4entw.crl (hash: KSHWFJcTO/XI8KBT5mCykbzk+jNqj6i1ovbBWOiyL9g=)
                          5: thsewX5m5QEbqC1hk05OepLePSE.roa (hash: Qec8TVM/3O2FwTtHE6+SXRB/S0VWZFEK7seQA4WOq3A=)
                          6: uZ5GJPrp9SFd4Iq3FGcL7RdiaHc.roa (hash: qgD6SLmZc9P0p+V20mf5ZvuX3cLkvcDCzUTLrsNawj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:c2:93:2e:19:e1:5a:e4:09:59:b4:c3:6b:a1:24:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
        Validity
            Not Before: Apr 27 01:00:30 2025 GMT
            Not After : Apr 28 01:00:30 2025 GMT
        Subject: CN=e699dee110ca4220fa2723c2ac5b97ce9e4a9498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:ed:cb:6d:be:3e:fe:ee:b9:bc:5f:bf:d5:
                    fa:73:b5:5d:b4:de:dd:37:49:76:8a:ea:99:7b:9b:
                    1e:8a:e0:c7:da:ba:db:3e:96:3f:0e:85:89:81:f3:
                    9e:98:38:54:ae:b8:58:81:9e:08:c4:32:19:25:f5:
                    c1:66:98:b5:1a:6a:5f:cb:1c:35:a5:2f:1b:74:f9:
                    86:65:09:ea:22:cd:84:34:78:d0:c5:bd:23:99:a5:
                    65:5c:6f:ea:16:c5:c6:31:f9:c3:5d:97:05:a7:42:
                    eb:77:27:5f:a3:e3:9c:42:8f:cf:80:33:81:e2:b1:
                    2b:28:d9:cd:51:e5:cd:f7:f3:61:2f:d9:f4:b5:ff:
                    16:e1:06:e0:83:54:49:51:f0:98:f0:1d:96:11:d5:
                    27:a8:19:71:86:2e:37:8e:aa:41:67:63:5f:f2:8b:
                    6a:f6:57:28:f4:f0:0e:49:0a:b0:dc:28:3e:7c:1d:
                    39:9b:e4:d2:62:98:6c:70:95:01:8d:6f:55:a5:a6:
                    9d:a9:b4:e6:27:06:91:c1:ae:30:0b:0e:02:09:6a:
                    5d:7b:20:4a:f4:2f:5c:f0:2d:ba:21:1f:6e:f8:1f:
                    97:58:bc:3c:9f:87:3b:23:14:7c:67:a0:c1:05:31:
                    0a:4f:45:8c:99:94:8a:4d:13:09:7a:e1:57:a5:fb:
                    2c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:99:DE:E1:10:CA:42:20:FA:27:23:C2:AC:5B:97:CE:9E:4A:94:98
            X509v3 Authority Key Identifier:
                keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:50:da:83:cc:b5:7a:2b:87:1d:c2:4d:2a:38:72:6c:9c:c2:
         ee:6b:5a:6c:05:86:2b:0f:56:90:2b:7c:17:9c:70:45:75:6e:
         6b:c8:c9:03:ac:52:da:0d:76:b3:d5:12:8b:2b:f0:46:d4:a6:
         a9:db:da:11:c0:49:d7:94:8f:97:80:da:f8:b4:ce:b0:0d:0b:
         af:65:db:25:67:6e:43:21:69:85:f0:62:9d:58:44:d5:2a:80:
         cf:7c:44:77:0b:22:3d:40:11:a4:f4:38:fe:19:4b:12:00:71:
         f8:f5:44:99:e0:32:32:75:47:2a:80:73:c0:eb:8b:a3:2e:86:
         78:4e:79:b3:43:d7:52:f5:b8:9e:8d:ed:86:eb:2f:9d:32:92:
         fa:d8:1a:3e:22:ce:04:0b:70:63:7a:e2:d9:7f:aa:f4:86:94:
         11:93:ef:68:0b:7e:26:a2:48:9e:71:66:fd:43:01:62:98:84:
         f4:60:94:34:27:10:91:0b:3a:c2:f8:41:21:95:37:b8:16:8a:
         78:3c:ef:71:cf:27:d5:f7:1b:86:e9:9e:29:dc:d1:62:d2:81:
         02:98:ed:a5:67:5c:92:cf:28:06:db:bd:e8:cf:48:25:b6:53:
         bd:de:0b:80:b1:e4:32:b6:68:8a:9b:53:dc:76:8f:60:53:92:
         ab:66:e4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:19:45 2025 by rpki-client