Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
File:                     m7rm4-12beR6umaTu1r4pkiXQxA.mft (raw, json)
Hash identifier:          ed01th5fpvO79nBAvjSBvI/DzPe4pHgN3KmM4owOgFM=
Subject key identifier:   16:15:90:A2:1E:D0:6B:B2:A1:92:9D:23:67:CC:F6:A4:3E:FE:C9:C9
Authority key identifier: 9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10
Certificate issuer:       /CN=9bbae6e3ed766de47aba6693bb5af8a648974310
Certificate serial:       019678D63EE2249082CCE4B3961543932A0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
Manifest number:          1513
Signing time:             Sun 27 Apr 2025 20:00:28 +0000
Manifest this update:     Sun 27 Apr 2025 20:00:28 +0000
Manifest next update:     Mon 28 Apr 2025 20:00:28 +0000
Files and hashes:         1: FNI-KOWU4HvYV7s0S8HSH_MAXKs.roa (hash: SxzdVdUSQKrcckNUFu+lpTFeygIkg6UP1Y+6mqUGLxE=)
                          2: LzFXYdQCjAwuxvkHOYgtwse77OA.roa (hash: mZphFwkdwTLagYOCmsfTIvyvpWa3QboinjiRqvkQOZQ=)
                          3: m7rm4-12beR6umaTu1r4pkiXQxA.crl (hash: tlLOdw7WE7R1+uPoJRUEud6tiBeWW2sZ9gzAsoBY9X0=)
                          4: tKyKZjLEDoku_61jkuUZJsA6mh0.roa (hash: mS9ELNBChswUREefPfJwkVLPPBkzapMb0K1Iwkj0ZXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:d6:3e:e2:24:90:82:cc:e4:b3:96:15:43:93:2a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbae6e3ed766de47aba6693bb5af8a648974310
        Validity
            Not Before: Apr 27 20:00:28 2025 GMT
            Not After : Apr 28 20:00:28 2025 GMT
        Subject: CN=161590a21ed06bb2a1929d2367ccf6a43efec9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dc:ad:08:b9:87:b1:d5:37:d2:94:f5:fc:9b:
                    9f:55:dd:87:ba:86:71:f8:f8:39:aa:a3:7f:1d:ec:
                    4e:f5:a5:09:4a:20:57:05:6d:0c:22:cc:8b:77:bc:
                    24:7f:92:f9:6a:af:09:40:15:ec:04:19:ce:9d:48:
                    28:53:5f:c9:f2:19:f3:e1:b6:1d:1a:f7:e9:71:c5:
                    53:9c:db:94:0c:41:42:f0:53:db:84:ab:02:44:2e:
                    8a:4b:1a:c7:c1:87:f0:87:a7:e3:39:8c:1f:dd:b9:
                    36:cf:66:e6:e3:d7:5b:0e:1f:44:49:7d:c1:80:ab:
                    5e:22:ce:b8:7b:cd:1e:88:79:70:53:6f:5f:f5:88:
                    f7:2f:2b:f6:a1:a3:2d:0e:5d:35:45:f2:50:f9:71:
                    14:a6:b9:a1:ef:04:77:ef:96:d4:99:b3:ba:ad:9b:
                    48:ae:f0:8e:db:aa:b5:28:74:e0:a5:4d:94:97:cd:
                    08:a4:c0:ad:9d:c5:e7:b9:51:a5:72:fd:d4:3a:92:
                    16:1f:55:8c:03:4e:28:6b:17:9a:8f:4d:f4:75:73:
                    9f:56:d6:d6:fe:c4:07:29:74:d7:db:6a:38:5a:24:
                    4a:bc:7d:dc:45:32:29:44:ac:f8:4b:ea:8c:49:d0:
                    98:dc:8e:8c:ee:6f:8f:46:d1:07:82:b7:cf:23:b2:
                    01:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:15:90:A2:1E:D0:6B:B2:A1:92:9D:23:67:CC:F6:A4:3E:FE:C9:C9
            X509v3 Authority Key Identifier:
                keyid:9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:78:ca:ed:ad:8c:0d:b1:3e:8c:b7:15:06:56:c4:cc:71:31:
         52:f9:57:c3:4e:39:a4:17:cb:1e:8a:42:be:a0:7a:4e:7c:51:
         e4:5a:18:0a:b3:ab:58:e1:c0:88:a4:bb:ab:2b:00:51:ff:a6:
         36:7a:da:e2:7a:8b:2d:91:0f:b5:45:08:f1:c6:48:39:a4:09:
         2a:b6:ca:67:d4:0b:c8:fc:21:46:32:fb:ee:80:27:2a:81:4d:
         b5:25:48:60:2c:32:b9:28:35:c1:4e:d6:09:e0:f3:0f:8a:56:
         7e:5d:0c:6c:47:95:51:f6:24:23:1d:08:ff:96:11:cc:34:fd:
         82:04:6d:95:27:63:73:f3:20:9f:11:43:85:e8:53:2e:31:93:
         04:a8:57:ac:84:76:a9:dd:30:45:ca:4c:e3:e2:af:26:3c:0c:
         2a:f5:db:fe:ea:ec:75:8b:d9:af:cd:c7:a9:49:3d:d5:7f:67:
         fc:fd:b1:7c:cb:7a:68:d9:d1:66:03:dd:6e:26:40:35:eb:08:
         42:d6:6f:95:23:0f:24:9a:02:28:58:bd:fd:29:92:06:15:49:
         01:12:e7:20:4c:06:5e:77:25:ce:fe:67:ba:8a:b0:b0:d8:a0:
         ff:c6:07:78:c5:00:44:6f:68:80:09:bd:d9:d9:dd:14:aa:41:
         fc:c3:a9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:55:32 2025 by rpki-client