Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
File:                     p_0_iTNdz4KGZrKPrYrpk71EiHg.mft (raw, json)
Hash identifier:          h0RSDJH3DpI6j+NqHDKmfVRz+I2vm8v+qEjTZwgU1aM=
Subject key identifier:   68:4E:43:06:57:06:35:B0:57:4C:39:C4:44:FD:F3:68:0D:37:18:D3
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Certificate issuer:       /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial:       019682EC5FB2755356E270905196542885E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
Manifest number:          0C9E
Signing time:             Tue 29 Apr 2025 19:00:51 +0000
Manifest this update:     Tue 29 Apr 2025 19:00:51 +0000
Manifest next update:     Wed 30 Apr 2025 19:00:51 +0000
Files and hashes:         1: 3DUEt-aAns-v1SVe6cG9Jeqaah4.roa (hash: 80+E6/cb26cmgMWADgR9cowpvlm1kb/qW3Qt9g0U5L8=)
                          2: JEudm5eaXMbpcorZfF2mGZr0koE.roa (hash: XbkPUoxJZnY0l62UTU5OlIMUIwc1e7/u/vIUsrvTLYY=)
                          3: gJZeDk4rmX44E5axtXtFWO80NO0.roa (hash: pUiSGUoY8i4KMd2N+BSEOVvNbEKEOnmR+nGAVe0LW6E=)
                          4: lejfRms_8jcNpkPTbPyQIBJyGvk.roa (hash: tyCtAQGeo8obwJOw9cT2nm1EzzLsrcw7uVb2b4sZkgw=)
                          5: p_0_iTNdz4KGZrKPrYrpk71EiHg.crl (hash: tTvFYMkWQvvyTKDOcFhvuC8CpIYpZ6Ji9nwXcrXds6A=)
                          6: saa_0VvgXSNx1kkjSqyVEbVnkCY.roa (hash: v+RU7IsAtr1sKZAICZ44u+iiQ3vM7YjRtrxROuRMlCQ=)
                          7: x0T3yvJpLXpG0yBkBOlH0qchh3U.roa (hash: Lt2tpn0tH6x5Kf9HXc8LFADRTohAK1wE2pgpgUDlEXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 19:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:ec:5f:b2:75:53:56:e2:70:90:51:96:54:28:85:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
        Validity
            Not Before: Apr 29 19:00:51 2025 GMT
            Not After : Apr 30 19:00:51 2025 GMT
        Subject: CN=684e4306570635b0574c39c444fdf3680d3718d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:12:89:8f:28:3e:25:7e:b8:2a:ce:2d:e0:d1:
                    8f:41:fb:ed:2f:73:9e:40:7d:74:da:7e:6c:db:32:
                    15:aa:2f:c5:c4:e0:bb:32:aa:f0:b1:dd:c3:e3:ef:
                    78:f4:a9:f8:f7:0e:38:40:bd:51:ac:be:93:c5:da:
                    24:57:25:c0:21:2f:4a:fa:f0:d3:3d:e5:b7:0f:c1:
                    5f:cf:e1:da:20:ca:6f:9c:5e:40:b7:d0:2b:aa:3b:
                    d6:93:f3:b5:39:96:1c:23:80:a7:28:e8:bb:3d:cd:
                    eb:aa:ff:88:7c:9b:ef:8b:da:1d:c7:71:e3:ff:3e:
                    19:f4:ea:fd:26:d0:68:b8:83:03:eb:76:b7:39:c2:
                    31:60:48:e7:8b:28:d9:44:c1:42:e8:89:31:55:fc:
                    b7:95:11:8a:5d:b8:5e:33:fd:46:8b:c3:31:f3:4f:
                    5b:4d:7e:47:3c:22:e2:b7:bd:c5:94:4c:a7:6d:40:
                    2f:7e:9b:ca:9d:dc:19:88:a3:c6:50:ec:37:f0:a6:
                    8b:c3:19:c7:32:ad:2e:24:30:92:58:a3:9d:e2:e8:
                    0b:19:b3:4b:09:a3:eb:68:6d:48:9c:0a:75:4c:d5:
                    a2:fc:12:bb:77:67:15:fb:3b:68:de:98:f9:c6:43:
                    70:dd:75:ce:a4:98:44:cc:e7:77:33:99:d4:57:d1:
                    e0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4E:43:06:57:06:35:B0:57:4C:39:C4:44:FD:F3:68:0D:37:18:D3
            X509v3 Authority Key Identifier:
                keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:14:45:01:1f:73:22:46:80:6b:bd:bb:36:e7:d9:8e:50:8b:
         9e:c6:cb:eb:91:cf:7b:64:d0:9a:7b:9f:30:60:da:a7:aa:83:
         0a:68:ba:69:e1:f9:ea:58:3f:78:ce:1b:22:fc:f8:a8:33:4d:
         af:98:22:a4:7a:4c:08:4d:00:1e:0c:91:7a:0c:cb:71:f0:8b:
         e2:02:f2:9f:3c:38:e2:e4:86:11:3e:0f:bc:18:de:f8:f3:2a:
         4c:08:13:81:95:18:f0:d6:76:d3:c5:2c:81:33:f8:75:84:27:
         6b:5b:df:00:6e:dd:d9:b3:31:f3:45:c3:6c:33:19:d1:9a:ba:
         ff:49:62:c8:86:4f:29:0c:99:f2:a9:b0:7a:7d:77:01:ef:70:
         a7:d4:d6:34:e4:83:60:63:4d:6f:68:95:fb:24:7e:b2:0b:e9:
         17:fc:12:23:c3:a4:9d:e7:6f:40:29:3a:48:f7:ca:18:66:85:
         95:17:b6:73:a3:b9:0d:ba:3a:3e:b9:bf:c8:75:ad:d7:dd:d6:
         0a:42:a9:4c:16:74:58:91:9b:40:38:22:1c:e0:a6:85:5f:6d:
         fe:96:22:30:61:1f:8d:26:fd:64:86:8d:7a:01:20:40:d7:33:
         1a:f2:59:97:6c:ea:f4:a4:ec:fd:02:2b:f7:15:5b:19:e8:68:
         aa:88:73:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:45:36 2025 by rpki-client