Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft
File:                     m-02rxPaSC_feftUA-UHSGDuzQ0.mft (raw, json)
Hash identifier:          s0qaiFOeFGjMZrwrDtpGACztItTxRLFtVwZzPD2gaSk=
Subject key identifier:   62:8C:AE:EE:0C:D8:7D:DE:7E:1F:5C:30:C7:A6:05:65:02:3C:A4:EA
Authority key identifier: 9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D
Certificate issuer:       /CN=9bed36af13da482fdf79fb5403e5074860eecd0d
Certificate serial:       019685B62733D4D2D533E5B0A6C2283C6314
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft
Manifest number:          0FFA
Signing time:             Wed 30 Apr 2025 08:00:29 +0000
Manifest this update:     Wed 30 Apr 2025 08:00:29 +0000
Manifest next update:     Thu 01 May 2025 08:00:29 +0000
Files and hashes:         1: gME55grAdW0csfpDqI4X-z1lPB8.roa (hash: Yk24RuTuN+kQwIiTqSqW+TjwkayeuH80Y+g3ReFhIuE=)
                          2: m-02rxPaSC_feftUA-UHSGDuzQ0.crl (hash: MJj8JGoXiSGnuCTjXKrtm9Ud89C5+jvJP38V6ad8qL0=)
                          3: oAMq7eOSrrg7QzHYvuiclu2pDcU.roa (hash: 0Dq9HT+D04Msgy5j4AI+QE/myTwZkQVZ5ZeJBagVuyM=)
                          4: rPUiYOwFFBXwEbG0rI7AP5flCD0.roa (hash: fpp2fjiduFcCROlP6+vFm2e63EILUjHK8HyGsStaukM=)
                          5: tsiU7azXEn11ZU6Xi_XUw-9XI8A.roa (hash: zObDmeFB3M8dfzRuyTAH/oAzX2g0/cCu39kU8lAYB64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:b6:27:33:d4:d2:d5:33:e5:b0:a6:c2:28:3c:63:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bed36af13da482fdf79fb5403e5074860eecd0d
        Validity
            Not Before: Apr 30 08:00:29 2025 GMT
            Not After : May  1 08:00:29 2025 GMT
        Subject: CN=628caeee0cd87dde7e1f5c30c7a60565023ca4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0f:ff:a1:8e:d9:d4:7c:f0:c7:f5:df:2a:b2:
                    cf:cf:ad:5c:6b:8d:d0:da:6a:ba:84:df:fb:ad:ac:
                    f2:52:35:a2:ec:ea:fa:bd:dc:b1:09:23:96:dd:bf:
                    cc:69:27:9f:a0:f3:ff:74:7b:a7:7c:ff:b2:97:51:
                    f1:e5:0d:01:1f:00:d6:5f:4d:fa:1e:7e:0f:67:88:
                    ac:1c:0c:40:20:92:6d:9c:65:d4:56:e1:4e:60:8d:
                    26:4b:f2:02:7b:56:67:8d:8a:72:7a:ea:c4:a1:71:
                    8b:74:e0:9f:f3:72:67:14:46:28:4b:77:8d:f0:52:
                    56:02:4e:0e:14:23:2b:59:eb:0a:00:38:77:af:b9:
                    ca:bb:bc:2d:f7:2e:fc:e2:bb:e5:9e:f9:2a:81:94:
                    66:80:7d:47:9e:6e:6b:ac:7d:8c:e6:03:f2:c1:99:
                    aa:7e:02:45:d4:3a:9f:fb:12:4d:37:ca:fb:83:95:
                    54:03:0f:6d:b8:86:60:7f:73:80:99:f1:87:59:5b:
                    ff:ce:13:ae:4b:e9:8f:25:9d:56:d1:01:a5:d2:b7:
                    1f:85:f1:0f:66:ae:29:4d:f0:5d:f2:fa:b4:1d:52:
                    50:13:65:56:40:e5:b6:a1:6d:19:6b:fa:7c:3d:e6:
                    f1:1a:67:db:f2:09:12:7a:29:f4:0d:b6:9a:37:d3:
                    40:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8C:AE:EE:0C:D8:7D:DE:7E:1F:5C:30:C7:A6:05:65:02:3C:A4:EA
            X509v3 Authority Key Identifier:
                keyid:9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:aa:22:1a:84:d2:2b:d7:d4:a4:f8:d5:8e:75:9e:2f:12:7b:
         41:18:3a:11:75:80:40:f2:7d:63:a8:04:87:8b:49:dc:c8:ec:
         47:26:9b:54:1b:0d:c2:91:54:da:62:4c:f6:aa:4e:fb:b8:1c:
         e5:ba:2e:e9:bc:c6:14:fe:f4:38:27:91:b6:bb:fc:71:78:2a:
         83:ae:e3:4c:33:c0:5d:13:11:39:19:39:4e:7e:8e:a5:ae:da:
         d2:66:88:02:9e:be:e0:10:8c:13:34:48:80:a0:ec:b0:c6:9a:
         92:d6:4b:6a:55:04:03:ce:14:11:11:e2:24:67:08:15:86:e6:
         8c:30:e7:6f:31:3c:ad:6f:de:05:e9:8b:f8:75:f5:d5:12:44:
         ec:fe:e7:ff:4a:12:08:7b:3c:6e:2c:6b:e7:c1:ae:42:9b:8d:
         a9:9e:11:8f:bd:37:9d:05:47:c9:2a:12:2d:54:b9:2f:12:f8:
         fc:44:49:ce:3e:92:50:2b:af:73:4a:7b:07:71:e1:64:3e:3b:
         c8:e4:30:c9:b9:ab:36:95:70:0f:bf:f5:db:a4:aa:8c:5c:d9:
         1b:97:ad:cf:e3:a1:73:12:de:a8:61:0c:05:14:7b:a9:0b:ee:
         70:3b:67:0c:e2:0a:6d:06:3d:75:02:7c:40:99:21:4a:18:2f:
         c4:a5:b3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:18:45 2025 by rpki-client