Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.mft
File:                     elUMgGW_YDP8xqOwOBPvknGSQZY.mft (raw, json)
Hash identifier:          pKbjS0YXnnnteTXRiSDgIc9UrF4rQPvSuU5yd7uFOfs=
Subject key identifier:   D3:ED:59:B8:F9:A9:DF:A7:E3:33:E8:B4:CF:B8:31:B6:B4:3B:DE:D4
Authority key identifier: 7A:55:0C:80:65:BF:60:33:FC:C6:A3:B0:38:13:EF:92:71:92:41:96
Certificate issuer:       /CN=7a550c8065bf6033fcc6a3b03813ef9271924196
Certificate serial:       019676E800D9F87607CA276A89F5AC1FB00E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elUMgGW_YDP8xqOwOBPvknGSQZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.mft
Manifest number:          0979
Signing time:             Sun 27 Apr 2025 11:00:38 +0000
Manifest this update:     Sun 27 Apr 2025 11:00:38 +0000
Manifest next update:     Mon 28 Apr 2025 11:00:38 +0000
Files and hashes:         1: 8bm2v05Cci050GG81KJuy05pI_A.roa (hash: WQq4H/F9fltXEKAzp88xq0uJAhnzAkfYy8vG0Rs7Ric=)
                          2: MIcKbcX6sCg2UYL51k9PfAb2yXk.roa (hash: kvxBXVnEalI9jTyDI+HBKgmRDyoiQHFIPceL8IvKfYg=)
                          3: YJIMH9QhIPJ1Xktfo6oftVo9IE8.roa (hash: VvBURRBsPT2z47HjiEc1H7dnCFoGIcl2xyHs5PJifoM=)
                          4: elUMgGW_YDP8xqOwOBPvknGSQZY.crl (hash: HEs+yrmqkJU0vYs91djzyUYRScJCJEyBT1brx758n2M=)
                          5: lwcaxHGxZGYqPpFywMXAQis0_48.roa (hash: bvDYr9v7hEAaIJ3YVNoznlJECQRudV3izaNo7DTPlvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elUMgGW_YDP8xqOwOBPvknGSQZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:e8:00:d9:f8:76:07:ca:27:6a:89:f5:ac:1f:b0:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a550c8065bf6033fcc6a3b03813ef9271924196
        Validity
            Not Before: Apr 27 11:00:38 2025 GMT
            Not After : Apr 28 11:00:38 2025 GMT
        Subject: CN=d3ed59b8f9a9dfa7e333e8b4cfb831b6b43bded4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:a2:aa:ce:f9:42:8d:ca:b2:41:37:4b:b1:
                    c8:4d:ca:0e:61:92:08:18:5a:56:38:9e:10:36:62:
                    a0:cc:62:d5:1d:91:61:ad:da:4a:95:11:1c:8a:1d:
                    7d:6b:7f:2f:bb:23:83:e7:8b:53:ed:d2:dc:8f:27:
                    a9:57:cf:fb:27:81:a1:ad:80:9c:23:de:ac:78:ff:
                    ed:db:b3:93:69:12:e3:9f:6a:6b:31:00:e9:42:cc:
                    78:94:bb:cd:b6:89:75:cb:18:59:b7:fa:5c:d2:ec:
                    eb:cc:05:54:4b:80:b1:25:06:b5:23:c2:bf:87:8f:
                    26:9e:f8:19:15:03:23:f0:cd:5d:08:27:d1:cf:2a:
                    1d:b5:3f:b3:c5:50:13:5e:30:b4:65:28:af:ff:0b:
                    8f:a9:34:c2:f7:37:2f:fe:e6:4d:ea:7c:ab:c7:a8:
                    71:5c:49:60:9f:51:28:1f:c0:d4:1e:85:ab:f8:c8:
                    c1:67:da:92:ef:e2:6d:0e:51:31:65:b2:f0:12:66:
                    70:b4:16:4f:8e:e2:7f:5d:04:ca:f7:03:c7:18:bf:
                    83:3e:80:bd:5e:0a:b3:01:00:dd:72:a7:b9:6c:1e:
                    c6:06:cd:ea:22:0e:bf:b4:95:db:b9:ba:10:75:3d:
                    36:99:50:f5:d3:a7:59:20:69:99:a6:d5:e1:c2:03:
                    01:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:ED:59:B8:F9:A9:DF:A7:E3:33:E8:B4:CF:B8:31:B6:B4:3B:DE:D4
            X509v3 Authority Key Identifier:
                keyid:7A:55:0C:80:65:BF:60:33:FC:C6:A3:B0:38:13:EF:92:71:92:41:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elUMgGW_YDP8xqOwOBPvknGSQZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:1b:3b:12:c9:c5:42:6c:1d:a3:7a:f6:24:13:84:e8:b7:01:
         e4:e2:a0:ab:43:b6:90:2a:43:97:34:5a:d9:f3:8f:9a:74:12:
         db:4f:8e:9a:db:9d:4d:7f:56:08:78:52:08:0b:b2:b0:50:4a:
         3e:7a:aa:af:89:1d:c7:14:d3:0f:c3:2b:1b:4f:05:5a:c6:1b:
         cf:e1:17:1c:c5:16:89:2f:7d:18:23:ec:bc:aa:9a:2b:c8:eb:
         39:70:14:9e:22:2f:94:e9:0b:67:4b:c2:c2:fe:fb:39:89:62:
         f4:cf:b9:bc:23:7c:5f:22:34:ab:cf:ae:07:94:99:e0:92:c8:
         65:0f:35:19:cf:06:5a:64:9e:5b:30:91:b6:c7:aa:6b:36:a8:
         59:1d:30:e4:7c:45:a9:5d:4d:3e:9e:be:0a:ed:22:e1:f4:a3:
         79:db:b9:16:83:20:38:5a:27:f5:b1:e3:f6:f9:34:f4:c6:4a:
         20:68:5d:7a:a0:53:78:55:e9:5e:b9:08:34:cb:46:18:fc:73:
         ac:c4:52:cd:01:ac:64:31:52:4d:7e:95:3e:e8:3e:23:ed:4d:
         94:c5:06:e7:a6:5e:53:8c:75:da:9d:e8:7e:2b:fc:46:ea:7f:
         be:60:35:f4:c8:a7:c2:80:aa:44:79:85:4a:3f:c0:57:f1:f9:
         c3:61:e2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:40:03 2025 by rpki-client