Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft
File:                     mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft (raw, json)
Hash identifier:          nhXoT1D93fm73CoA9SqpcRUDfKUou2dD9DGyEgAzuCc=
Subject key identifier:   F9:EE:2B:89:47:81:9C:12:47:87:78:FB:C3:B7:07:70:FB:17:D3:04
Authority key identifier: 98:CC:B1:84:D1:28:38:4E:4F:76:7D:85:25:8E:0D:EA:73:F1:8E:43
Certificate issuer:       /CN=98ccb184d128384e4f767d85258e0dea73f18e43
Certificate serial:       01968D392945499361C8EEDD83DEF5E67E3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft
Manifest number:          0C2B
Signing time:             Thu 01 May 2025 19:00:55 +0000
Manifest this update:     Thu 01 May 2025 19:00:55 +0000
Manifest next update:     Fri 02 May 2025 19:00:55 +0000
Files and hashes:         1: XmG_f-d3gNbPjbSDpmMbIo-fVYM.roa (hash: Fqg1Y9uWeIH+04MjOxb6IraF8tekNjl9/R9LcKgfLEw=)
                          2: mMyxhNEoOE5Pdn2FJY4N6nPxjkM.crl (hash: VvOUE4fuVsJyGJQTLzQRQOJYJRt5icgRa5Ndui6r5Es=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 19:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8d:39:29:45:49:93:61:c8:ee:dd:83:de:f5:e6:7e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98ccb184d128384e4f767d85258e0dea73f18e43
        Validity
            Not Before: May  1 19:00:55 2025 GMT
            Not After : May  2 19:00:55 2025 GMT
        Subject: CN=f9ee2b8947819c12478778fbc3b70770fb17d304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:08:c2:9a:60:d3:7d:db:a6:e5:de:43:49:73:
                    07:59:42:0f:f8:ea:56:e5:23:1c:c6:21:cb:9f:d1:
                    ab:2c:6e:6f:6d:f4:03:0f:c6:84:eb:a8:f1:64:8f:
                    79:1c:22:44:15:81:57:0c:ee:63:02:4b:25:5c:69:
                    c3:f4:b3:db:54:74:5f:3e:92:5d:e0:53:27:ae:cb:
                    e1:f3:57:49:7c:aa:bb:b1:18:11:98:2a:08:d7:23:
                    1d:5c:0e:12:6f:1c:0c:4b:e2:25:cd:7c:e0:7c:12:
                    d8:56:97:80:13:01:79:f5:71:89:35:7a:11:13:c8:
                    a1:d1:4c:ed:f2:6d:f5:db:c6:cc:4b:f9:8f:ba:16:
                    d3:11:ae:79:95:9e:cd:ff:fa:1f:02:b4:f0:fc:77:
                    eb:c1:d7:7b:c5:35:8d:0a:d6:b2:6a:64:24:46:de:
                    a2:76:2e:7c:c7:0b:a5:12:d8:09:0a:eb:35:cb:f2:
                    8e:f0:71:11:56:76:cd:a9:64:39:ca:6a:05:96:75:
                    e7:92:d7:d7:66:1e:31:f2:7d:59:14:5f:c3:7f:08:
                    b1:6e:74:db:2a:05:88:8b:49:a3:8d:88:e0:d3:a4:
                    5d:90:e5:72:fa:3a:e4:f6:4b:48:9b:a0:fa:18:14:
                    62:ba:e4:de:ed:c7:31:ab:b9:1e:1c:f0:ad:27:c2:
                    95:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EE:2B:89:47:81:9C:12:47:87:78:FB:C3:B7:07:70:FB:17:D3:04
            X509v3 Authority Key Identifier:
                keyid:98:CC:B1:84:D1:28:38:4E:4F:76:7D:85:25:8E:0D:EA:73:F1:8E:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c3:b1:dc:d8:dc:b5:8a:54:6c:12:52:31:d7:58:f6:2b:22:
         68:44:de:5a:9e:04:8b:32:be:74:b1:6b:c1:3d:d1:c2:d1:f3:
         83:a2:04:c3:72:dd:c0:d4:57:f5:71:2a:1c:3b:41:e9:25:f2:
         ff:da:82:10:06:2b:dd:04:fc:1e:de:bf:bb:5d:c7:cf:6f:7d:
         6b:67:63:d1:1d:fb:50:dd:a2:71:ea:98:54:fd:91:fd:e6:ba:
         98:00:cb:7c:c5:77:9e:6b:fb:c8:1b:0a:77:93:b7:5a:23:81:
         36:e8:a7:71:9e:2d:47:03:58:6d:4a:fe:3d:a1:9f:d6:67:9f:
         6e:46:c2:fe:47:ef:63:ff:22:c5:8e:4f:d9:b6:f2:87:35:a2:
         fe:20:83:24:b4:1f:60:0e:0c:39:14:9a:74:62:3a:20:23:43:
         07:41:14:c0:17:5e:af:ac:03:f0:9c:b5:1a:73:89:86:b3:3f:
         5b:2f:9f:9c:00:66:af:8c:29:04:d4:7f:b7:14:87:14:d0:8f:
         af:99:29:47:ba:76:7e:01:76:c3:d7:a2:22:71:1a:81:01:10:
         06:a1:4f:e2:1a:04:0e:dd:23:18:29:ea:fc:08:d7:d9:a9:12:
         e2:1e:3c:eb:56:c0:62:50:33:76:a4:dd:6c:af:11:59:a6:1a:
         db:9e:83:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:02:50 2025 by rpki-client