Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
File:                     m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft (raw, json)
Hash identifier:          HMJ3TFHeBT4QqXFDICaJayw27U/2dAsWSzL64MZTZ2I=
Subject key identifier:   54:E8:8F:96:02:03:BD:75:E6:4D:76:BA:EE:1D:CD:48:4D:ED:9A:B3
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Certificate issuer:       /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial:       0196711D0B420FA964C73CC4C639F2EE44ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
Manifest number:          150E
Signing time:             Sat 26 Apr 2025 08:00:50 +0000
Manifest this update:     Sat 26 Apr 2025 08:00:50 +0000
Manifest next update:     Sun 27 Apr 2025 08:00:50 +0000
Files and hashes:         1: 1TalR7Afli-hXkmIqf9328FI3Fk.roa (hash: CZU1GRNs7a/ZLVQIh1+1KE9CTeVWWUwOxmLShJ7hoBQ=)
                          2: 1rOZrsi2VH15nsMPM1hcZLORVXs.roa (hash: iSIJhNQhJCt3984hIwFcXBjIv6TT10z6x01UJ9CZjZw=)
                          3: SF3VU5SVWzi0_2Xar-2YOdcK-gc.roa (hash: AuIY2iLIo2qAdBJbw78kdAZId1WsZdROE7KvRyYurC8=)
                          4: m0Rt5yA8GGtQzeIweywdCKZ3vPk.roa (hash: 1a8qCx4A/hh4MAoCIXUYRzaVBoJjd0SdneNnyPupOv8=)
                          5: m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl (hash: PPEiuCWBrUinKZ9pv5cH8SNYk3iI7CLdOAz+YMctV2Q=)
                          6: qEuf4JoFbNqWgmvGk1XHQxSlk4w.roa (hash: FprxjmSrJVIdrJmDZ/hiSKkUv6KnjJr3J8MVoY0gd6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 08:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:1d:0b:42:0f:a9:64:c7:3c:c4:c6:39:f2:ee:44:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
        Validity
            Not Before: Apr 26 08:00:50 2025 GMT
            Not After : Apr 27 08:00:50 2025 GMT
        Subject: CN=54e88f960203bd75e64d76baee1dcd484ded9ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:b2:ca:fb:33:93:38:9d:7b:ae:19:75:db:4a:
                    c2:e3:e2:da:cd:5e:2d:22:7d:ef:fa:72:90:fd:88:
                    58:08:a2:6b:04:ae:df:48:19:a5:fd:de:1e:89:02:
                    e3:fc:64:7d:d3:c0:4a:b6:7a:26:fc:34:62:11:61:
                    54:35:7c:63:04:b3:7c:15:ca:b3:b1:39:4c:64:47:
                    a7:24:08:e8:d1:a1:a4:23:56:ca:0c:a6:de:e2:1d:
                    1c:1a:5c:e8:fe:27:9c:bf:0d:71:e5:df:34:dd:3e:
                    9b:fb:35:80:29:29:e5:95:2b:9e:b6:8f:24:6d:05:
                    04:7f:cb:b0:9f:af:e9:c2:e9:91:e6:4a:03:b6:e2:
                    ff:9d:ff:80:da:b3:dc:6e:5c:04:4b:78:76:e7:d7:
                    da:e5:89:79:bc:91:6b:89:7c:91:bc:a7:c4:dc:13:
                    09:bb:d3:08:f3:61:a0:96:e7:10:d6:d4:50:36:f6:
                    f7:4c:bd:19:9d:a3:97:c5:23:06:95:ec:55:e5:08:
                    1e:a8:1a:09:38:b2:bf:04:35:7b:d5:0c:03:35:e9:
                    e3:8b:d9:fd:bf:a2:c8:7b:a3:d4:7f:8e:62:24:37:
                    46:d6:4d:15:d7:d0:6a:18:d3:42:8f:d4:4b:6a:cc:
                    1a:d7:06:f6:47:48:7c:39:25:f4:8d:a5:8a:37:37:
                    35:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E8:8F:96:02:03:BD:75:E6:4D:76:BA:EE:1D:CD:48:4D:ED:9A:B3
            X509v3 Authority Key Identifier:
                keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:6b:47:e2:f6:c1:71:ec:7d:b8:39:8c:0a:d1:23:c8:cc:16:
         8b:7c:c2:3a:54:03:a8:a5:ea:55:6f:7e:52:94:8b:1e:84:71:
         f5:1d:a0:18:50:a0:46:28:11:0a:6e:42:5f:d0:2d:82:0e:d8:
         d2:6e:0b:80:9b:65:c0:26:08:90:bd:cf:33:e6:04:58:a1:16:
         0c:1b:5c:6e:c5:3a:9e:a0:59:48:89:1a:f9:2e:98:ec:d5:e5:
         ba:2c:90:2e:79:da:3d:4c:33:2d:41:58:d5:36:46:c5:35:b6:
         30:88:8c:8a:17:a8:9f:da:12:8d:0c:7e:b9:6b:cd:69:66:87:
         80:32:10:9a:88:5a:c0:a9:5a:11:c6:56:eb:74:e6:e0:f8:ea:
         61:36:a9:b5:3b:2e:da:0b:da:7a:4d:b6:09:fd:8b:64:5d:0d:
         25:19:8a:ac:2d:8e:34:04:d0:39:b4:00:61:4f:2b:d9:3d:5a:
         66:63:af:08:15:12:70:a1:70:ac:03:ab:8c:6b:8d:42:3f:e4:
         3e:2b:45:a6:e7:c3:fb:3c:58:5f:db:16:4e:95:03:49:d6:7c:
         00:46:cf:57:12:cd:16:ea:e4:1f:5a:a4:32:55:bd:13:dc:58:
         72:ce:b7:6a:f4:f8:18:51:bf:38:d0:9e:3d:df:96:3e:7d:6c:
         67:9d:9f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:01:00 2025 by rpki-client