Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
File:                     MseO7vestFH8N1df65EU38zBzfs.mft (raw, json)
Hash identifier:          Gyhi6IeYA2MYyEo+CuabFNw8G+uqJOucp/pMrXNExXQ=
Subject key identifier:   50:C7:00:46:DA:2A:1F:58:A0:39:8D:10:E8:35:C3:F2:62:06:0D:46
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Certificate issuer:       /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial:       019673E6E54D67C8F686CF74B173FD802752
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
Manifest number:          104F
Signing time:             Sat 26 Apr 2025 21:00:33 +0000
Manifest this update:     Sat 26 Apr 2025 21:00:33 +0000
Manifest next update:     Sun 27 Apr 2025 21:00:33 +0000
Files and hashes:         1: GbEyk8ZWl0vqgj_sPWLMTAGno6s.roa (hash: JzRbeYoWUwlRVaKgJmm7hD8H9CYTCwAivI+PSmgKwME=)
                          2: M6U6dkH9DSHzE2ElXf3ZUgv-gao.roa (hash: gyUWfn2VEKn6DTTZDCrSAEanNDrzsmaWPFOYycLgJ88=)
                          3: MseO7vestFH8N1df65EU38zBzfs.crl (hash: m3l4gZxTK+DLLok5h4+VyQ+7U9H0/rdLzJ6qiLU8Gw8=)
                          4: qcE5lMt-ta8yQgK_A4TOf_qcnKk.roa (hash: mHbw87Bhgg5orJBSCEF9YhID6w2GXs/pHd+LaovXweg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:e6:e5:4d:67:c8:f6:86:cf:74:b1:73:fd:80:27:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
        Validity
            Not Before: Apr 26 21:00:33 2025 GMT
            Not After : Apr 27 21:00:33 2025 GMT
        Subject: CN=50c70046da2a1f58a0398d10e835c3f262060d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e5:e3:6b:09:d2:7c:7e:87:40:28:97:14:e7:
                    6d:03:66:28:65:d3:b3:8f:9b:b5:72:78:c6:87:bf:
                    23:a8:e1:b0:53:09:f3:c3:14:5e:c6:90:4c:89:f6:
                    a2:a6:18:c2:08:86:ec:44:c1:13:3a:25:11:c0:2a:
                    ed:0d:c3:3c:a8:11:77:c3:a9:c4:c9:9d:1b:63:d6:
                    9a:e1:61:c0:5f:ee:06:60:74:7b:80:36:c5:a8:c3:
                    b2:3c:f4:b0:e9:f3:14:86:b1:2a:33:f9:ca:b9:bf:
                    54:02:77:72:ee:57:37:04:3e:92:e1:49:b2:9e:6f:
                    40:2b:2e:b9:72:0f:b0:49:a0:9b:ae:7f:9b:87:83:
                    97:f2:eb:fa:7d:bc:ef:de:5f:b6:aa:81:95:34:3f:
                    da:7a:20:17:f2:ed:d1:6e:fe:86:e1:9f:86:80:73:
                    99:b1:0d:59:b0:12:a4:d4:de:4e:19:cb:33:8e:c5:
                    94:39:60:9f:11:d1:34:0a:e0:67:74:25:b8:38:81:
                    91:0c:da:cb:14:cf:04:8b:23:3f:ce:99:98:f3:83:
                    43:e3:de:a9:19:8b:26:20:b5:94:76:2f:bf:4a:7b:
                    d5:b9:dc:3a:2c:84:c7:90:ff:38:e9:b1:e3:af:c5:
                    b6:ea:1f:6f:ec:1c:e9:23:86:1c:96:78:75:e2:73:
                    a3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C7:00:46:DA:2A:1F:58:A0:39:8D:10:E8:35:C3:F2:62:06:0D:46
            X509v3 Authority Key Identifier:
                keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:6f:cc:72:65:f5:b4:00:1c:a7:37:54:74:00:a1:47:92:ef:
         79:5a:5e:31:64:44:58:c1:ca:9a:0f:a6:76:d1:a8:34:da:ce:
         7e:da:47:64:9c:51:5f:1a:0f:5c:e7:dd:bd:7f:e5:28:13:e2:
         39:58:30:4f:2f:b1:68:0c:03:7f:77:1a:e3:47:34:63:36:e9:
         5b:18:85:8b:c1:a9:b4:76:1e:eb:7e:d5:24:7e:fa:21:ad:c7:
         af:0a:e5:5e:ef:24:4e:d7:f9:4a:fa:15:47:e6:fa:cb:32:6b:
         98:6c:c1:96:d1:f0:f6:1a:83:96:86:d8:7a:bd:9d:6c:7e:6e:
         47:54:14:ab:36:f9:ba:94:93:66:22:83:ec:cc:a8:43:a0:57:
         10:31:e3:f5:59:2d:29:f7:33:28:37:62:42:c2:49:93:61:9f:
         c2:50:ef:a1:45:d2:11:5f:ea:6c:0b:18:9c:a7:83:06:78:c4:
         48:1a:df:34:79:26:db:f0:1b:76:6b:3a:bc:d5:61:39:c0:28:
         3f:f2:86:1f:89:38:78:91:ec:36:90:35:a8:94:5e:de:54:7a:
         4b:47:0c:18:1f:2e:d5:1e:86:b4:32:d4:6f:c3:47:2a:49:39:
         86:bc:fb:de:38:b7:ed:63:60:82:d5:7c:59:38:31:32:fe:ab:
         25:8c:f3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:06:53 2025 by rpki-client