Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
File:                     9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft (raw, json)
Hash identifier:          e4IzEEQYmoXlOPicW62UBQc+7wNCWaCbGiCibLQTA98=
Subject key identifier:   39:AD:B5:0B:E5:05:9F:BA:25:F2:F2:6E:D0:52:14:12:95:FA:AC:6A
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Certificate issuer:       /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial:       019677FAF8A5647A23098BC3D8EB3614E330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
Manifest number:          1510
Signing time:             Sun 27 Apr 2025 16:00:58 +0000
Manifest this update:     Sun 27 Apr 2025 16:00:58 +0000
Manifest next update:     Mon 28 Apr 2025 16:00:58 +0000
Files and hashes:         1: 9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl (hash: sqbD+i67vI6Hb7Mmt6d7TNsfxAhmEkEwf8BcovG/2EA=)
                          2: DrQmBo0FJlrJoVNz6cvjHGXIPbw.roa (hash: jPCQqOInn6qb0ZqW36PJZt+zluVilNLrZjQ6O21hgVE=)
                          3: Kx43u91ottGxgmt7gDhfHxtVV6M.roa (hash: oAjaZj07dvWVjkqsm1WzLPiF2cbysKorTZmr79Z4Q6k=)
                          4: gWTmtVhx7E0cSGJMWbh0KdkVJLk.roa (hash: Ti/CZSFOtoIaq484ozrtbBvj7jlxko/Yt5KtEt0muLk=)
                          5: yNgJ74PHW6j6ShCLYVR80g-qs28.roa (hash: NFcociFY8RbRnIP6feXbGFrUtff0WpEOuuopuN1v+Ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fa:f8:a5:64:7a:23:09:8b:c3:d8:eb:36:14:e3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
        Validity
            Not Before: Apr 27 16:00:58 2025 GMT
            Not After : Apr 28 16:00:58 2025 GMT
        Subject: CN=39adb50be5059fba25f2f26ed052141295faac6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9c:de:10:6e:51:fe:9f:0b:e5:b7:10:25:3b:
                    95:8e:2f:96:29:ef:1c:c4:a0:e5:ab:7a:46:0a:d7:
                    48:ef:d0:f9:ca:cf:53:01:70:b5:d9:c5:d2:d0:23:
                    fa:bc:f4:f0:8f:a6:70:2a:4b:92:ff:11:15:12:9a:
                    46:a6:b4:97:3c:4f:ba:1e:9c:b3:8b:3a:3c:48:50:
                    99:6b:71:d4:d6:5a:e3:05:54:74:0c:c7:fa:06:c4:
                    b3:e4:31:c1:4b:5d:ba:d8:d5:d3:a3:89:a1:7a:43:
                    21:30:00:f5:2f:17:db:1a:9b:c6:c3:4a:b6:2c:5a:
                    9e:7d:70:51:53:f8:8a:b9:84:eb:61:a8:68:97:f0:
                    20:68:a6:9d:1e:4c:37:37:7e:ce:34:e6:40:ea:26:
                    4d:dd:6e:55:84:41:9d:ac:9e:28:f8:65:f0:1d:c5:
                    b3:85:08:72:6e:2b:0c:fc:5f:54:c8:8c:4b:be:65:
                    94:d1:31:9a:f7:a6:e7:94:53:fb:4c:fe:cb:b3:e3:
                    cb:bb:b2:18:9b:c6:3c:fb:b0:97:d1:f6:0f:14:b0:
                    e7:6d:c0:80:3a:6b:fe:6d:41:02:42:dc:82:e7:70:
                    69:0d:f8:a2:52:c4:bd:b7:0e:39:8a:cb:fe:ba:61:
                    80:68:4c:47:67:9a:ff:b6:dd:51:bf:81:2d:db:0c:
                    db:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AD:B5:0B:E5:05:9F:BA:25:F2:F2:6E:D0:52:14:12:95:FA:AC:6A
            X509v3 Authority Key Identifier:
                keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:f7:1b:69:b8:52:44:1d:af:d4:c6:93:b1:0d:07:eb:da:57:
         f6:6f:4e:bc:31:be:f2:a6:c2:0d:3b:7e:5a:af:1c:67:c7:f5:
         2a:a1:29:3e:3f:96:71:46:80:5d:b5:73:95:69:a3:b8:46:9a:
         11:86:c4:a4:e3:aa:3a:55:b0:6f:e3:ba:4d:80:dd:bc:b2:5d:
         00:d2:3e:d9:64:d2:38:69:5b:b3:54:90:2c:ba:8d:41:fe:ca:
         07:f9:cc:ad:7f:2d:c5:f0:c2:de:30:b6:3d:57:13:37:79:9e:
         2b:12:63:5e:d8:6e:a0:2d:1d:8d:df:3f:7d:37:67:b8:21:73:
         70:3a:bc:d6:c7:4b:0e:db:a1:6b:c4:6e:2c:d3:61:0b:42:5d:
         4d:a4:10:0b:2b:0d:74:24:3c:e8:8b:62:43:3c:cf:5d:a4:98:
         6c:77:ca:25:dd:53:7c:f3:75:fc:a2:29:a4:36:73:a0:f0:79:
         d3:9f:22:5d:97:04:8c:cb:3b:46:01:5d:7a:2f:c3:5b:e5:4f:
         d7:b7:f9:02:38:86:90:f1:df:a6:2b:fa:26:a5:e3:4e:e0:ac:
         57:2d:0d:0e:71:6b:8c:0b:4b:5b:44:ba:6e:28:b2:10:8e:db:
         b3:3d:4f:2a:32:4b:59:db:f1:c2:09:8c:95:44:1d:0e:0f:5e:
         26:16:42:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:19:17 2025 by rpki-client