Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft
File:                     c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft (raw, json)
Hash identifier:          wegzEgfBOUH2CktUk47tLtIWDZnoGuyZZA+GwrisCMA=
Subject key identifier:   E6:93:FB:38:E8:A3:DB:E2:45:3E:BE:13:A8:48:E4:7B:47:F4:1A:06
Authority key identifier: 73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
Certificate issuer:       /CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Certificate serial:       019675307A45C41416B355FE7669F52145B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft
Manifest number:          1517
Signing time:             Sun 27 Apr 2025 03:00:33 +0000
Manifest this update:     Sun 27 Apr 2025 03:00:33 +0000
Manifest next update:     Mon 28 Apr 2025 03:00:33 +0000
Files and hashes:         1: 0PiYBdxARRXjKJ5FesVWJAu_FMA.roa (hash: w4vAM6MoKtVTj5z9YUnQQ55u8WtiSlBeHs3CzkimFHA=)
                          2: DKpd0FWoSa9JOhnTSUeOAHEojFQ.roa (hash: pJjsYkDAabv/EkTWBVq7tQJ2cKhCWbGhb3faDIO/OsQ=)
                          3: GqOUJDMk-IFQdrsD-fU9eu4Qyek.roa (hash: pmdKsVvhyhUrb6RefnEOlCVulb4+abNUam2FCZO1InY=)
                          4: a-p1UhUt4t3M5odJCGB7R5m1rzM.roa (hash: 2U39CobRw9KssePwQXfRPFLNg8MC7aWq6D0bgHVvK7A=)
                          5: c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl (hash: fzFTUML0fHI9+rkSyXNgqNgp9v05Xzt0TusQkMFikQI=)
                          6: f0HMDLVx5t59P591PrAxrNnUs2c.roa (hash: /wxFlOgstgeKK54T7FynNE0uD4UjWWlnpZIecJhWOqM=)
                          7: h4W-VjJcy1QFeMUrhU0dF3Ixqa0.roa (hash: 5B5X7otDiidFA+PB/Jg+nfAWrr9IuoZCHyarTdrsmt0=)
                          8: jdGQJIZnkRjBDTTHnu0krS57iP8.roa (hash: e+2axTWyygbixhenSw9GiW7DCvps0Y82zf10NziEjRo=)
                          9: xyxr3pfItv9o4W3QbYDO6voIQ0Q.roa (hash: 8cnzmry/1ExM44UYvG1JFsqTRR1vf8KTHcvSzmwD5MY=)
                          10: yDomHUFVSb_vaV7A7wWb5nAhjlc.roa (hash: yYYELV3m9YlCfoig7ujzEpQib6RUtY2OkBAFEppcwPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 03:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:30:7a:45:c4:14:16:b3:55:fe:76:69:f5:21:45:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
        Validity
            Not Before: Apr 27 03:00:33 2025 GMT
            Not After : Apr 28 03:00:33 2025 GMT
        Subject: CN=e693fb38e8a3dbe2453ebe13a848e47b47f41a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e4:7c:8e:3d:14:d5:09:c3:9d:35:11:f3:f1:
                    ad:e1:29:0f:93:73:f2:31:1d:6c:dd:07:cd:f7:ac:
                    1b:38:f1:04:19:7a:99:58:e1:aa:f6:46:28:d3:35:
                    de:d2:2e:3d:fa:17:5f:39:8e:45:a3:b9:10:2c:41:
                    e2:2b:d8:c6:c5:80:86:22:75:02:2f:45:b9:ca:9b:
                    e5:00:fd:c9:17:b6:e6:2a:18:9d:0b:a0:9e:9c:04:
                    1f:8c:a1:a5:48:79:3f:28:dd:0b:67:42:b6:e3:d1:
                    15:23:af:ea:28:5a:0f:45:5f:c2:e5:38:c7:4a:2b:
                    31:ad:5d:3c:bb:82:9e:63:cf:a3:c7:58:0e:9d:92:
                    e2:3d:76:40:1d:04:8e:4a:42:4c:5a:01:69:7f:c7:
                    c1:e5:97:2f:9a:f6:d4:66:9f:89:11:86:ae:f5:3f:
                    fd:62:2b:c2:1e:ef:f5:34:fd:26:df:c0:66:7e:0c:
                    05:50:a2:0f:1a:6e:60:d2:05:47:70:1b:61:e2:f8:
                    0c:9a:ad:b8:84:f8:02:44:f7:73:32:1c:32:68:1c:
                    ec:d9:94:73:41:0b:8c:b4:8f:11:40:32:91:33:a2:
                    28:cb:34:ad:a5:82:66:6a:97:61:e3:0e:7a:d4:00:
                    bb:4e:53:95:c5:e2:18:5f:b3:0f:fb:54:63:be:e2:
                    95:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:93:FB:38:E8:A3:DB:E2:45:3E:BE:13:A8:48:E4:7B:47:F4:1A:06
            X509v3 Authority Key Identifier:
                keyid:73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:11:1b:78:0c:43:21:06:f4:a0:db:0e:8b:7d:c5:ca:83:68:
         80:88:4f:f7:33:63:09:c8:32:3d:37:e3:c5:22:e7:f3:be:35:
         32:6e:0a:4a:d3:f2:44:93:c7:71:25:28:ec:c3:ce:1d:03:a2:
         26:e5:4e:51:66:69:7f:05:6c:a7:3a:52:13:d7:08:4d:56:29:
         15:d6:d9:1b:ce:21:37:46:e9:ed:1b:69:b8:e0:7c:ed:de:4d:
         cc:7c:20:97:46:dc:e0:ef:90:87:17:22:44:57:c1:1f:aa:36:
         11:67:f3:03:68:7c:0a:2b:bb:dc:51:95:30:40:f1:d5:f7:a3:
         65:ee:1f:c8:f1:32:77:82:83:b9:63:26:ca:50:3b:57:1b:f2:
         d3:a9:41:78:2a:31:42:59:3d:e6:2e:11:37:01:98:79:4f:58:
         d0:c9:35:cb:48:63:3d:d7:9c:74:05:0d:b5:5f:c8:03:68:79:
         e6:67:97:a8:d4:37:ad:19:a3:aa:1b:9d:95:92:b0:06:5e:8c:
         ff:91:da:82:78:4b:7d:de:18:06:66:de:7a:ae:40:56:bf:b2:
         8f:74:91:e4:f2:ea:4c:d2:97:56:5f:33:8b:72:bb:7f:85:d8:
         b5:9c:0b:39:67:ca:bb:1a:75:94:a9:d0:76:46:28:ec:d4:21:
         23:d0:36:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:02:56 2025 by rpki-client