Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
File:                     mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft (raw, json)
Hash identifier:          dLQbdHSpWQzrIn1q8aM/6THwUmAiuzxiYr0Ce2R+9LE=
Subject key identifier:   3B:56:54:A5:C3:67:AE:70:85:82:6E:80:51:CB:48:95:97:C6:BC:91
Authority key identifier: 99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D
Certificate issuer:       /CN=998674263fccd07f684e1e199302eeefe783fb3d
Certificate serial:       0196767A0A3421FC95A03D627349523FF773
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
Manifest number:          0A40
Signing time:             Sun 27 Apr 2025 09:00:31 +0000
Manifest this update:     Sun 27 Apr 2025 09:00:31 +0000
Manifest next update:     Mon 28 Apr 2025 09:00:31 +0000
Files and hashes:         1: LB9yxSJR9ouxobcPst7y075Gi24.roa (hash: 9cHQrj6vkKZZg+caaJv03RON5UELRQ6rlqWUQeFM15Y=)
                          2: mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl (hash: sDugc79XkaAKaqXdsSHDpI4ipCxUc+bpxsO0docoSus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:7a:0a:34:21:fc:95:a0:3d:62:73:49:52:3f:f7:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=998674263fccd07f684e1e199302eeefe783fb3d
        Validity
            Not Before: Apr 27 09:00:31 2025 GMT
            Not After : Apr 28 09:00:31 2025 GMT
        Subject: CN=3b5654a5c367ae7085826e8051cb489597c6bc91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:34:30:8c:23:e8:eb:bc:7d:67:24:7d:4c:1e:
                    4e:08:9e:51:1d:32:cb:96:9b:7d:9f:d3:18:11:0c:
                    3e:03:5c:0b:0e:a6:c5:0d:18:df:59:c0:76:9a:b1:
                    53:36:34:5c:05:e7:ae:18:00:02:9f:f1:3b:2b:ab:
                    03:ae:95:2b:e2:61:43:1d:c0:81:78:dc:c4:9f:0d:
                    ef:e0:09:2a:92:27:ae:09:a5:75:ee:bd:b0:50:21:
                    28:75:57:3d:ae:96:ff:b2:4d:f5:75:b4:02:15:5a:
                    1b:72:10:a1:f2:76:23:65:b7:0c:d7:e8:d2:3f:2b:
                    2d:f4:7c:34:c9:46:71:d6:92:2a:32:e7:d9:5d:59:
                    16:b6:8d:53:1d:0b:2f:7b:4f:67:ee:a0:bc:c5:a5:
                    8b:1e:f5:31:e4:11:48:cb:17:f2:b0:ff:89:41:df:
                    56:d7:3b:62:5e:45:ff:72:be:7d:b9:fa:87:b9:85:
                    1c:e0:07:a2:a7:f9:4c:9c:9f:2e:db:26:e7:9b:e8:
                    26:57:36:3f:26:da:4b:b3:06:6a:c1:be:0f:69:84:
                    2a:8d:76:54:4b:71:6a:39:37:0b:11:31:67:7f:ff:
                    34:1a:66:39:65:40:a8:c2:54:88:99:24:ca:05:c0:
                    b0:58:07:a6:9a:29:66:d4:04:11:07:d9:19:91:0d:
                    11:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:56:54:A5:C3:67:AE:70:85:82:6E:80:51:CB:48:95:97:C6:BC:91
            X509v3 Authority Key Identifier:
                keyid:99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:50:ce:0d:1c:5d:f0:5b:29:bd:d0:8b:dc:8d:df:69:d3:0e:
         86:3d:5b:3e:40:d8:89:29:4f:e9:76:ee:c3:ea:3e:b2:eb:79:
         76:f1:19:2c:33:fe:0d:f5:f6:ff:32:32:9e:28:f4:cf:0a:8a:
         6d:d9:ed:38:ca:2d:9a:46:48:29:51:7b:ca:9a:a1:55:0b:78:
         a3:6c:03:4f:3a:95:d9:7a:34:0e:77:0b:94:d5:76:b0:60:36:
         db:ed:88:06:35:99:c5:66:2d:46:39:78:d4:a1:25:2f:df:4a:
         51:41:42:ca:fc:ef:bb:0d:f3:cd:96:75:57:42:d6:60:ff:c9:
         57:34:2c:e0:a4:f9:c9:a0:97:40:2d:23:4d:10:5a:b6:58:16:
         58:d4:9c:31:67:53:c5:5b:33:59:04:a5:70:0d:62:cb:22:19:
         cd:19:40:e5:52:d2:c7:c1:51:da:0e:25:4a:86:31:8f:1f:2d:
         9f:56:9e:b9:9e:82:94:58:13:d9:d7:bb:e2:b6:e9:19:44:5c:
         4b:c0:97:7a:33:4b:4d:a7:48:82:0b:27:a9:e8:27:2c:83:c2:
         05:d1:9d:dd:bf:9c:65:dd:0f:9d:e8:2d:b0:fb:ab:4b:c2:99:
         5f:31:c2:19:81:24:94:98:4d:ff:5d:92:09:7a:18:55:72:c7:
         e0:af:f6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:30:03 2025 by rpki-client