Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
File:                     m2t7PqYO-0pXmk9eI36nqI07wHg.mft (raw, json)
Hash identifier:          ulWAdNzpPl9HMMsZqZ7iWF9lzvAWVWF3/I/IS8GVTXs=
Subject key identifier:   FF:76:BA:97:17:6E:3C:6C:EA:24:58:17:1F:00:41:37:EC:57:A2:A2
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Certificate issuer:       /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial:       019694BB845BABF2D8D0F30DCC733D24E336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
Manifest number:          0B03
Signing time:             Sat 03 May 2025 06:00:39 +0000
Manifest this update:     Sat 03 May 2025 06:00:39 +0000
Manifest next update:     Sun 04 May 2025 06:00:39 +0000
Files and hashes:         1: 30JPkxPIzm_OMTaydoXnQRFB7vY.roa (hash: MkfEatzHR844BQfQyINSRWsoFxXrJhuYJmf8MK9pf6s=)
                          2: Hfh06Xr9-D1nr1aUUllDbp-6AjQ.roa (hash: s5lBULEnz8BTFCCjCQ99PzYCNeocxJW4u17NjMiMmrU=)
                          3: Iel88vR033hS2mHZK9DcUHuaXsA.roa (hash: W6ANO3kRstx5CNfcQT8BKzJd1YqOVSnKE4F5NSvP60M=)
                          4: m2t7PqYO-0pXmk9eI36nqI07wHg.crl (hash: 3SR+BHsoMbS/SiqX2sH5/inU8O1GBtNxBUIHqQAEosE=)
                          5: nEfHwINwuBHiUKIJFEku-LNUnAs.roa (hash: tHlNnUEritD7iLdeWrXnI1WpdfyGyNkHldv1R/Pq+2U=)
                          6: wzja5RznMFQCsPrVLj5Ban3nUjY.roa (hash: QMoOb2Ipda2qbUFjg5rEKe4T1O8LiUemxIOKkYvCj0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:94:bb:84:5b:ab:f2:d8:d0:f3:0d:cc:73:3d:24:e3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
        Validity
            Not Before: May  3 06:00:39 2025 GMT
            Not After : May  4 06:00:39 2025 GMT
        Subject: CN=ff76ba97176e3c6cea2458171f004137ec57a2a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:6e:a1:e6:d8:1f:22:b9:68:85:90:33:9c:13:
                    41:9d:cc:99:2b:4e:66:8a:a8:ed:65:76:9b:a7:3d:
                    82:03:e7:de:c0:84:b2:4f:7f:91:5c:c9:ac:46:d3:
                    30:01:3b:0f:5e:da:e7:5b:2a:02:52:28:67:de:9a:
                    61:b1:fa:c9:19:0d:30:7c:c7:8d:b2:9c:17:13:ef:
                    8b:07:35:ef:d4:5f:f4:d3:fb:72:7f:e6:23:c1:fe:
                    ac:34:e1:f7:99:9e:2f:b5:f9:f3:8e:05:06:85:fc:
                    b5:5b:1b:6a:f4:27:31:2c:09:87:b2:5e:cc:e9:0f:
                    9c:a5:95:5c:b2:bb:c5:21:cf:cf:e4:aa:b8:20:67:
                    8e:e6:eb:fb:0e:51:90:2e:b5:1e:7b:f2:b5:65:44:
                    c4:45:7d:2c:65:90:d4:a3:d9:f4:93:2d:2d:c8:a0:
                    5f:bd:6a:d6:83:05:eb:47:b4:13:73:4e:21:38:c6:
                    24:26:71:b4:5c:62:a0:90:34:e2:d3:27:48:50:f4:
                    bf:ff:36:d3:8d:e1:99:14:f4:71:61:e1:84:b3:e0:
                    b9:a8:ba:9e:ac:c8:1b:d4:95:8d:6d:dc:88:16:63:
                    8d:f8:7c:84:a7:01:a1:6c:8f:46:d8:11:20:82:02:
                    d1:17:50:0d:4a:2f:61:e8:ce:86:aa:81:c3:76:3e:
                    8d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:76:BA:97:17:6E:3C:6C:EA:24:58:17:1F:00:41:37:EC:57:A2:A2
            X509v3 Authority Key Identifier:
                keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:0c:2f:bd:68:f1:68:d2:8e:85:d7:af:a7:5f:4c:4c:45:f5:
         18:db:3d:ba:0c:6e:1c:2a:90:d9:83:39:f0:e9:78:22:bd:ea:
         aa:b2:c5:92:49:f3:86:fb:75:59:98:e1:29:1c:99:bd:a5:df:
         85:10:e1:ad:b5:cd:16:09:22:24:62:1b:cc:f2:6e:d6:d2:51:
         be:f4:02:a4:fe:1a:53:34:bb:2e:28:07:4b:5e:4a:39:d6:a4:
         66:f4:f2:e2:4e:98:88:42:1e:4c:91:94:2d:e3:8e:fc:41:ed:
         cc:68:fb:44:5c:00:97:2d:cd:c4:5a:05:29:4c:38:7d:9d:2b:
         ba:a7:1f:3f:00:73:ff:72:ad:7f:a3:4d:3b:ba:ec:1f:83:5a:
         36:32:89:eb:66:08:3c:4c:86:b8:7c:ba:ff:9a:25:d0:b8:3c:
         9c:c5:67:a0:23:6a:30:d2:c7:c6:2d:66:3f:e2:03:26:c5:f2:
         7f:c6:9c:25:64:d7:36:3b:ba:df:49:c7:d6:a2:4d:56:72:73:
         37:23:9a:26:dd:1f:e9:f6:dc:d2:48:aa:bd:d0:c3:92:51:8c:
         37:c5:0b:4f:96:37:9e:52:2d:43:7f:f1:eb:b0:d3:24:e0:83:
         18:ea:95:5a:5c:6f:8f:e2:be:fe:48:17:32:d8:d1:85:13:89:
         c0:a2:9b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 15:43:35 2025 by rpki-client