Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft
File:                     pVz4nuVieX53WqTR0ffkX0Zqc8M.mft (raw, json)
Hash identifier:          AvlIIy4FglzhEx1qyUu+Ql8x7t1uuqXNTVu0LlGoj/w=
Subject key identifier:   20:BF:C0:9D:85:3D:DC:1E:BB:E8:16:B8:EB:C9:4A:9E:4B:12:5C:1C
Authority key identifier: A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3
Certificate issuer:       /CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3
Certificate serial:       0196718AA5DB49E3A3304C266010E9E2172B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft
Manifest number:          0951
Signing time:             Sat 26 Apr 2025 10:00:33 +0000
Manifest this update:     Sat 26 Apr 2025 10:00:33 +0000
Manifest next update:     Sun 27 Apr 2025 10:00:33 +0000
Files and hashes:         1: Jdv9KmbiFweBH7ZEt96_Rv7CyPg.roa (hash: ebLELH5oRyZKdj3cm3xGsR3F/jIoIGMnEcP8nrCpL+8=)
                          2: XgJMBh2hNxFsZKvQI54PTTXI760.roa (hash: UdEfAkLTD+qMIgaGI74a4ajbejj1YgoNe9s0PRF/Uus=)
                          3: cLGpimzWzwHzqIbopne7t52wISg.roa (hash: 9i9sbe7IcV9dEAByxfhmrcjdOqaaf18dgDnNY+xafnk=)
                          4: pVz4nuVieX53WqTR0ffkX0Zqc8M.crl (hash: C7jpgUo0ohdeKh5WPFnAZWADXj+lfoOZbvjDPnZZo3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 10:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:8a:a5:db:49:e3:a3:30:4c:26:60:10:e9:e2:17:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3
        Validity
            Not Before: Apr 26 10:00:33 2025 GMT
            Not After : Apr 27 10:00:33 2025 GMT
        Subject: CN=20bfc09d853ddc1ebbe816b8ebc94a9e4b125c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:63:42:fa:08:12:f0:83:cb:fa:90:54:ab:
                    e4:83:43:f3:d0:0a:02:5d:8d:56:5d:d1:03:cb:f9:
                    46:a9:bd:de:32:e6:ff:ba:17:de:86:87:e8:47:73:
                    77:97:c2:20:30:c7:68:13:5c:76:04:1c:bd:9a:92:
                    75:47:c9:15:1c:7f:b9:75:f9:9a:9f:92:da:11:b7:
                    a7:95:e5:7c:95:f2:d6:93:c0:eb:44:bf:a1:3d:0c:
                    34:aa:00:b8:43:63:bb:00:ad:85:b6:0b:d4:95:27:
                    84:24:f8:dc:78:66:c1:f3:42:f4:71:b2:c6:59:a5:
                    a6:96:63:dc:6d:21:ce:61:19:e5:f9:c3:4b:37:e3:
                    74:89:fb:fd:ec:55:08:c8:58:4c:c0:1a:52:fd:87:
                    a4:36:04:bf:94:0d:00:40:08:e1:b6:54:2b:27:2b:
                    51:a9:10:38:e9:9f:1f:f6:fb:a2:f3:f8:81:1a:2b:
                    29:a6:39:d7:00:04:91:16:5c:d9:89:3d:0e:1d:11:
                    5e:a8:7d:17:74:4d:fb:f6:a1:c0:40:fc:b8:97:66:
                    f9:5a:d2:af:8c:4e:03:7c:b6:f7:8f:64:c1:ee:e2:
                    ec:64:2b:70:3f:4f:fc:2b:71:db:46:3e:4c:fa:e0:
                    8b:47:93:10:2a:90:26:06:70:ee:0f:cb:7a:77:d4:
                    c1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BF:C0:9D:85:3D:DC:1E:BB:E8:16:B8:EB:C9:4A:9E:4B:12:5C:1C
            X509v3 Authority Key Identifier:
                keyid:A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:7d:98:98:7f:a5:5b:79:12:4e:60:d7:77:b9:e3:b3:25:26:
         35:b6:31:36:f9:47:91:29:37:8a:e8:f7:ee:0b:c7:99:84:7d:
         7c:2c:b5:b4:dc:b8:6e:59:ed:5c:fd:7c:fc:20:ea:72:77:a9:
         fd:00:ef:d0:06:dd:69:2f:de:0f:cf:12:e6:87:60:64:d3:2c:
         a5:0e:2b:54:b2:1c:76:1b:40:97:3b:c5:da:ac:f0:66:de:ea:
         93:fa:6e:64:03:bd:ad:2d:af:cc:bc:bf:ad:9c:62:67:96:da:
         d1:4b:ab:d9:c6:90:aa:39:2d:32:00:40:6d:25:c9:f8:79:86:
         14:43:b4:79:ea:51:c2:1f:94:ef:bc:bd:b5:f9:0b:77:4d:72:
         f5:3d:08:fe:4d:11:66:73:c8:e9:31:5e:09:52:66:cd:ed:10:
         d1:2e:87:93:7a:d6:14:4d:9c:71:fe:10:0e:fb:24:6b:a4:c0:
         e9:39:05:ef:d0:2b:59:c5:e9:19:c5:6a:a8:1c:87:6e:b8:21:
         24:01:0b:5b:e4:42:d6:6c:48:f7:ee:5b:bd:a3:7e:2d:20:39:
         d9:74:99:18:45:a2:79:d2:33:94:8f:43:b3:a2:c1:6b:45:34:
         cd:12:bc:0c:24:c7:e2:43:3f:ce:3f:4a:37:89:1c:42:5b:61:
         b2:3e:58:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:04:19 2025 by rpki-client