Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
File:                     ePsJmqQwgayDle4LkMzxqIRPjWQ.mft (raw, json)
Hash identifier:          kpF1evXRQSsZjNkfNC8r/NjpBDLenXlrBhUNRH+Ekl8=
Subject key identifier:   78:2F:4F:68:C5:5E:7D:20:20:84:0D:B2:12:7F:2D:0F:80:2A:D4:2F
Authority key identifier: 78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64
Certificate issuer:       /CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
Certificate serial:       0196756731F524F39576383B3BF46BA02D59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
Manifest number:          0C6C
Signing time:             Sun 27 Apr 2025 04:00:19 +0000
Manifest this update:     Sun 27 Apr 2025 04:00:19 +0000
Manifest next update:     Mon 28 Apr 2025 04:00:19 +0000
Files and hashes:         1: OJTbvvzGPXknTcn0a0PisGO6RMs.roa (hash: uuBkvJW42/0DIxeQ/apWNWGffvOofFBXJM//FCrkhBE=)
                          2: ePsJmqQwgayDle4LkMzxqIRPjWQ.crl (hash: y3XqHu7Rfv+NnWJQOwtB+BkkRsChXn044f+qTyVJPL4=)
                          3: nArRHp-4C_xfVc5I0xzODMyX0Wc.roa (hash: unbAaPNeb8ss923AiSBNv55C1f+CW+UAKQwmAnYXVMU=)
                          4: ykzqitomWOX9VDgPXh0lfRNIPGs.roa (hash: sexKwZGXJqgH8EP0OUhLDrGvQUeJF4VTHV0LtWwcjpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 04:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:67:31:f5:24:f3:95:76:38:3b:3b:f4:6b:a0:2d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
        Validity
            Not Before: Apr 27 04:00:19 2025 GMT
            Not After : Apr 28 04:00:19 2025 GMT
        Subject: CN=782f4f68c55e7d2020840db2127f2d0f802ad42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2c:14:f8:e8:4f:bd:fb:3e:92:bf:62:38:fc:
                    8d:72:6a:73:71:35:95:8d:e9:96:91:58:ec:f1:66:
                    c2:f0:e6:d8:d0:1d:d7:21:ed:d6:77:4d:1e:78:34:
                    9e:d8:db:4a:7b:70:2d:08:e2:08:2a:26:37:d6:30:
                    f0:92:bf:b9:8d:d1:58:ec:e0:a7:13:f1:34:9d:69:
                    79:25:95:f3:2a:a4:dc:9f:22:d2:d7:aa:9b:89:18:
                    8d:ca:52:e4:7d:01:f6:ea:3f:f0:2f:8d:68:dd:79:
                    e0:6d:d6:49:72:6a:07:ac:2f:93:1e:b9:da:37:c5:
                    62:61:00:82:63:11:3c:66:ac:dd:07:99:3d:06:31:
                    c1:62:bf:25:c9:9e:2c:99:9f:cc:da:24:d0:c3:af:
                    af:5b:32:67:f1:8d:c8:57:90:fc:e6:a1:f7:11:a2:
                    f1:7d:76:26:78:e5:65:4b:55:26:16:66:30:fc:f4:
                    66:98:10:8f:8b:fb:7f:12:6f:85:62:53:37:6c:83:
                    66:3a:d9:62:8a:b1:19:92:0c:c5:cc:df:42:8c:51:
                    1c:72:ba:2a:aa:09:ac:8c:01:6b:da:60:2f:16:37:
                    32:6e:21:55:37:16:19:b6:ab:1a:24:b0:8d:db:e4:
                    3c:03:72:0e:6f:59:db:d5:76:08:7f:c5:76:f2:91:
                    66:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2F:4F:68:C5:5E:7D:20:20:84:0D:B2:12:7F:2D:0F:80:2A:D4:2F
            X509v3 Authority Key Identifier:
                keyid:78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:5e:1d:78:32:1d:c1:b0:16:ed:81:27:3b:d2:06:f3:0c:c9:
         fa:95:44:5a:7e:65:5e:7c:ce:6d:f1:42:14:c8:0a:1f:b3:ac:
         14:4d:11:08:fc:05:8b:ac:2d:b0:5d:3f:13:cf:5a:21:70:49:
         6e:fc:f5:b8:e6:85:82:95:f0:26:19:0a:a6:96:26:43:4d:49:
         af:d6:c4:54:c4:d2:f3:c4:94:7b:1e:6a:00:3f:3d:0f:75:fa:
         e1:17:97:2f:b2:e0:e1:7c:f4:48:69:6e:cf:a0:df:cc:a6:6e:
         57:33:78:22:09:fd:39:a9:ac:dd:38:6e:ff:dc:4b:5a:ab:31:
         c6:2b:f6:62:48:40:c6:75:55:ad:fc:52:d7:cd:12:e4:35:ff:
         22:1c:2f:0c:cb:ac:64:ed:01:58:26:bc:11:23:07:81:94:6e:
         fa:56:e0:f8:6b:86:d5:23:9e:ce:23:95:f5:6a:f2:7a:15:60:
         d0:14:e4:0b:d5:ef:19:25:7a:b6:15:0b:dc:f4:ff:29:87:ca:
         54:8a:04:57:bf:20:7a:2f:3b:f8:9b:66:c7:ab:e3:13:79:5c:
         f0:da:fb:43:db:c3:03:23:6f:df:48:cf:38:4d:38:09:a9:77:
         f3:08:e8:d4:26:5f:93:b9:36:75:c0:80:cb:9d:e1:37:74:34:
         32:f3:47:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:51:49 2025 by rpki-client