Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
File:                     Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft (raw, json)
Hash identifier:          02gzIo5TMDb0NhBccUjsm8cepsdD6sxfGgCa4LZ152M=
Subject key identifier:   2E:30:28:54:CA:5A:B0:3B:DD:4B:02:EA:CF:54:C3:B9:74:8C:36:7A
Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
Certificate issuer:       /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Certificate serial:       019671535BD535F913FC08B01361864A3FE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
Manifest number:          11C7
Signing time:             Sat 26 Apr 2025 09:00:10 +0000
Manifest this update:     Sat 26 Apr 2025 09:00:10 +0000
Manifest next update:     Sun 27 Apr 2025 09:00:10 +0000
Files and hashes:         1: M9VOPO1QfWRnU4hQ9QVXASg96jA.roa (hash: irJVQjaxHBdQQuBZR03utwnIZQAJVfzNYFhhJleKRbg=)
                          2: MZ_QBnViUEyC8ZRFkedX8Rv5Crs.roa (hash: XyD021GY+KiQ98JM0NY1iLl+QMVF+YOoCbUCeu964IY=)
                          3: Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl (hash: B+Y7m52r0cF38U+IStL8YT0/JEMYl9fh9f6zp0qGquI=)
                          4: XH8_n2Xu0Ky0NZ-VpBjvZGYKIak.roa (hash: BEZY3ts6B3Y7WcxEDYL2G9ZE46ppRZ9yzyXyYGEQ0qI=)
                          5: inYhmF6eIH31cCbSimSwHmklnkM.roa (hash: Z7JVezrkgt/wUelYsw9uGal8TdsJiFhrzbB2ZBBaAzE=)
                          6: og5qYEWen63bomOC6zKV2-iRJG8.roa (hash: PKfcuKBaAgdkTGnezARQJkmyOyp3oz6QpSYP3CmFp+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:53:5b:d5:35:f9:13:fc:08:b0:13:61:86:4a:3f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
        Validity
            Not Before: Apr 26 09:00:10 2025 GMT
            Not After : Apr 27 09:00:10 2025 GMT
        Subject: CN=2e302854ca5ab03bdd4b02eacf54c3b9748c367a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2c:9e:15:8f:5e:78:84:b6:68:f7:d3:83:29:
                    73:04:66:5e:2a:9e:08:42:23:84:b8:98:1f:2e:e6:
                    3e:f3:69:15:3d:64:da:23:0f:10:66:e4:4d:c5:27:
                    5b:02:3d:8b:7e:52:8c:e2:c9:3d:e7:8a:50:06:b5:
                    8b:f5:93:28:12:09:ea:8f:dd:51:67:f8:8c:fa:97:
                    05:49:f8:2c:38:73:72:2f:f3:ac:6f:d1:20:00:a2:
                    e5:85:87:12:cc:88:bb:87:83:d6:82:f1:93:10:39:
                    1b:99:df:66:58:9d:70:07:8f:fc:f6:f9:00:98:94:
                    01:ef:1f:77:4b:5c:cf:1e:c9:ce:7a:9f:44:cc:1e:
                    52:c6:c7:dc:6d:96:66:20:e3:94:0d:dd:86:7c:e9:
                    86:2d:9a:a9:5b:58:7d:a3:59:e8:8a:e8:c2:88:a8:
                    ba:6a:41:78:d7:f3:2d:d4:ea:4c:9b:9b:6d:99:9c:
                    02:be:ac:a9:bc:d6:16:f8:fc:59:b9:92:e8:4f:43:
                    ef:5f:54:cb:eb:c9:80:78:34:f0:c3:f5:d3:95:15:
                    4b:70:91:18:22:db:e9:98:31:8c:0f:6c:fe:c3:64:
                    4a:46:7b:12:b2:19:e1:4a:63:c2:0b:33:12:01:72:
                    f2:23:7c:fe:93:85:c8:65:d0:17:2c:3b:e2:f0:f8:
                    a8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:30:28:54:CA:5A:B0:3B:DD:4B:02:EA:CF:54:C3:B9:74:8C:36:7A
            X509v3 Authority Key Identifier:
                keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c8:91:f8:95:bd:3a:35:ca:ae:3f:a0:12:a8:9c:6b:c0:0f:
         82:1a:a3:de:9f:ae:a9:d0:be:cf:87:20:97:9d:88:76:d4:f6:
         08:77:fc:1b:74:8d:ce:95:37:5c:31:26:ee:17:3f:7a:48:49:
         59:98:75:e3:fb:95:0f:e8:57:c8:8b:a8:27:94:57:16:6c:5f:
         ee:91:33:17:7c:b7:b1:0f:f7:e6:5e:0d:35:fc:32:0a:0d:df:
         b3:9e:14:84:9f:b7:85:f5:24:b4:4d:0c:5d:ac:c0:17:fe:01:
         72:99:3a:7c:29:c9:01:5c:b9:c8:8a:ad:52:83:7d:21:4c:64:
         06:1d:48:11:59:bb:20:5d:10:32:50:be:df:24:4c:69:f7:25:
         40:c8:d8:e8:98:ea:c6:fa:ef:bf:90:16:04:e2:70:fe:c8:6c:
         62:11:90:34:d4:b6:d6:ef:02:62:ac:2e:18:07:c6:de:ca:69:
         99:28:3e:db:06:93:02:36:0e:5d:66:dc:d2:94:5f:bd:1f:26:
         37:09:a6:65:50:f6:6f:0d:13:17:61:af:7d:2b:6f:1b:74:40:
         b9:16:be:dd:59:6e:8b:47:0f:ad:c6:54:22:41:a7:20:a3:53:
         a8:92:30:2a:62:ae:c9:08:d8:8b:cb:6b:a3:ab:50:1a:dc:33:
         19:72:80:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:16:22 2025 by rpki-client