Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
File:                     mXwn0VtG2xhLwCswPIa0fEScG1Q.mft (raw, json)
Hash identifier:          zuZ3NVhGR4NfbbbneUtra6thqHU3qQY2Au62PLOWPjM=
Subject key identifier:   B7:F1:85:C2:6C:71:5E:4A:04:70:64:A8:D4:B6:D0:05:5E:B8:4E:65
Authority key identifier: 99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
Certificate issuer:       /CN=997c27d15b46db184bc02b303c86b47c449c1b54
Certificate serial:       01968F94F94D9B359F5F268DD16D06162EF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
Manifest number:          0DE1
Signing time:             Fri 02 May 2025 06:00:27 +0000
Manifest this update:     Fri 02 May 2025 06:00:27 +0000
Manifest next update:     Sat 03 May 2025 06:00:27 +0000
Files and hashes:         1: JpZlGPUSnNPcPAQ7HrfbEiiCY90.roa (hash: sj/ySyRWLvZHGTxRHODxTY1XK4NRx1uXT8wwjiiWvG0=)
                          2: mXwn0VtG2xhLwCswPIa0fEScG1Q.crl (hash: vxlCB/mhA/62+MSIGvBqTmRZenuL8pPs5fpzosKceRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 06:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8f:94:f9:4d:9b:35:9f:5f:26:8d:d1:6d:06:16:2e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997c27d15b46db184bc02b303c86b47c449c1b54
        Validity
            Not Before: May  2 06:00:27 2025 GMT
            Not After : May  3 06:00:27 2025 GMT
        Subject: CN=b7f185c26c715e4a047064a8d4b6d0055eb84e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b4:a2:4f:02:ae:88:8d:b1:2c:d1:bb:5d:45:
                    ae:94:fa:f4:57:71:d6:0a:10:2e:72:b5:5f:56:f3:
                    c4:40:71:4f:4f:1f:2d:2f:10:29:6a:13:80:1c:2b:
                    e2:6a:ff:64:56:b1:0e:a8:b2:17:b4:bf:5d:d8:b0:
                    21:81:43:19:8d:bf:d4:45:d5:79:3d:47:53:a3:d0:
                    2e:19:67:ee:d7:22:91:54:f8:9d:3c:69:cb:cd:7a:
                    57:e1:f6:1f:0d:dc:53:c6:4b:d0:dd:e9:5e:56:e7:
                    a3:d8:dc:8e:85:3e:eb:bd:aa:f9:99:c4:f2:37:c2:
                    b0:6c:ff:1c:36:4a:d5:3e:74:c0:94:c8:3c:5d:35:
                    de:80:6a:a0:19:1d:99:cb:ff:57:62:ce:97:fc:f4:
                    ac:d7:c3:89:15:0e:bd:0e:20:b7:b4:ad:31:9b:a4:
                    6c:9b:e6:e9:cc:1e:38:1e:d9:db:8b:7f:96:c9:2f:
                    47:bf:58:91:1a:fb:53:aa:f3:9b:80:58:64:88:a7:
                    56:aa:48:73:08:3e:0d:a2:1e:47:e2:33:84:d9:6c:
                    c3:5a:6f:34:53:31:d5:bf:a6:a9:10:95:e3:c8:10:
                    39:3e:a0:df:fa:36:f5:40:52:7e:89:a3:11:73:47:
                    6d:ba:b7:3d:25:17:75:a1:04:1e:6e:08:99:ed:fc:
                    b1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F1:85:C2:6C:71:5E:4A:04:70:64:A8:D4:B6:D0:05:5E:B8:4E:65
            X509v3 Authority Key Identifier:
                keyid:99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:bf:da:d8:d0:e4:b6:ef:31:d2:dc:0a:28:36:da:56:51:b5:
         11:43:71:27:0d:0b:b9:a4:c0:10:6c:1d:24:c9:08:8f:fc:c2:
         21:0b:fd:a7:34:a4:30:cc:47:f7:3a:03:2d:49:b3:6c:2d:d1:
         0a:3e:b5:a0:cd:c5:aa:e2:a5:cb:87:31:35:48:58:be:fc:9b:
         97:fd:3e:47:31:9f:a9:6e:db:49:1b:46:8b:2c:2f:6b:b7:2b:
         60:1c:68:c8:55:2a:84:77:af:0d:55:e7:6f:7d:45:c3:8c:ea:
         bd:4b:34:85:db:06:af:19:35:f6:48:c4:9c:53:16:f5:94:b0:
         af:9c:a8:be:6b:9a:3a:c6:84:4e:0f:21:d6:81:65:b4:82:b7:
         30:37:f7:13:2a:06:60:65:0e:49:8d:6f:b0:c6:e3:cd:15:74:
         92:ec:37:9f:a1:42:38:2c:2b:84:b8:4f:ad:bc:60:e6:f0:78:
         71:24:fb:99:9f:43:c8:af:dc:d3:2d:bd:bd:15:94:45:41:56:
         4f:5f:37:59:8e:97:e9:52:f6:4f:25:df:7c:20:0e:72:c0:5b:
         d1:f6:9d:aa:1e:e0:06:00:82:3f:5d:dd:1b:d0:1d:b5:20:27:
         8b:b5:09:f0:e1:6e:07:7e:8d:77:40:be:a3:1b:11:59:ee:ef:
         b9:43:cd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:00:52 2025 by rpki-client