Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
File:                     2amIkW1RQG-aJp8woC0AhrV_TVo.mft (raw, json)
Hash identifier:          VJBVK2O5CkaUTvL/3gbvOMD6ihZWclDciNuVfVXNweM=
Subject key identifier:   82:6B:98:B7:9F:22:9F:5B:72:A7:D8:9C:1E:60:F5:B9:0B:02:6E:7F
Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
Certificate issuer:       /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Certificate serial:       019679E9BBE5AE4EB4F71F3EA1ED70B291A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
Manifest number:          1210
Signing time:             Mon 28 Apr 2025 01:01:23 +0000
Manifest this update:     Mon 28 Apr 2025 01:01:23 +0000
Manifest next update:     Tue 29 Apr 2025 01:01:23 +0000
Files and hashes:         1: 2amIkW1RQG-aJp8woC0AhrV_TVo.crl (hash: kmY3J7JkXEOZgwnO2hg/17KeE42orMTzs2BexUNn+Tw=)
                          2: XPLXJ92Us5J-qBm5E6NHAQ2543s.roa (hash: kmqfE6MOxnhqMb5JKyuuIwjp6MzPudhOpk4vKGjjd3A=)
                          3: eDdWpFT8mYYDchLMDIlwWEtOor8.roa (hash: 9232400o2UHwz3/J/neEUWtVx/abMVxJjSjV/TU/3qg=)
                          4: jwmg81-ORqOZPp9Rh2D6s4HVTYQ.roa (hash: Uluu1ohil2uH9NagTZ/BKMHEBskA/iElgGUpNpib8O4=)
                          5: qDSvupNvi7XpnOr0ygHu8NcBhCQ.roa (hash: OxOTgS6oyFab2hs22rHLXwwiyKXLOcnTFclx4LxK7Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:e9:bb:e5:ae:4e:b4:f7:1f:3e:a1:ed:70:b2:91:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
        Validity
            Not Before: Apr 28 01:01:23 2025 GMT
            Not After : Apr 29 01:01:23 2025 GMT
        Subject: CN=826b98b79f229f5b72a7d89c1e60f5b90b026e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:71:4d:ee:cd:45:d3:9c:96:e6:bf:93:0d:dd:
                    0f:25:18:47:74:24:f9:b2:b0:c6:04:fa:ff:f4:27:
                    7a:9a:2b:e4:80:5f:80:cc:d9:5c:39:52:17:ad:f8:
                    71:49:bb:39:fe:69:0b:0c:29:fb:82:23:e2:8e:8d:
                    89:03:7b:48:3d:fd:fc:70:42:cf:9e:2d:ac:bc:53:
                    76:a1:d7:bf:48:95:65:7f:48:f3:83:a1:43:67:9c:
                    dd:48:25:9e:42:5f:42:70:0b:50:a0:f5:e6:22:09:
                    8d:56:eb:63:e1:16:45:d4:1d:60:db:d5:5e:1d:f8:
                    49:bd:15:62:99:ee:7f:b3:ab:25:36:ff:14:d9:fd:
                    17:5b:ed:82:6b:12:20:cc:6b:1d:8c:73:45:7f:0e:
                    f4:73:a4:14:0f:83:41:76:65:c4:63:e4:3f:f8:42:
                    f7:1e:ad:ad:25:3a:49:03:a2:3c:2e:2d:f0:17:b9:
                    b6:c5:f2:20:3a:44:d0:ff:d6:4b:cf:d1:f5:e6:28:
                    ce:44:1c:2f:e8:7e:20:54:fb:53:69:ab:64:07:14:
                    b8:9f:91:32:17:83:b8:bb:c4:72:cf:ba:dd:5e:ff:
                    e4:b8:94:fe:d9:b2:e1:e7:32:6d:eb:e3:c5:08:d1:
                    7b:62:7d:7f:14:93:7d:af:bc:11:41:25:60:cf:75:
                    62:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6B:98:B7:9F:22:9F:5B:72:A7:D8:9C:1E:60:F5:B9:0B:02:6E:7F
            X509v3 Authority Key Identifier:
                keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:90:33:b6:dd:b7:53:f1:95:7b:1a:02:5b:d8:4f:4a:7b:fa:
         b8:f0:7d:61:c4:f7:2d:8f:e3:d5:c7:85:09:ca:e2:3d:70:65:
         b7:9a:bf:df:f6:fe:46:b4:ff:a7:70:33:e7:98:4e:99:6a:d7:
         a7:b9:9a:60:c6:3a:25:5e:cf:8b:56:95:07:73:87:c1:48:4a:
         c7:b7:00:33:67:56:d4:dd:82:b6:a4:cb:c3:ae:b2:05:d6:82:
         ae:65:7e:53:e9:29:e5:37:6b:a3:b0:ce:71:1b:89:c4:1f:89:
         e6:08:85:9d:93:58:24:a8:c7:f0:43:ec:2d:65:82:a8:a7:53:
         1a:c3:21:90:a8:6a:63:90:0e:e1:ac:df:c4:c8:15:75:58:4f:
         0b:ab:38:fd:b7:19:de:a0:c4:ec:1e:f8:1d:d0:8a:18:05:28:
         b5:53:4b:0e:ab:03:a4:1b:9a:ba:5b:9b:31:4a:9a:b6:9d:99:
         54:7b:34:84:46:1e:f0:59:e0:a1:ab:67:3f:2c:48:ff:52:3f:
         3d:38:44:66:39:4c:83:bb:02:5d:3e:83:52:1e:fc:25:74:86:
         4b:84:be:c9:f0:c7:3f:f5:91:54:54:af:ca:ed:f2:59:14:26:
         f1:50:ac:19:fa:a4:9b:ef:0a:a2:fc:9b:ca:be:e3:df:39:86:
         b0:c9:32:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:10:19 2025 by rpki-client