Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
File:                     AKhWpBc4la9EuP00RVRppcTWFzs.mft (raw, json)
Hash identifier:          Km6+XsO8QS8HoKyAacxh9Zs/vVJkNMFb/OGsgjwEMwA=
Subject key identifier:   92:0F:80:14:E8:A5:2D:75:C1:40:E8:5A:A1:C3:EF:AF:ED:5A:39:F9
Authority key identifier: 00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
Certificate issuer:       /CN=00a856a4173895af44b8fd34455469a5c4d6173b
Certificate serial:       0196974E8820416BC7FE49BABA4AF039DC90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
Manifest number:          65
Signing time:             Sat 03 May 2025 18:00:28 +0000
Manifest this update:     Sat 03 May 2025 18:00:28 +0000
Manifest next update:     Sun 04 May 2025 18:00:28 +0000
Files and hashes:         1: 4mezRfHPXPaCo28qoJyolX64C48.roa (hash: QHUvtDK2DiCjdwwLpsM73EoVrUrKJFVkLwmkkTWUE3k=)
                          2: AKhWpBc4la9EuP00RVRppcTWFzs.crl (hash: uuVvGV26RKkTjF54alHTGyebGoNZLEUAVYXG8TM0EmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:97:4e:88:20:41:6b:c7:fe:49:ba:ba:4a:f0:39:dc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00a856a4173895af44b8fd34455469a5c4d6173b
        Validity
            Not Before: May  3 18:00:28 2025 GMT
            Not After : May  4 18:00:28 2025 GMT
        Subject: CN=920f8014e8a52d75c140e85aa1c3efafed5a39f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2c:94:fe:0d:39:3f:1f:e7:18:31:18:f9:a5:
                    d7:f3:eb:7a:f5:50:00:de:57:7b:f2:6c:c4:4a:1f:
                    c5:c1:08:fd:ab:24:f9:0a:d5:60:11:08:f9:90:28:
                    7a:c4:a1:2b:9d:80:cf:12:24:77:d2:84:ec:76:0f:
                    3e:be:82:bb:7f:42:35:30:cc:a1:35:26:17:0e:56:
                    37:22:97:07:28:e7:29:a2:98:51:80:e6:9c:46:54:
                    49:ef:f9:c6:0b:33:db:2f:70:ca:a7:d2:1c:ee:f3:
                    f5:5f:dc:7f:ed:19:89:76:0a:3f:e9:54:dc:7a:cb:
                    80:5c:7b:c9:fe:a8:a4:80:84:07:19:20:3e:bd:26:
                    c6:63:6b:79:ab:c5:40:4e:47:c3:01:ca:e0:87:49:
                    7e:7c:db:f5:0a:cf:63:61:3c:0b:bc:b5:fb:ea:d1:
                    e3:d6:2d:77:97:fa:61:c0:07:00:2d:20:a6:f8:ce:
                    47:ab:f1:b2:1c:72:f3:aa:89:24:74:e6:26:ab:e1:
                    b1:fc:04:20:0a:ac:bf:02:19:59:3e:8b:26:d4:53:
                    2d:59:8d:2f:fc:9f:45:f8:de:ad:5b:89:95:2b:10:
                    07:ce:33:4c:ff:b1:63:54:f3:71:84:4b:aa:b2:bf:
                    15:1b:83:f1:69:59:9c:39:92:0c:81:a9:8f:1b:68:
                    f2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0F:80:14:E8:A5:2D:75:C1:40:E8:5A:A1:C3:EF:AF:ED:5A:39:F9
            X509v3 Authority Key Identifier:
                keyid:00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:85:0a:8c:50:60:b9:a0:43:7c:88:b3:10:fc:28:33:55:55:
         a6:ae:72:37:ea:90:b6:83:de:9d:e9:dc:16:99:f4:87:d5:da:
         91:8b:38:bc:0d:69:d1:c3:dd:00:db:8a:a0:6a:6f:0f:fa:63:
         10:4b:2b:b1:79:0b:77:fa:a6:19:28:97:f7:d0:3a:67:21:12:
         a6:5c:f1:f1:e7:bf:4d:75:30:dc:84:4c:d6:d0:45:b5:67:82:
         9c:89:5f:e8:e6:aa:fb:60:5e:ed:9a:11:f8:ce:da:2b:74:78:
         18:5e:5f:f4:3b:34:3c:e7:2b:14:30:91:07:62:83:8e:39:50:
         5d:31:22:49:96:c2:fc:f2:a1:21:a6:21:8d:7c:66:b1:a5:d7:
         64:a2:4e:f0:02:9c:a1:cc:54:ca:4a:ec:ef:73:fb:1f:3b:38:
         94:90:51:b7:a3:fc:6e:10:a4:20:84:cc:6c:7f:29:21:09:d2:
         45:5e:e0:dd:9f:2f:f6:34:2d:86:a4:42:b5:fd:39:b7:b2:3d:
         30:d5:2a:e3:0d:bb:52:e2:df:bb:4e:8d:e2:d5:92:73:45:06:
         1b:1d:b5:a0:3c:c2:ef:b5:a1:16:4b:c5:d4:02:aa:59:e3:6f:
         fc:31:51:58:5a:2c:cc:dd:84:44:cb:ea:ac:bd:58:ab:5f:72:
         31:cc:c8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 21:42:52 2025 by rpki-client