Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
File:                     mRLZRawqSfO02iIhwnuCmq_MsvI.mft (raw, json)
Hash identifier:          bPsSSMA+uD3sAymNYET3mnRwu2wNi3ErvUvsIc+Y3Hs=
Subject key identifier:   95:05:BD:A1:55:72:C3:E5:EE:73:4C:25:42:CF:B9:6C:85:BB:07:5F
Authority key identifier: 99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2
Certificate issuer:       /CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
Certificate serial:       0196B9A3C04F444527D7645EF67AE7720B13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
Manifest number:          134E
Signing time:             Sat 10 May 2025 10:00:38 +0000
Manifest this update:     Sat 10 May 2025 10:00:38 +0000
Manifest next update:     Sun 11 May 2025 10:00:38 +0000
Files and hashes:         1: G3bPtDx0TvVdf4ayVJDtbWUroio.roa (hash: 0QDqlFsV7bJD4enXREu7nHOgEbbLdZBSnVYjPXImw60=)
                          2: mRLZRawqSfO02iIhwnuCmq_MsvI.crl (hash: 7fjEYbgqz5W5A2tWzvgR9uRLyJTdcqX2mw85Qz1n2D8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 10:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:a3:c0:4f:44:45:27:d7:64:5e:f6:7a:e7:72:0b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
        Validity
            Not Before: May 10 10:00:38 2025 GMT
            Not After : May 11 10:00:38 2025 GMT
        Subject: CN=9505bda15572c3e5ee734c2542cfb96c85bb075f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:34:d9:5b:c6:e6:ec:fd:b3:d7:ee:a1:26:a8:
                    28:1e:4d:c4:9b:0d:17:e9:e6:b9:87:37:43:95:5a:
                    86:72:8c:a9:ed:29:28:d3:b7:2b:29:6a:c1:9a:9f:
                    e4:c2:31:b4:60:de:0a:0e:6c:69:a1:f9:e7:3f:8b:
                    b4:54:a5:d5:07:3d:a5:4b:be:4f:f7:60:62:15:d1:
                    2e:f1:63:fb:ae:c8:94:dd:ac:cb:c8:d9:a9:2e:e5:
                    db:ce:22:09:f0:79:5f:e0:28:a0:34:f1:a7:18:d5:
                    9a:ab:da:6d:b6:cc:0d:71:e2:98:2c:fd:65:83:f8:
                    34:50:6d:f0:9d:47:17:98:8b:28:c4:6a:5a:11:02:
                    68:29:e5:bc:ee:29:d5:eb:b2:b5:65:f8:41:c0:80:
                    74:38:74:61:67:85:25:0b:2f:c9:ff:38:7d:f6:76:
                    bc:bb:41:51:2b:1b:d6:75:ae:5c:7c:4d:34:1b:31:
                    1f:2e:1d:68:3b:30:5e:9a:29:09:11:37:1b:cd:b0:
                    60:e6:57:ba:a4:3d:c5:08:15:b4:a0:4c:d7:b6:42:
                    b0:53:b8:f0:b0:47:7c:a0:a6:48:6c:f3:52:4c:f0:
                    9a:a5:d6:57:46:5e:68:c1:33:50:d1:ab:49:ab:b6:
                    07:f8:29:30:45:86:74:a0:f5:b2:c5:d5:a2:03:85:
                    43:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:05:BD:A1:55:72:C3:E5:EE:73:4C:25:42:CF:B9:6C:85:BB:07:5F
            X509v3 Authority Key Identifier:
                keyid:99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e9:c0:57:8b:3e:ca:63:ba:b5:bf:1d:17:d1:00:7a:49:17:
         e0:bf:f3:74:1f:1e:0c:82:37:75:47:f3:c5:58:56:26:30:ff:
         8e:ea:91:b0:f1:ba:a8:bb:91:8d:95:f2:d0:2c:6c:c6:aa:76:
         2c:5b:5e:0c:36:fa:0d:52:65:de:51:57:39:97:76:da:53:fd:
         c4:d7:7b:f2:3a:cd:00:54:e4:88:b7:da:2d:c9:37:25:01:02:
         14:63:49:4c:9f:ed:17:89:31:c6:2f:23:e4:80:be:e3:d7:d8:
         28:f0:1d:91:2b:af:aa:8a:11:af:c6:31:55:59:40:b3:55:2a:
         43:83:55:dd:a9:d6:2e:42:5d:47:5a:fb:3b:b4:85:1e:86:68:
         7d:cd:33:b5:08:1d:a2:c1:3f:6f:04:01:a0:11:fe:a5:71:16:
         2d:8b:52:9e:64:2a:83:c5:1f:21:7c:ab:93:8b:92:ff:b3:f6:
         ac:5c:bd:37:70:3b:e6:b2:31:94:7c:c2:b3:05:7f:cf:7a:a8:
         8c:59:0c:74:3a:f3:64:be:e5:5e:fb:85:8b:74:da:cc:5a:40:
         0a:b9:2b:50:f2:2a:4a:12:5d:53:19:5a:12:29:ab:74:16:b3:
         43:3e:f8:d1:cf:b4:93:86:5c:73:16:bc:23:51:55:be:4b:44:
         c8:da:36:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:40:26 2025 by rpki-client