Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
File:                     m7viALvfN5tQRVFjAXudR3fx210.mft (raw, json)
Hash identifier:          rkloTZPgnKB3Htu+zu3XT4fk/KNPjoaPU67/dJXDq0U=
Subject key identifier:   C9:18:84:22:A7:8D:D3:48:0B:7C:68:06:A9:20:8A:46:B2:52:F2:79
Authority key identifier: 9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D
Certificate issuer:       /CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
Certificate serial:       0196C239236DE3CD4CD3DB6B3FC96AC2D745
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
Manifest number:          10CD
Signing time:             Mon 12 May 2025 02:00:46 +0000
Manifest this update:     Mon 12 May 2025 02:00:46 +0000
Manifest next update:     Tue 13 May 2025 02:00:46 +0000
Files and hashes:         1: 3KDKnt4N1kaVYO5cJoBomMZhBKI.roa (hash: MYr27t+UpY1nV8Z5RMAwd4JpyhndolDAT0zGy5OlcpY=)
                          2: m7viALvfN5tQRVFjAXudR3fx210.crl (hash: 0pZkQeEFIZo+4xxXqX10Koh15SIxzPFkWecikVxmTj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:39:23:6d:e3:cd:4c:d3:db:6b:3f:c9:6a:c2:d7:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
        Validity
            Not Before: May 12 02:00:46 2025 GMT
            Not After : May 13 02:00:46 2025 GMT
        Subject: CN=c9188422a78dd3480b7c6806a9208a46b252f279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:84:e5:e7:ab:9b:ab:eb:bf:86:61:08:31:
                    45:5b:8c:f2:21:86:59:aa:ae:37:bf:08:a9:2e:c7:
                    ba:39:fb:b3:c6:85:64:59:6d:51:a4:d0:31:68:c0:
                    cf:f3:a8:8b:82:6f:63:ff:09:a5:2c:e9:da:a5:e8:
                    f9:a5:90:f9:0b:90:4c:4d:65:e2:99:b4:88:17:58:
                    5f:37:1c:5f:a7:25:4f:b4:40:43:38:e0:74:08:b5:
                    77:89:f7:69:c3:8a:26:d6:90:62:c3:51:bb:da:14:
                    f8:37:b8:69:83:70:75:25:2e:f2:1a:5a:97:81:89:
                    c9:2d:82:03:5f:0c:30:56:71:9b:5b:33:ed:17:d2:
                    a3:f8:f9:6f:4f:b2:81:02:1d:06:a6:07:7a:83:79:
                    17:6c:02:34:61:92:f2:a7:c9:78:0c:e5:43:b6:6f:
                    61:f6:ea:e5:c4:0b:3a:f4:b8:ce:27:ef:81:80:ab:
                    bb:e5:70:ff:43:8d:dc:f2:dd:c8:19:b5:28:73:97:
                    c6:f3:8c:d1:0d:87:96:4c:66:42:a6:8f:b8:62:8b:
                    50:69:8a:0e:e1:5d:78:e6:86:00:ff:70:7f:fd:98:
                    e6:e6:22:12:fd:ac:30:3e:b1:ce:17:91:3b:a7:4a:
                    4a:37:79:4a:aa:9b:01:34:7c:ab:5d:70:1c:9e:50:
                    95:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:18:84:22:A7:8D:D3:48:0B:7C:68:06:A9:20:8A:46:B2:52:F2:79
            X509v3 Authority Key Identifier:
                keyid:9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:57:9e:bf:e8:6a:9e:55:12:e4:30:e6:10:60:c1:9c:ad:8f:
         e9:80:e0:61:24:d5:5a:81:7b:63:22:7e:b6:3c:52:5c:46:f8:
         0b:b1:3d:3e:45:4f:59:1a:fa:ac:d4:35:62:b6:13:f1:88:61:
         5d:43:62:54:3c:8d:c5:fa:61:83:3b:68:5f:27:ac:ea:97:0c:
         9c:1f:4c:24:fc:ad:03:7c:db:4d:3a:8e:19:eb:fd:e4:cd:83:
         2c:12:f1:87:a4:42:56:0c:04:04:82:a4:af:61:8c:21:69:e7:
         51:48:95:c6:c9:d6:d3:cc:05:bd:74:ce:3c:c5:2d:c4:c0:5d:
         ae:9c:8b:4d:83:ce:7c:42:74:cc:e0:cc:b4:74:d9:5f:5d:bb:
         4d:2c:45:bb:a6:e8:3a:ad:47:bc:47:dc:b7:0b:58:2d:53:bb:
         46:67:1b:e0:8e:84:69:6a:54:14:14:4a:1e:9f:54:b5:71:64:
         a7:e9:62:20:c5:0f:dd:c5:03:04:0b:1e:43:aa:9d:b0:6e:2a:
         83:8c:1e:32:a1:9f:cd:c1:89:f1:d5:aa:11:7b:48:e6:35:cc:
         50:22:7e:4e:18:b1:5c:3d:4b:22:7e:a4:5d:b5:3e:10:10:41:
         4b:c9:9f:36:ab:12:3f:c5:75:ed:16:61:10:c4:02:87:72:4b:
         ad:d9:bc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:41:13 2025 by rpki-client