Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
File:                     AvViYsnox9E0TfKw-MJdoTq9YiI.mft (raw, json)
Hash identifier:          jtLu9E/nM8AeLSuXG11KOABHc8QCnhTjsYowjlmZkFo=
Subject key identifier:   B6:1C:BB:22:C9:B0:5D:C4:2C:66:C4:D8:CF:B0:CB:81:4E:D8:47:93
Authority key identifier: 02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22
Certificate issuer:       /CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
Certificate serial:       0196C9167FC52754BDEAD1FFA2F6DFEF8FA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
Manifest number:          0789
Signing time:             Tue 13 May 2025 10:00:16 +0000
Manifest this update:     Tue 13 May 2025 10:00:16 +0000
Manifest next update:     Wed 14 May 2025 10:00:16 +0000
Files and hashes:         1: 1--_Zcgs6dmSejokLiM_ybNoSeYY.roa (hash: WtkOeqxSouyMu3WCH8w+fCLALFhCyGea7LlfmEYOb0U=)
                          2: AvViYsnox9E0TfKw-MJdoTq9YiI.crl (hash: VvoGTalxQwSz7Sd6tt8jptGBhiXFHij2pMaK8WYWvX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 10:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:16:7f:c5:27:54:bd:ea:d1:ff:a2:f6:df:ef:8f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
        Validity
            Not Before: May 13 10:00:16 2025 GMT
            Not After : May 14 10:00:16 2025 GMT
        Subject: CN=b61cbb22c9b05dc42c66c4d8cfb0cb814ed84793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0b:13:3d:f2:3d:b3:a8:e3:da:87:f1:49:3c:
                    a2:13:63:3a:97:2b:55:e6:80:1f:64:e7:5e:62:1a:
                    1a:52:57:bd:75:73:7e:e9:95:c9:0e:c6:f1:42:98:
                    fd:d7:59:82:5d:d0:50:65:0f:f9:76:79:3c:64:d3:
                    92:e4:2c:78:4b:c7:cd:8d:38:48:e6:c8:d7:93:91:
                    19:9c:2f:de:e5:90:15:af:4d:a8:47:ce:61:64:f6:
                    7d:ce:63:86:07:1f:4c:a0:39:74:aa:bd:c8:9c:36:
                    2d:48:54:2f:bc:57:c7:da:ed:b1:53:7c:b7:51:1b:
                    7d:2d:da:4a:be:5b:ac:93:46:80:0d:df:7b:76:a7:
                    9b:44:59:e8:f6:84:9b:51:e1:c1:43:ec:ae:1a:23:
                    5c:d6:1a:fb:ca:78:05:f5:33:b9:35:2b:a3:fd:d7:
                    04:10:95:20:ea:0a:14:20:56:de:5d:b8:79:41:12:
                    64:a9:91:c0:37:88:40:13:b8:88:ea:d6:fb:a7:ad:
                    a4:a1:3a:69:55:38:ed:31:cd:15:1c:c3:99:09:a0:
                    da:4f:a3:cc:9b:24:85:4d:c0:6c:3a:1d:f0:bc:cf:
                    6b:aa:0c:32:34:8d:70:d0:49:87:ae:88:42:09:56:
                    c7:3a:06:3e:b9:28:3d:9f:e0:1a:9a:92:62:b8:e4:
                    b9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1C:BB:22:C9:B0:5D:C4:2C:66:C4:D8:CF:B0:CB:81:4E:D8:47:93
            X509v3 Authority Key Identifier:
                keyid:02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:86:ff:19:23:e4:36:a1:7f:ef:ba:4e:68:68:13:d0:65:56:
         8d:57:00:60:40:1d:99:26:03:19:fc:c0:0d:21:9b:34:b8:bb:
         e9:ae:ba:50:54:ec:c8:0a:70:8e:55:31:d5:a4:7e:ec:1f:1b:
         d6:a7:25:83:ae:c4:d8:9b:72:ff:ed:c1:80:a4:c4:fa:36:d8:
         cb:4d:e6:fb:43:51:cc:59:37:3c:53:c0:99:d4:2d:96:39:c9:
         d6:b1:2d:4c:ea:92:d7:7b:fa:df:bd:8a:ec:d4:f4:80:de:fb:
         3f:14:61:dd:36:33:ba:f6:81:c4:d1:ef:aa:01:ae:52:24:5b:
         af:0f:13:e4:70:37:60:4b:88:14:5e:d3:9c:f5:b6:41:b7:f3:
         6f:f2:41:a8:d3:82:4f:ac:6a:4f:0e:a8:35:7b:5f:86:8a:9f:
         bf:5b:72:d6:41:76:f7:54:55:79:68:18:2b:c7:1a:98:ff:2d:
         1c:7e:69:c8:b4:a5:9a:de:18:46:b9:b9:a2:7a:16:ba:7e:03:
         b6:fb:f5:c5:51:1f:21:1e:74:ab:89:dc:38:18:f7:95:b3:53:
         68:ce:1a:8a:3d:9d:fb:b4:eb:49:f4:4a:65:39:15:8a:32:4c:
         27:63:a5:aa:e5:3a:0a:9c:ed:42:ae:73:bf:43:be:9a:88:65:
         58:dd:95:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:52:42 2025 by rpki-client