Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
File:                     m-du9KpJjCFSTdftrRbeHT2wAuM.mft (raw, json)
Hash identifier:          uSZatsKbKSmGjd1LNZmQEQZjd72azq93EXxlze4lWf4=
Subject key identifier:   04:FD:0B:25:57:E0:26:F5:15:64:A9:7A:1F:A3:F0:64:39:CF:16:C4
Authority key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
Certificate issuer:       /CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Certificate serial:       0196B9A39A32CE83D166A952C3B70FE524A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
Manifest number:          1533
Signing time:             Sat 10 May 2025 10:00:28 +0000
Manifest this update:     Sat 10 May 2025 10:00:28 +0000
Manifest next update:     Sun 11 May 2025 10:00:28 +0000
Files and hashes:         1: HoDvxsQA4iXxpxVk1_co_JtvvPE.roa (hash: cWutlJOtBJ4KMx+ET4BMORGB6H9YK5+9Bn/1o272ZUM=)
                          2: m-du9KpJjCFSTdftrRbeHT2wAuM.crl (hash: G7gQGxtYqgrYP4Ftb6OQ4TyXr/e6aCeBLCva+nWXwsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:a3:9a:32:ce:83:d1:66:a9:52:c3:b7:0f:e5:24:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
        Validity
            Not Before: May 10 10:00:28 2025 GMT
            Not After : May 11 10:00:28 2025 GMT
        Subject: CN=04fd0b2557e026f51564a97a1fa3f06439cf16c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:61:94:51:54:82:0c:dc:53:92:c8:06:89:ac:
                    3e:17:87:0a:a6:71:6f:dd:49:5d:41:f3:35:e6:84:
                    ea:12:2e:77:c3:13:d5:6c:6c:88:3d:26:7e:d4:2f:
                    a4:bf:7e:79:c6:34:47:5e:6c:b3:9c:2f:26:d7:71:
                    23:b4:c8:08:bf:c5:52:8f:cd:ca:53:43:6d:82:f9:
                    ba:bf:03:6b:db:3e:66:88:54:87:21:31:fd:8f:52:
                    e1:83:c0:08:94:c7:e7:57:fd:0f:43:48:fa:05:fe:
                    1a:b3:84:24:ae:b5:b9:64:54:da:b3:5a:e4:04:99:
                    b4:31:4b:f2:4a:0e:ef:5e:52:3a:4e:9c:25:a0:8f:
                    52:8a:c6:0a:a7:22:0d:6d:a5:da:66:ca:80:37:fe:
                    cf:b7:97:73:fb:3b:3b:a5:c4:81:59:ff:2f:d3:cd:
                    89:2d:5a:ff:93:e8:40:56:b2:c4:31:52:cc:e4:12:
                    7f:45:48:ac:d7:67:d6:61:40:74:63:ca:31:fc:36:
                    e6:1e:55:95:11:a8:3a:8a:fb:48:fa:43:96:83:0a:
                    e8:0b:ba:1a:9d:10:22:77:d6:3c:de:0f:e9:1a:3a:
                    9b:ec:de:13:5f:f6:21:5c:a1:fd:03:2d:98:fb:92:
                    8d:25:18:62:59:18:76:46:71:a5:f6:41:c7:67:2e:
                    f1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FD:0B:25:57:E0:26:F5:15:64:A9:7A:1F:A3:F0:64:39:CF:16:C4
            X509v3 Authority Key Identifier:
                keyid:9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:ec:7a:4e:70:06:f0:c4:89:86:19:37:b9:f4:cf:47:67:82:
         00:c5:1e:4c:b8:07:bf:3f:fb:62:33:a0:5e:12:d5:bd:a4:bb:
         2c:2c:0b:37:bf:75:b0:44:2d:72:82:95:5e:29:65:e8:c0:95:
         9d:a3:9c:60:7e:f6:72:7f:3e:40:ac:34:50:9e:5a:88:6c:67:
         03:9b:78:c8:0e:70:d7:1a:f8:2d:c0:28:99:98:11:f0:7f:6f:
         42:73:89:92:8e:72:b6:40:1e:be:0d:5a:2a:7f:52:f8:4e:1e:
         e4:fa:ba:9f:88:6e:52:7e:82:95:e5:c0:77:ff:4b:2e:cc:9c:
         db:b0:ef:32:84:f5:b3:e6:76:cf:77:7a:2b:ef:94:54:02:e2:
         5f:93:7f:61:19:3d:09:01:31:5b:3d:12:f2:30:f6:f1:70:78:
         a1:d6:16:6f:dc:44:58:a4:60:37:a9:e9:80:4a:8c:b4:f6:0a:
         97:0a:fd:92:57:86:c2:76:e2:44:08:1e:1c:13:02:96:9a:bf:
         af:1e:3a:f6:b6:14:63:6b:b7:8d:67:e3:70:41:22:8e:0f:86:
         94:a9:09:f1:e9:a3:67:a7:a1:f7:91:de:ab:12:a5:80:8e:fa:
         e1:33:9e:1d:61:eb:bd:e9:52:f4:08:64:86:9a:01:e2:6f:91:
         3e:c3:4e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:58:54 2025 by rpki-client