Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
File:                     l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json)
Hash identifier:          8PljS6Ff9SgEO6ED1I3tDm9PFJ5oZijebClOcWIuQrE=
Subject key identifier:   A2:84:1C:DA:67:39:89:EE:3D:A6:C0:26:E5:EE:E7:A6:4C:EF:E8:94
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Certificate issuer:       /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial:       0196BE931CF0659B7BD90AA17AAA8DD00C04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
Manifest number:          1328
Signing time:             Sun 11 May 2025 09:00:34 +0000
Manifest this update:     Sun 11 May 2025 09:00:34 +0000
Manifest next update:     Mon 12 May 2025 09:00:34 +0000
Files and hashes:         1: 9fuYulUVxtgS2OdAoDqw73sL458.roa (hash: 4sliq0762rmQYCBsPA1iMqCrKBq5MvjcOahYDnYc2F8=)
                          2: GCT36J3n1OxX-WHPNyMOxT30V1I.roa (hash: a5Pszieg/F5+mp8skMSq3X98683NVjkxEMhhyfalK24=)
                          3: HHQySsc2sVncpl_R112Rp7UBme8.roa (hash: o5Y2R7hIF0WuEuOP3GMyoZ2q0qHpF5bawNz2lBwugJ8=)
                          4: M3nuXRHV-HSVCrPsQchhdr5_x7Q.roa (hash: yixO/lM/jrXq6xFtI0OoJ7LnqzWDwB/3Pvi4UUX0Sqg=)
                          5: SMFHgAd465jvbKDW6YZwTehlmXs.roa (hash: mo74I69JinqweIsRPNZbaqL0YDRPxBEE9SrCUOt17NI=)
                          6: ZBchq6XY20TTbsyHdd1bA4NXQDI.roa (hash: cXsbXY9mXAQImf4zNq8oJbYuL59z2XDzDCo4Q8qeQoc=)
                          7: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: N1SN4GIPvM0gV0RZnOG3qsy0MmqvimKpkuH+G/WdARs=)
                          8: p906kmkgY0qUYyVJw53cck20ZMc.roa (hash: RM2au0VYfH5622DYXzfGpU015sseQv18gBHvKAhN9Co=)
                          9: z-gzGRp6g46RfhDlKhHGqEoG68k.roa (hash: zEuoDm3Q5DkSIXVAGKauWFsGpEgi0zHMp7amnQaC+g0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:93:1c:f0:65:9b:7b:d9:0a:a1:7a:aa:8d:d0:0c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
        Validity
            Not Before: May 11 09:00:34 2025 GMT
            Not After : May 12 09:00:34 2025 GMT
        Subject: CN=a2841cda673989ee3da6c026e5eee7a64cefe894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7a:58:c6:11:0d:b1:d0:1a:38:4f:99:89:d4:
                    3e:ce:23:5b:74:72:12:d2:0f:37:cc:b2:9f:db:12:
                    ac:03:fc:ce:23:1d:85:cc:4b:18:bb:3d:2c:11:d7:
                    7f:af:e8:cc:8f:ba:cc:31:b0:9a:6c:26:30:b3:cf:
                    0d:e7:5a:c0:4c:8f:f4:c4:6e:17:c6:2e:4e:ac:9f:
                    72:6a:cd:eb:1d:fd:34:51:94:57:97:82:22:a1:ee:
                    2d:bb:cd:ea:f7:ef:fa:bc:70:a5:97:89:d2:eb:b3:
                    9a:31:5c:d8:eb:c7:f3:2a:ee:b2:f7:bd:19:d2:f3:
                    73:11:20:4e:29:cc:b3:05:8b:f4:71:93:e9:7b:d9:
                    dd:89:ad:99:90:54:c4:1b:c9:a0:73:fe:6c:d0:8e:
                    a3:00:91:58:9e:29:c3:c6:ae:32:31:c8:6f:d6:dd:
                    6e:53:c3:33:23:04:59:a8:af:65:ca:c2:1b:60:c6:
                    16:18:d5:c2:c9:3a:4f:be:1f:44:46:6f:ef:6f:71:
                    ca:11:46:fd:65:e4:de:e8:53:ad:4d:64:b4:f8:99:
                    d1:32:84:ca:bb:60:a9:ed:6b:59:ef:f2:44:93:81:
                    45:cd:c6:9a:8c:2a:42:b8:47:fa:b1:3b:56:aa:37:
                    0b:b3:c6:f7:3f:20:10:9b:66:02:c7:aa:62:bb:9e:
                    77:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:84:1C:DA:67:39:89:EE:3D:A6:C0:26:E5:EE:E7:A6:4C:EF:E8:94
            X509v3 Authority Key Identifier:
                keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:f6:d4:7c:22:6c:00:dc:e0:8b:60:9b:f9:76:62:41:c4:92:
         fb:4f:74:af:b0:82:45:ec:55:df:67:04:d1:8a:90:bc:1a:72:
         42:0e:86:36:29:21:a8:1f:02:a2:23:db:80:85:72:7e:f4:37:
         51:31:08:69:bf:41:97:e0:98:8e:21:af:00:8f:8e:6b:3b:a9:
         e5:f4:b0:eb:fd:39:6b:16:36:b2:ae:1a:2a:1b:51:98:4f:d0:
         45:16:d2:38:2a:64:cc:52:f8:15:e2:69:d1:da:ee:de:be:34:
         a6:07:05:f4:49:60:91:53:42:59:ff:c8:13:a6:1d:0e:21:4d:
         b6:33:1f:a3:53:49:fd:0c:c3:11:fb:52:00:f6:28:d7:c9:b5:
         88:20:30:6b:21:fd:7c:3c:57:e2:0f:40:ee:d8:fd:fd:f0:88:
         be:cd:e0:32:07:2f:61:c3:d7:f2:4d:e1:2e:96:48:6f:65:dc:
         b5:c0:d2:1f:04:84:5c:80:64:3d:3e:94:78:0c:93:00:51:bb:
         3e:99:b6:06:79:c3:36:07:42:4a:64:aa:f7:18:3b:9d:46:40:
         a6:0c:ee:f5:2c:76:33:42:5f:66:e6:2c:d2:53:21:78:27:6b:
         8d:f1:00:75:b5:4a:77:6a:60:bf:ad:b7:6a:9a:b4:bd:df:08:
         19:5c:ad:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:05:52 2025 by rpki-client