Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
File:                     KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json)
Hash identifier:          J4oTExN6Yv7igezGmQjU5PnrnKCjBzq7jIwn344S4fs=
Subject key identifier:   06:B0:45:24:F7:2C:A0:83:55:93:8D:08:3B:D8:78:3A:57:FB:BC:3C
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Certificate issuer:       /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial:       0196AEB2412732D3FD2814DC5BC49C6E93B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
Manifest number:          06CC
Signing time:             Thu 08 May 2025 07:00:39 +0000
Manifest this update:     Thu 08 May 2025 07:00:39 +0000
Manifest next update:     Fri 09 May 2025 07:00:39 +0000
Files and hashes:         1: EI7dYlJh6LhMXB8o9nb3T4Z5aSU.roa (hash: MmSw3Gp5lTTxkK0eiPx+eF3FQfljG+ipyig54PF6DUw=)
                          2: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: ZHxtdpnD+89luJzpV5HOJJT6XwhuxkbgYbmFMdWrgdQ=)
                          3: RnDsNDAUOmfocBcXgLTcHPDDhKQ.roa (hash: yyfreslJl3l+RdMxXIwzsT6k7E7HMN8jhFZGTbEdlJI=)
                          4: Y8zzieez_mdBu3g9ytJW3F1qtcM.roa (hash: IBQYnJmIJpRbjM/GjJNvEs/gT4e0NBRUv4AwTGSAB8I=)
                          5: _eEka1D2F9svheD7_1S50A6jg0c.roa (hash: FY3lzS47CrifHw8hxi2Yq9gCSugm8bX/KQaXGUUplkU=)
                          6: jTf4hu8p-YdeMkBcAMreST3RURY.roa (hash: IZtRwQReOQuA1Z4S5nLNVFRKIJVo5gpQ/QND37UUm9g=)
                          7: qV0bi1f4xUUogQC2jTvfOlCFNsY.roa (hash: JeZIDT/pHiJyZCYpNCof5wbSJ0INX3sJ+QZbs083uM0=)
                          8: tW9K0gmr3gNJNZi6H4Oj8e3Jn10.roa (hash: bWzKXJxMql9A44/Gmu3Ld5HFcp9B6Ivj+R3Ym/3BJEA=)
                          9: ueIl5HLpFqn43HBQc7-Q4ZVn06k.roa (hash: fzhg7jHCYT5oIQ824HH1vwjcqcxosVhT8YpZmbw8K50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:b2:41:27:32:d3:fd:28:14:dc:5b:c4:9c:6e:93:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
        Validity
            Not Before: May  8 07:00:39 2025 GMT
            Not After : May  9 07:00:39 2025 GMT
        Subject: CN=06b04524f72ca08355938d083bd8783a57fbbc3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:01:06:b2:d6:22:1f:51:fd:cc:be:c2:00:b8:
                    88:ac:9d:4f:4f:d5:60:3b:19:c1:f4:47:50:76:2f:
                    74:7e:1d:e9:c5:d8:85:dc:55:19:e7:17:c7:f2:7c:
                    55:c1:e4:99:fb:37:f1:09:61:98:b4:c8:8b:82:87:
                    a7:ba:ca:80:18:9e:30:cd:04:10:9c:89:71:4a:4a:
                    cf:c1:30:4a:22:9f:77:d0:de:09:68:bf:02:cd:48:
                    0d:88:f2:91:9f:88:d6:b0:55:bb:b6:81:7a:2a:e6:
                    e3:a9:42:a2:e1:7a:d0:19:0a:48:02:47:b0:9d:9d:
                    46:d8:22:8e:03:83:0d:e7:d3:3e:b4:78:5f:cc:c7:
                    64:96:71:07:50:a0:01:6c:7a:04:92:43:54:e7:5b:
                    b5:dc:0a:28:3f:4f:e6:70:c5:89:10:e9:51:1f:dd:
                    24:09:a3:5e:c6:3f:41:87:d1:53:da:a9:84:50:d8:
                    6b:ad:26:f2:81:f1:82:b7:e2:4f:5b:24:0e:27:fe:
                    f6:76:7a:91:fc:e8:84:a0:73:27:09:d3:bc:8d:58:
                    1c:34:fe:02:52:ba:e5:12:a1:e1:01:b4:9b:30:f6:
                    bf:61:ff:e1:7e:e8:85:3c:40:e8:45:8a:65:ac:09:
                    b0:9b:98:0a:30:3e:42:1b:59:fd:c0:6d:23:ad:18:
                    9f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B0:45:24:F7:2C:A0:83:55:93:8D:08:3B:D8:78:3A:57:FB:BC:3C
            X509v3 Authority Key Identifier:
                keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:27:62:cf:1f:20:03:91:e8:7c:44:dc:b5:20:f1:94:8f:4b:
         4f:8f:51:32:db:35:61:bd:8f:c3:ab:d1:9d:c0:38:34:bb:91:
         11:46:6f:60:38:83:42:49:82:11:3d:f4:d1:24:e5:ff:12:28:
         36:3a:5d:6d:b4:81:3c:6d:36:e3:63:7d:1c:d4:da:d0:c4:71:
         4f:0a:d6:e6:57:31:00:a9:47:3a:b9:b7:6a:e4:21:20:51:64:
         5e:69:2a:f2:e1:14:02:00:37:45:51:39:ae:45:e3:14:ef:f9:
         ff:f1:2d:8c:f8:d7:2a:d0:f3:a9:f4:1e:ed:2a:10:74:21:5a:
         a6:3d:c5:3f:00:57:66:64:d6:08:f2:f9:bf:34:4f:cb:bb:f8:
         3b:21:17:fa:83:e8:ad:38:28:a9:06:c6:ce:5d:ba:c9:97:dc:
         18:df:89:4b:ad:b2:03:e6:06:b0:50:00:53:10:e2:d4:24:b3:
         82:77:25:b0:6f:70:db:53:e4:61:3a:52:57:62:b4:dc:3f:2a:
         64:1d:11:52:6b:74:1f:45:ce:1a:27:d4:2d:05:7d:99:e2:96:
         8f:4d:0d:20:f5:0c:0e:94:9c:83:5a:1d:82:72:30:97:36:2e:
         14:20:1c:3c:22:5b:62:71:55:7c:36:e7:36:77:85:fa:3f:14:
         06:a3:b1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:43:04 2025 by rpki-client