Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
File:                     d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft (raw, json)
Hash identifier:          70RurrUo9Drmb4JJrGsPjPWS43IeEnxYBojCUD4QIWU=
Subject key identifier:   E0:2D:C8:BE:78:CB:99:C9:83:5B:60:98:EC:8D:5E:6E:76:74:4E:34
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Certificate issuer:       /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial:       0196AD68D7208F6E1A91870DDC0A1E29EF4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
Manifest number:          0D04
Signing time:             Thu 08 May 2025 01:00:51 +0000
Manifest this update:     Thu 08 May 2025 01:00:51 +0000
Manifest next update:     Fri 09 May 2025 01:00:51 +0000
Files and hashes:         1: B2IMeTT_3aTfHDkJlGE0ghQbFDk.roa (hash: 9QqvH1LHSxTx6M/amoR6Uht8hCig8jnepvjGfXmWyhk=)
                          2: ECREWCSjB2P9M1NdQJkNhFBrz0I.roa (hash: +tEm/N3DaMPpPkId6V2tgAfvUGEuMx60jSfnQrCgr48=)
                          3: HTHZV637COqOMMv4cRAf8uyfPWQ.roa (hash: B2/vOhPVX6+TL3e+PEOrnbSL8UQQyNInIECqtVOI3Z4=)
                          4: IaeTEwJtU2EKstOhMSF78ATUCXM.roa (hash: DXtwHkKmOCisIkHvbgh1YerTYxT5FkGSDRKk1ziQyBY=)
                          5: ZZUO68-zxdfnWQL29ZUtG9LLugc.roa (hash: 0h/+/ARohlLe8FbEefTrGt5FPoB1oPmk+Sl96f01Yto=)
                          6: d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl (hash: n2McyMp17W1xexFv50qAXsOR13BY9cpub8l/98pEXvo=)
                          7: e9K3ROTtQGAIvma-lxNEnMwJC2A.roa (hash: FZXtwNH18f+yarE1SlyyM2bCUezbZToQsOy/EnG3HSs=)
                          8: kZzNXyqdPd_aCyfdeTA4-Vt_eag.roa (hash: 7D43/2woHLE921UFuQulERKrZTbyhIaHRG/3D0MgTLs=)
                          9: qmOZwfWbfR6XjYwl5pYRt79e34Y.roa (hash: wP6Og39PiJakVD6q3dK8IAoysYFGH1TxQgPn9ZY7c8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ad:68:d7:20:8f:6e:1a:91:87:0d:dc:0a:1e:29:ef:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
        Validity
            Not Before: May  8 01:00:51 2025 GMT
            Not After : May  9 01:00:51 2025 GMT
        Subject: CN=e02dc8be78cb99c9835b6098ec8d5e6e76744e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d5:d7:c4:7a:ea:af:a6:70:26:f5:cf:72:5c:
                    b5:9a:c5:1c:17:f6:66:50:3e:4f:e5:53:e1:49:6d:
                    5b:32:f0:66:84:75:5d:af:b2:73:61:75:57:20:86:
                    6d:c8:ae:7d:42:bc:e0:3d:23:84:7f:42:33:a4:e9:
                    ac:9f:02:95:6c:0c:d6:58:4e:40:80:eb:bd:d3:a7:
                    3c:98:1d:48:0c:0c:d7:52:de:82:e0:f1:c1:bc:f4:
                    39:ef:d1:87:44:05:db:ac:48:0d:2c:a1:fd:ee:ee:
                    b6:a8:53:93:5c:63:3f:00:c6:e3:6b:45:f9:45:69:
                    e8:2f:9e:55:7f:ff:18:a0:f2:3d:85:c5:5c:32:48:
                    d0:86:cc:b1:3c:5b:42:40:e0:e6:b1:b5:9c:7c:57:
                    1e:09:2a:56:6c:01:75:83:1d:28:9e:fb:74:ff:8b:
                    ee:ea:7f:e8:52:d5:6d:6c:7f:5e:9b:80:6f:16:86:
                    47:d1:17:2e:1f:71:7b:90:b9:c7:65:f5:5a:c7:4b:
                    e1:78:3e:2b:a5:bc:94:d1:b7:bd:40:0f:e7:51:a2:
                    28:81:4a:40:1b:e2:b3:c2:db:16:8d:38:e9:a2:6a:
                    c5:3b:fd:d7:9a:e1:cf:78:a5:d4:45:1f:b9:0f:97:
                    ef:04:37:c5:31:73:37:0b:7d:5d:82:6c:6d:cf:d9:
                    c3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2D:C8:BE:78:CB:99:C9:83:5B:60:98:EC:8D:5E:6E:76:74:4E:34
            X509v3 Authority Key Identifier:
                keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:7b:3c:05:32:4e:04:cf:fa:68:cb:f7:ac:d6:c3:7c:9b:9e:
         79:4f:12:61:6c:1f:08:3c:e4:c6:ff:6c:b9:91:e6:7d:c4:97:
         2e:36:42:e6:a3:8f:86:c9:49:75:0e:d9:4d:50:8b:e4:26:57:
         6c:7f:95:a6:2f:9e:34:f9:48:3a:84:74:ec:0f:5f:5e:cb:5f:
         17:8a:c7:b9:ca:7b:eb:87:dc:b0:3a:f3:9d:1f:de:69:f7:4d:
         09:c1:e2:85:76:89:38:bc:0a:2c:95:f4:92:60:ac:8c:03:23:
         84:a9:66:ab:9d:42:54:fa:dd:fc:79:ec:9c:72:4c:5c:ff:95:
         4a:8c:95:19:e4:87:ce:48:52:52:ed:94:c5:07:c9:66:de:80:
         56:ee:f8:63:ca:51:04:55:30:69:a4:1f:ce:fb:a8:57:d0:bc:
         e2:cb:c0:11:4f:4e:29:04:b4:a7:95:b8:1c:49:6c:6d:4b:e9:
         a3:8e:a6:e2:e2:c6:63:9e:6d:36:e1:3c:d3:f2:d9:95:a8:0e:
         0c:87:b9:73:3a:d4:fc:27:4b:76:ce:78:d2:7c:b3:9a:e1:dc:
         d4:a5:fa:fd:19:33:84:f4:87:90:f6:87:4b:f1:fc:91:77:27:
         61:b4:00:aa:7d:6c:a3:28:fe:65:c9:bf:42:d4:d8:cd:10:b9:
         a0:25:e4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:03:15 2025 by rpki-client