Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
File:                     AK_2tO_-fDY-8gD28-WIi5FbpoE.mft (raw, json)
Hash identifier:          g5CyMKc1+DqI/1ezqzjC1RbYOmFr5LansDziDXdixXI=
Subject key identifier:   DD:31:7E:69:17:AF:D8:54:C2:7B:FA:A1:4C:1B:15:65:64:07:B9:53
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Certificate issuer:       /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial:       0196CE73E90F747C4869CD4AA5B2E97E4D0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
Manifest number:          105D
Signing time:             Wed 14 May 2025 11:00:24 +0000
Manifest this update:     Wed 14 May 2025 11:00:24 +0000
Manifest next update:     Thu 15 May 2025 11:00:24 +0000
Files and hashes:         1: 1qEPEFv1rtnBwjLrj05KhcsiGsw.roa (hash: efBys1jy+DGmejYCRhYEDwHiZZBi2kJ2HO+RtvkHBG0=)
                          2: AK_2tO_-fDY-8gD28-WIi5FbpoE.crl (hash: MZ300CVZ4eK3vBzuR6hvlg9+q0/pWe7gv5fQlFmt4wE=)
                          3: KSQbuvMpaNtmYtn-yiQgu6gs4Xg.roa (hash: rY+o5Ow6fjFdTk2as4zdZu/IZVXbQNeVsHdG3L6c1Us=)
                          4: ZOyHJ4Yqv0XVd9AATFKr91oKlKQ.roa (hash: UP88f3uzMOFhKaWDsZtlJomj/zgPQgChtV7gCg0+LOM=)
                          5: _K1pDCbBWOfBSTY7iYXwJMRFvTE.roa (hash: CNOL6bgt/D7RlzA1qOVvWQYBYhtShOyl6CF9OeXYBvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ce:73:e9:0f:74:7c:48:69:cd:4a:a5:b2:e9:7e:4d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
        Validity
            Not Before: May 14 11:00:24 2025 GMT
            Not After : May 15 11:00:24 2025 GMT
        Subject: CN=dd317e6917afd854c27bfaa14c1b15656407b953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b8:b3:62:8c:d5:31:3b:c4:0e:b6:82:41:78:
                    95:15:39:a4:c7:ca:11:1c:5b:34:d6:90:83:5b:6f:
                    a1:93:4f:33:5e:df:f8:07:ef:84:50:69:6d:b5:43:
                    a9:bc:dd:73:85:21:db:5f:39:72:cf:d9:86:ce:1b:
                    11:ef:eb:0a:ad:09:df:fc:ff:56:61:d9:66:01:3a:
                    99:a8:54:db:fe:f5:7a:a1:41:cb:9e:05:f9:6d:69:
                    8a:32:d7:f9:a7:3b:92:e0:1f:dd:45:73:b3:93:ff:
                    93:6e:d3:8d:9e:31:71:1f:24:53:53:a8:78:f0:9a:
                    c8:6d:2e:8d:9e:91:83:f6:6e:bf:59:d9:1d:18:78:
                    ef:53:f6:e9:35:b6:27:54:38:36:10:a8:99:bd:b5:
                    6d:17:09:e4:f4:bf:a0:df:ff:cc:a9:42:ea:0c:47:
                    41:f5:13:41:44:4c:41:55:8a:05:a5:05:52:67:9f:
                    5c:cd:2a:1c:3d:fa:09:9b:b2:76:b4:73:4c:8d:93:
                    70:88:0c:98:92:5c:04:06:b2:8e:af:d1:d8:80:80:
                    3e:4d:76:e3:3f:73:22:4a:16:00:44:c6:ed:92:9a:
                    12:94:ca:23:f7:ff:77:bf:e9:32:c0:59:88:79:32:
                    13:e6:bc:74:18:77:bd:eb:c9:2d:87:fc:fe:78:10:
                    0f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:31:7E:69:17:AF:D8:54:C2:7B:FA:A1:4C:1B:15:65:64:07:B9:53
            X509v3 Authority Key Identifier:
                keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:07:05:1a:c8:d3:d8:67:df:52:56:33:7a:75:33:34:8e:a7:
         6e:27:eb:d6:dd:29:7d:e5:3f:b2:86:99:d2:d5:92:ed:7d:ab:
         69:e9:6c:60:c2:b8:d0:46:a6:4c:cb:bd:5b:bb:61:6d:39:a7:
         51:f1:50:7b:1c:b8:fb:6d:6a:94:60:26:d0:21:58:f9:29:4a:
         07:99:5b:55:cd:11:e4:df:73:df:9e:d5:83:2c:dd:bd:c1:27:
         1c:26:2f:cd:f9:9e:be:12:29:45:ef:cf:55:59:d9:fb:ff:69:
         cc:fd:a3:3e:b2:1b:ea:ff:be:74:73:df:2a:99:95:1d:6d:01:
         83:a8:df:0d:b7:c0:62:17:96:04:58:31:36:48:40:88:1e:e7:
         4d:47:99:4d:f4:20:0a:0d:95:88:c5:a2:66:a4:59:c4:f8:88:
         8c:a4:49:50:ce:f3:ef:10:de:18:c9:55:46:87:03:b0:c4:5a:
         de:ce:b7:15:2d:66:eb:44:67:39:76:0d:94:75:96:02:6a:38:
         1e:95:2d:f0:95:10:4e:8f:1b:68:c7:d1:95:ec:51:13:24:07:
         e9:81:22:29:22:c0:a0:89:ea:97:be:0b:86:4b:5d:5c:6f:1e:
         96:5e:41:1d:30:d9:c3:a1:34:0a:0d:d6:ad:ea:b4:11:9f:a2:
         08:5b:d5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:25:58 2025 by rpki-client