Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
File:                     0mpECeqR9QbWM4ccbDVUDUYDN9E.mft (raw, json)
Hash identifier:          zzp47tXrBtUexAbydav7Itf++NVxgSVom/NkXKDiXg0=
Subject key identifier:   FA:B0:51:45:8E:70:34:8B:BA:78:D7:BD:A2:40:29:2A:29:54:AB:B7
Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
Certificate issuer:       /CN=d26a4409ea91f506d633871c6c35540d460337d1
Certificate serial:       0196AE0D3F9FD5802FE43F223204D989DB37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
Manifest number:          0CF8
Signing time:             Thu 08 May 2025 04:00:25 +0000
Manifest this update:     Thu 08 May 2025 04:00:25 +0000
Manifest next update:     Fri 09 May 2025 04:00:25 +0000
Files and hashes:         1: 0mpECeqR9QbWM4ccbDVUDUYDN9E.crl (hash: agAVHVY4BkXakbMe0WeMGajMpz3GsfmzX475F6nAd1g=)
                          2: 3KNWi4PLke2pc0vhx5QOX6ZuOCA.roa (hash: tpM6u4qaCB/SIK4Ynv1MNnqK+07Rhub80n1mFXvkjwo=)
                          3: 8jp9A2yp5Ctl0aMaJZj7S5h9uCE.roa (hash: WHkL8yvON59diJqVD7F/Lsgn1viIvZplizI2VcPWz8c=)
                          4: o0naTY2lU_XCKHCOD4HRfjiAS20.roa (hash: ctUbEkyNdhuq/LnXlhlDp6xaZ2CRNDEI5dgg4y7saV4=)
                          5: q2PhtlxaWPMFB5GcAwVXc_wKZRg.roa (hash: 7exTPbh4OHsbAofG4+Te19GLuWs10iEQg0/XWCeBGJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:0d:3f:9f:d5:80:2f:e4:3f:22:32:04:d9:89:db:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1
        Validity
            Not Before: May  8 04:00:25 2025 GMT
            Not After : May  9 04:00:25 2025 GMT
        Subject: CN=fab051458e70348bba78d7bda240292a2954abb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9d:ed:7d:32:0f:a2:08:de:34:ce:d5:f9:9f:
                    f8:e7:a5:ee:bf:c6:ec:4d:26:3e:cb:f0:0c:9c:31:
                    49:98:8b:be:e2:a9:42:64:ea:f6:8a:bc:fc:e3:03:
                    30:09:15:3e:32:ca:0f:df:1b:99:11:eb:7f:41:47:
                    4e:5b:da:b8:63:43:71:02:6e:c6:6b:5c:87:5d:d4:
                    26:50:71:48:04:2d:61:9d:08:01:40:35:3f:51:31:
                    a0:c2:9b:8f:a9:52:e4:37:0e:03:14:99:41:a3:6e:
                    07:d4:f7:9b:fd:20:eb:8b:7e:b5:3a:d1:a9:21:9e:
                    6b:c6:be:04:af:d2:0d:7f:3f:5a:91:17:10:76:bb:
                    96:15:1f:3b:d1:1d:44:6a:2a:67:ff:3d:c1:75:16:
                    95:48:55:ca:d0:9d:5a:3d:e5:28:94:b9:e2:95:b1:
                    e7:2a:51:68:fa:d7:0e:c3:5d:d8:16:bb:27:84:13:
                    37:4c:a7:5c:20:1f:85:67:70:91:86:82:d1:de:2d:
                    d2:52:dc:8f:82:08:4b:14:b6:db:d2:f5:23:29:38:
                    f7:02:4c:86:0a:77:af:2f:d4:20:28:06:47:7e:11:
                    62:a6:b7:d5:86:20:3e:7e:5b:4e:94:24:18:71:62:
                    3d:1c:5d:09:d8:3a:04:86:7e:c8:f5:09:ec:ef:5e:
                    32:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B0:51:45:8E:70:34:8B:BA:78:D7:BD:A2:40:29:2A:29:54:AB:B7
            X509v3 Authority Key Identifier:
                keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:9f:c7:54:81:c4:db:70:7d:1c:78:d1:ca:17:9b:82:93:92:
         aa:2a:ed:43:ae:ea:dc:e7:10:38:30:10:c0:00:e1:00:c9:db:
         c8:5c:38:1c:0d:56:d3:36:3f:fc:a9:57:c3:cb:de:24:fc:36:
         70:8e:8f:a4:f4:68:8d:8b:51:d9:51:78:ae:01:80:02:62:12:
         07:cd:a3:0b:81:dc:f4:69:63:4f:55:c7:a5:0e:ea:84:db:91:
         dd:12:d9:3c:c7:7e:fb:93:04:f3:41:74:97:8d:c1:e9:78:e4:
         d6:ca:77:85:e1:58:5b:81:f7:a4:78:e3:e4:25:6f:62:cf:7b:
         ac:be:58:74:34:c8:41:e3:67:26:87:88:b1:8c:a8:65:1a:9d:
         10:82:e2:f4:eb:95:a0:ca:df:2b:df:b4:8f:bc:95:14:e2:6f:
         20:1c:50:56:1a:28:b9:c0:75:5f:11:51:4c:a2:3c:40:3b:c0:
         b1:92:8e:a3:87:f2:47:44:fd:d5:e9:2f:a6:f8:38:51:f6:7c:
         1e:28:50:18:21:1a:b8:e6:e7:c8:8a:61:0d:70:36:5f:43:4b:
         f2:bd:b8:6f:0c:f4:94:06:eb:06:0e:c3:f3:ec:cd:d8:9c:ed:
         c6:9a:45:0e:bd:54:e3:ff:05:73:4e:d2:e7:0d:37:b7:a7:2a:
         e2:c2:c2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:58:45 2025 by rpki-client