Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
File:                     nAN1ranF4BAN22M7Kht0fhnC7Fs.mft (raw, json)
Hash identifier:          lpZUj7vZrL6YzlTkU9f2xFqxSthLNsdxJlWpBdP86Jc=
Subject key identifier:   08:F4:9D:FB:42:71:79:D2:6F:39:18:2B:08:C1:34:18:E4:E2:83:40
Authority key identifier: 9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
Certificate issuer:       /CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Certificate serial:       01969F086CD308AC6226BCCDCA0C4CE5FBB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
Manifest number:          03E9
Signing time:             Mon 05 May 2025 06:00:51 +0000
Manifest this update:     Mon 05 May 2025 06:00:51 +0000
Manifest next update:     Tue 06 May 2025 06:00:51 +0000
Files and hashes:         1: MRDtmP98O0WNgH87Ax8nCcdZuLw.roa (hash: HrqGeHE20jy2rWDbz9uI3JnGeaBNl8AfA/5tH0i9z5o=)
                          2: nAN1ranF4BAN22M7Kht0fhnC7Fs.crl (hash: DbrPTVYzo3RsxoBBaVKAJ3tJAmgayqH7efQD7oimIDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:08:6c:d3:08:ac:62:26:bc:cd:ca:0c:4c:e5:fb:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
        Validity
            Not Before: May  5 06:00:51 2025 GMT
            Not After : May  6 06:00:51 2025 GMT
        Subject: CN=08f49dfb427179d26f39182b08c13418e4e28340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d8:1a:cc:a1:35:75:29:ff:c1:63:f9:2b:e9:
                    cd:0f:6a:6a:23:6f:c2:da:ea:fb:31:78:75:34:44:
                    c3:ec:dd:7a:c0:0d:89:b0:f8:b3:84:13:0e:c7:1c:
                    db:9c:e6:fa:f9:d6:cd:1f:1d:93:db:7e:b4:a2:00:
                    75:47:19:fd:e5:af:20:e7:5a:a4:bb:cd:11:76:e1:
                    5e:ef:9c:8e:00:92:ea:4a:97:ba:32:1f:2c:6c:fa:
                    a7:82:b6:0d:d4:b7:c8:b3:94:27:b7:a1:2c:bd:fd:
                    bf:c7:8f:97:a3:68:72:45:d2:03:c7:ef:71:09:87:
                    32:6a:ac:f0:6b:39:f6:69:66:e5:71:7d:79:8d:ad:
                    25:96:70:7b:5e:b8:92:41:c5:36:59:ab:48:aa:44:
                    35:44:9f:42:6c:f4:49:94:af:8a:c0:81:25:1c:4f:
                    9b:07:fc:4e:1a:03:0a:d5:68:da:30:f4:45:9f:3c:
                    94:1e:4c:0a:9e:de:10:8c:e3:78:9e:76:5f:60:8e:
                    5f:40:50:63:52:78:bd:fa:b4:8e:23:c2:f1:a2:81:
                    0b:b8:3b:ab:77:00:a1:b7:2e:16:f0:40:1a:96:3f:
                    84:4e:35:43:c1:6d:41:bb:b5:8f:cf:bf:30:18:ad:
                    a4:db:ee:17:61:5e:fa:ee:5b:40:86:eb:59:a4:8b:
                    72:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F4:9D:FB:42:71:79:D2:6F:39:18:2B:08:C1:34:18:E4:E2:83:40
            X509v3 Authority Key Identifier:
                keyid:9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ce:69:c7:fb:a0:29:d1:78:8e:a9:76:3b:f4:d3:eb:06:1a:
         85:30:62:58:6c:75:51:2f:cf:9b:df:9a:8d:bd:87:c3:3e:6d:
         8c:35:bd:f8:46:82:b4:ab:f3:bd:2b:0b:9f:21:ba:04:8d:0a:
         cb:1a:94:d8:30:2f:82:15:ff:18:08:95:d5:c2:7f:c9:be:ad:
         ee:5f:b6:1d:fe:58:38:3c:0d:f8:a2:9a:4a:54:e3:e9:25:bd:
         8a:e8:37:c4:43:99:a5:43:a1:67:d3:87:b9:1f:82:4a:df:59:
         f0:82:d8:45:ad:85:47:6d:f3:23:fe:d3:8b:d7:c7:4f:9f:b3:
         b1:2c:23:2e:95:af:d9:ce:d8:22:b4:1e:c5:8b:1d:c2:b6:13:
         e7:ee:25:2a:bf:67:15:79:08:3f:35:10:72:55:ba:33:49:c4:
         f3:62:10:7c:c0:e7:cf:b1:97:20:ca:3e:70:56:c5:70:9f:77:
         32:b2:d7:a8:57:5e:f8:68:9a:19:dd:b2:c4:37:29:97:6d:35:
         53:11:2f:aa:d2:bf:d2:c9:dd:65:0a:06:da:10:0c:c0:c2:3e:
         fd:40:72:02:17:c8:51:33:d9:8b:47:e1:48:b2:b2:c7:fb:8e:
         63:d1:57:99:51:9c:02:03:8e:1e:25:cb:19:94:d2:d0:6b:05:
         34:70:19:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:15:29 2025 by rpki-client