Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
File:                     nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json)
Hash identifier:          MPA2GKoJoPJ2LMyTvLZttrSXcvopBeb25RyJqtrvmqw=
Subject key identifier:   F6:17:4D:B0:A2:E5:74:C4:AB:0B:92:13:67:E6:0B:0C:98:B1:6A:E6
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Certificate issuer:       /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial:       0196AF575022F3D59287A3D82BD2A7C6F513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
Manifest number:          0DED
Signing time:             Thu 08 May 2025 10:00:56 +0000
Manifest this update:     Thu 08 May 2025 10:00:56 +0000
Manifest next update:     Fri 09 May 2025 10:00:56 +0000
Files and hashes:         1: En56MrvrAc2ZjznO-sVnuE-LhdM.roa (hash: HqjVdQwx3YyRZrFCjkQ3kR6h3z6cMZaI4IEZAgx0eDw=)
                          2: jtPk_x887O-4U6cQtXfHslM-ta4.roa (hash: Hkg+W7TgpjHAuQZwvX5dY53K7XPP9snW8AKHjQpDkKY=)
                          3: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: DaH04AtSyS0TwfT5R5h7XNhRNnaT4M+y+VxkfBjZU6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 10:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:af:57:50:22:f3:d5:92:87:a3:d8:2b:d2:a7:c6:f5:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
        Validity
            Not Before: May  8 10:00:56 2025 GMT
            Not After : May  9 10:00:56 2025 GMT
        Subject: CN=f6174db0a2e574c4ab0b921367e60b0c98b16ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c5:70:8b:d7:5b:0d:19:bd:59:8e:87:49:2f:
                    9b:34:c2:6d:74:a4:29:f3:e4:b1:70:d7:ba:4a:51:
                    ee:f3:fd:c7:71:d9:62:eb:ee:f4:be:38:55:3b:04:
                    b3:9d:2e:db:77:2b:7b:a8:c2:ac:d5:b7:84:9b:c9:
                    f1:10:f4:af:a4:6d:e2:05:b3:8e:6b:7c:5f:28:f8:
                    9b:a9:4a:48:1c:4d:c5:98:e1:f9:96:33:dd:96:df:
                    8c:f5:11:58:ca:36:e8:23:52:0f:c2:7f:79:f0:56:
                    55:45:18:24:de:0c:8f:f7:13:87:a5:68:58:5c:4f:
                    e6:d4:51:13:9c:5c:0a:13:b3:6b:21:0f:6a:08:1b:
                    e8:5f:12:ab:c9:13:d9:64:59:5d:e4:7e:3c:7f:12:
                    c4:dc:24:89:c7:90:72:df:39:be:7d:af:bf:da:5d:
                    3c:7f:92:d5:19:41:03:49:a3:e7:8f:de:aa:55:4c:
                    cf:38:32:9a:78:54:e6:92:45:8c:ab:27:6e:29:35:
                    58:cd:fb:55:88:48:92:df:22:0e:b4:40:d2:8d:81:
                    a9:7e:9f:4d:b7:6f:e1:02:aa:2e:72:5e:b6:87:46:
                    06:25:9f:66:65:35:aa:ec:84:2e:97:cd:9c:c2:fb:
                    be:f6:60:55:ba:18:cb:a2:a8:33:7f:b8:72:19:f8:
                    0a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:17:4D:B0:A2:E5:74:C4:AB:0B:92:13:67:E6:0B:0C:98:B1:6A:E6
            X509v3 Authority Key Identifier:
                keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:fd:b7:68:70:c7:45:16:a2:53:21:0b:bf:02:65:0b:68:25:
         1f:7e:80:51:4b:b0:f7:65:60:cd:5b:98:58:2b:c2:d2:1d:a0:
         50:c2:8a:27:c0:9c:45:2d:40:7f:ca:9c:b7:31:cd:7e:8a:a6:
         25:b8:5e:dd:ea:2a:14:53:4d:20:a2:1d:a1:01:78:f7:e2:01:
         bf:1f:58:75:f1:12:87:18:61:38:36:77:d8:82:91:07:91:38:
         32:ef:e8:95:f1:93:d4:25:5b:65:61:c0:ca:27:32:4b:48:9c:
         3e:a9:44:8a:f5:49:69:b4:56:43:11:1b:50:b3:4d:95:97:8a:
         fc:75:d0:dc:a7:83:e0:a3:63:34:8c:14:49:e6:ca:dc:35:8f:
         52:24:48:68:09:54:4f:21:99:f6:cc:43:6a:f8:eb:0e:d4:d0:
         66:44:41:87:d5:f8:f6:61:25:5d:6e:15:97:30:8d:ce:45:26:
         87:9c:20:90:96:d8:fa:4d:b0:fc:17:c9:65:08:b8:bd:23:d6:
         6d:4a:3f:64:41:1e:d5:81:c1:cf:22:fe:3c:d4:e6:17:02:23:
         15:4d:95:c5:19:b6:9d:6c:47:bc:b7:c7:28:84:72:f3:30:58:
         cf:53:d0:ba:e0:68:5e:6d:e7:3f:62:49:fc:68:6e:87:bf:fa:
         0c:82:8b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:01:01 2025 by rpki-client