Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
File:                     MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft (raw, json)
Hash identifier:          NSzBSo3NjuPovAV6DbjhEhRNRCftTMrgIQNIxTAnXxE=
Subject key identifier:   2A:58:32:D2:5C:41:48:F8:9D:CA:BC:D3:3D:06:08:A4:59:2C:2E:31
Authority key identifier: 32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
Certificate issuer:       /CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Certificate serial:       0196CDCF98FFB6162F7B5D83B3AE0659D04F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
Manifest number:          0ED3
Signing time:             Wed 14 May 2025 08:00:56 +0000
Manifest this update:     Wed 14 May 2025 08:00:56 +0000
Manifest next update:     Thu 15 May 2025 08:00:56 +0000
Files and hashes:         1: 8FzhGMtZv2x-9zLN2UYHeQV341o.roa (hash: qGnveFjiOnO4NOM7gilbdoFw5wFNnGKNy0BPR46F8X8=)
                          2: A454pJNoUsORGbO3OAfK7YV_Whc.roa (hash: ktLhYNOBSpXYd1+zR/ovh2Wfy7oD07XxrxHk2YHvGTs=)
                          3: MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl (hash: GqqLDcTu5PsWCIj4D+Wn8LaZWXnqamkS7nPSQR4vBP8=)
                          4: VKJdOQxl7p8p7x4aN4Wby4zX0pY.roa (hash: yezqvXwILM44YJ3tHBGsCwM+mCK4UNXyobV3FDKf4iQ=)
                          5: eDgDXUFrSK7xUZkPtBuSB2bzf-g.roa (hash: EmMIdVFxxDw1T5QOtxoH7PieLIsGiM73XYNo7gIlAMg=)
                          6: egnrXyyNbGvpg6aIGoEfRznijCU.roa (hash: 4f5nrivsxBbMxXIQjQ1VQo/t3u3N6GzzpzWYXL7wFf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cd:cf:98:ff:b6:16:2f:7b:5d:83:b3:ae:06:59:d0:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
        Validity
            Not Before: May 14 08:00:56 2025 GMT
            Not After : May 15 08:00:56 2025 GMT
        Subject: CN=2a5832d25c4148f89dcabcd33d0608a4592c2e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b5:f0:84:f3:18:37:17:f2:aa:eb:62:93:9e:
                    f4:4a:fe:e4:41:55:d0:c8:75:01:66:c5:f8:7b:17:
                    46:0a:a5:37:97:e2:4f:bf:af:12:e5:35:ee:16:ef:
                    e8:e8:f3:e4:dc:6f:28:b6:b1:e4:27:75:65:ac:b2:
                    d5:e7:e3:92:8d:cc:c0:85:e2:4c:9b:a2:46:06:46:
                    18:dd:b8:69:7b:b3:48:6d:48:ff:c6:9c:ca:0b:91:
                    ed:b1:6a:d9:3d:c2:90:54:97:cb:e5:1f:52:a4:fa:
                    1b:99:c0:10:4b:3a:66:87:b5:4f:d3:57:de:8e:bc:
                    30:4d:6c:75:58:ae:ce:d7:0b:bc:3d:50:64:65:17:
                    e2:a3:ff:26:99:ce:b8:85:cd:b5:0d:2f:75:5b:84:
                    4b:d0:99:b6:d6:66:4c:b9:9e:e7:9b:32:57:92:e8:
                    01:45:e6:4f:2f:ca:fc:b7:3d:5c:16:39:28:61:58:
                    b7:3e:9c:41:83:37:ad:f3:ab:8c:bc:ae:51:b0:4f:
                    9b:f9:1e:23:6e:e6:a7:9c:f4:62:e3:cb:97:db:ee:
                    5b:3b:8e:45:fe:6c:c5:ac:ee:ca:ac:ee:12:e3:5f:
                    e8:77:7c:3b:6b:54:1e:d3:bf:5a:76:5d:17:84:2a:
                    b1:c5:a0:a5:94:17:e0:07:74:98:9f:c8:f8:b8:90:
                    80:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:58:32:D2:5C:41:48:F8:9D:CA:BC:D3:3D:06:08:A4:59:2C:2E:31
            X509v3 Authority Key Identifier:
                keyid:32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:4f:f8:fe:44:07:90:1b:4c:86:09:02:69:5e:d4:c9:f8:fe:
         d9:20:c0:1a:1b:ba:e3:68:b6:09:1f:58:2f:87:f9:7f:68:d8:
         20:2d:ad:8d:d6:5d:63:7c:ad:00:b9:80:e9:cd:c9:ff:fb:6c:
         36:dd:fb:e5:05:7e:18:09:de:42:41:62:d3:8c:f5:e5:4f:5b:
         2d:f3:c9:1a:cc:a8:2e:d7:dd:89:3c:b5:b9:1e:00:ea:64:59:
         31:ce:8e:fc:8a:30:74:a0:1a:3e:0d:da:0e:8c:3c:a0:26:4c:
         28:6a:2b:51:c7:f1:97:99:eb:b8:4d:65:ce:26:b1:a6:d3:37:
         2b:29:b3:22:73:7d:72:9e:6e:a8:8f:58:39:e7:b4:5d:dd:23:
         e6:fc:ea:6d:18:2b:5d:85:4a:27:01:9d:41:73:e5:72:c6:bb:
         45:36:c8:a5:68:fd:27:bb:1c:33:93:0e:bb:73:c3:ca:f1:e0:
         d2:78:09:e2:41:d1:79:f0:e0:a0:5e:f3:df:fb:c3:37:ee:52:
         01:f2:69:8e:ea:94:af:28:61:f1:1e:f5:22:f6:5a:45:9e:fe:
         89:12:54:da:5c:0c:13:5a:32:a8:3f:95:b8:db:fa:ac:c4:6d:
         14:ff:86:7e:e6:93:20:38:3f:82:bb:1f:4f:fc:f6:30:08:82:
         fb:96:6e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:14:17 2025 by rpki-client