Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
File:                     N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft (raw, json)
Hash identifier:          aA9rBr8hXL5vK8jk3S4A+GU/Fq9z/w/sYgaxqml6aP8=
Subject key identifier:   E5:87:89:98:8C:5B:12:1B:C6:41:13:38:BE:B5:31:A5:4E:B8:AA:26
Authority key identifier: 37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
Certificate issuer:       /CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Certificate serial:       0196D06231552A374A1B560E2010676C8611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
Manifest number:          0ED3
Signing time:             Wed 14 May 2025 20:00:18 +0000
Manifest this update:     Wed 14 May 2025 20:00:18 +0000
Manifest next update:     Thu 15 May 2025 20:00:18 +0000
Files and hashes:         1: 2M9xuwu5AndhxSfR2ZXlPgIY5_M.roa (hash: 0EPkYtcWzG6eUp2dhcekU5xNDT1dEtWLrLrA3RfkTu0=)
                          2: N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl (hash: eJI5YPuL914DPusdBLf/VueYciW9Y8f9YZqx0NG/ISw=)
                          3: SS113d4UMKkPVDPWmlqWck-x24E.roa (hash: wgyXZKEbfAwwDp/GZ/OmNWIPZihNhq5vxfdpz8GgLCA=)
                          4: tce_jftJ9E_4KJ_uPWaE-OosXF4.roa (hash: wJZcfb6ZEWBCJ/uKNt0y+u5y+6aoB2gLD29sHouunZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 14:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d0:62:31:55:2a:37:4a:1b:56:0e:20:10:67:6c:86:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
        Validity
            Not Before: May 14 20:00:18 2025 GMT
            Not After : May 15 20:00:18 2025 GMT
        Subject: CN=e58789988c5b121bc6411338beb531a54eb8aa26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:34:88:4f:3b:d6:d0:b2:f9:18:99:a3:c8:eb:
                    94:37:10:66:50:a8:be:8c:82:46:f8:2d:7f:44:eb:
                    62:51:cc:11:ad:1d:fa:3d:90:f7:76:8f:ef:e4:f5:
                    33:d0:55:f6:75:11:3d:6f:ad:c1:50:02:f0:9d:5a:
                    cb:66:13:ec:54:bb:cc:ce:2d:f2:93:0e:94:d7:39:
                    cd:b9:c7:d2:ce:f3:a0:5d:a3:db:6c:f4:d2:bb:5e:
                    43:fc:30:c7:71:a2:88:45:30:d1:9f:1f:59:03:e9:
                    be:8d:24:48:dd:29:9d:98:dc:70:5c:d9:21:09:b3:
                    88:ce:25:cc:5d:16:60:f0:d6:57:51:b4:5b:ec:59:
                    bf:cc:81:4b:8b:c5:98:39:18:6d:65:34:d0:38:c9:
                    92:d5:39:eb:8f:c0:f9:69:7d:7b:86:e0:c2:97:ba:
                    42:62:8c:15:d7:73:32:ef:d4:56:ac:03:ea:5d:14:
                    d8:b2:02:29:d4:b2:a1:94:8c:d9:54:ed:43:05:16:
                    5b:e3:2a:0f:38:eb:7c:38:49:10:49:de:54:65:e7:
                    40:bc:10:e7:4f:99:1e:14:3b:11:e9:a2:42:aa:0f:
                    d0:4e:81:1d:31:94:dd:40:0b:26:42:bb:95:c6:95:
                    64:b5:6d:ca:16:c1:bf:33:b7:53:ef:b3:57:55:6d:
                    d0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:87:89:98:8C:5B:12:1B:C6:41:13:38:BE:B5:31:A5:4E:B8:AA:26
            X509v3 Authority Key Identifier:
                keyid:37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b5:57:cc:8e:37:7b:25:92:2a:93:1a:c2:cb:c3:35:2c:6b:
         d3:09:dc:7e:75:26:db:1b:95:36:81:d0:af:09:a4:30:1d:90:
         67:4a:c3:9e:6f:85:fa:f2:63:2f:7b:62:85:0f:a9:a5:02:eb:
         4f:1c:83:9b:7e:0e:b9:96:04:97:27:f0:fb:60:46:76:c7:f1:
         a4:91:a3:a2:3e:68:3c:e7:e8:8b:be:a1:57:52:f6:35:e8:00:
         3c:a4:1b:56:c4:0d:18:1b:4e:1b:3b:24:80:b6:40:29:10:97:
         74:89:18:23:77:f5:3c:3d:27:ea:2a:d8:c9:e6:f2:21:8c:86:
         f0:39:bf:b3:8d:81:7f:76:66:db:10:df:f0:92:26:50:7f:99:
         c2:f0:90:7f:ae:e4:53:ae:e6:3a:84:c6:a1:72:f6:eb:04:e7:
         32:0a:a4:16:58:52:4f:e0:d1:c3:39:f6:96:66:15:63:ad:c9:
         e2:2b:22:db:be:c2:00:d0:f6:0b:5d:60:c2:f7:08:68:77:07:
         83:a0:12:af:b2:0b:f5:d9:5d:ae:2a:dc:c9:23:5b:1c:dd:08:
         49:9b:91:0d:fe:0a:42:8b:af:86:cd:fd:fd:ef:dd:ca:9a:cf:
         00:46:a3:b0:90:6c:f5:05:e8:c7:6e:62:0a:e7:d2:59:b7:d9:
         74:f5:2b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 22:34:30 2025 by rpki-client