Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
File:                     96i3CqEAabVRWpyzwUm4hbehKDQ.mft (raw, json)
Hash identifier:          u0s7MVqHuTnFgVJNwwedN417n1LDlI/pglyUIoLtjZ4=
Subject key identifier:   4D:31:3A:B1:FB:55:7B:5C:55:F3:A9:4D:5D:41:71:6D:F8:0D:28:67
Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
Certificate issuer:       /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Certificate serial:       0196C6F1783D0804116154CC2754657423EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
Manifest number:          1138
Signing time:             Tue 13 May 2025 00:00:35 +0000
Manifest this update:     Tue 13 May 2025 00:00:35 +0000
Manifest next update:     Wed 14 May 2025 00:00:35 +0000
Files and hashes:         1: 3hd2cWOKo1TQkV2Yjc58aajJp40.roa (hash: 74N6tK8Ekv8MCL01lxtmIlPxSXElnTOh23zMPv2z/H0=)
                          2: 96i3CqEAabVRWpyzwUm4hbehKDQ.crl (hash: 8H4bjzT3AFcVzmpQ0hHJpjgQf7m4I3ugjW+V6uEfl08=)
                          3: NxP1yZRJkCqknWUlNsClQNUVfUo.roa (hash: u6b4+QpHV+iYUkKSAV1ntHvZ0Uq8id30dDjn4p6jm1c=)
                          4: rpMKo0baZdPqRPqlkYdACo6a3P0.roa (hash: HTnTb+0/EFAi/eXd0bEmB23wAYwHBXAEwiEqoddfA3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:f1:78:3d:08:04:11:61:54:cc:27:54:65:74:23:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
        Validity
            Not Before: May 13 00:00:35 2025 GMT
            Not After : May 14 00:00:35 2025 GMT
        Subject: CN=4d313ab1fb557b5c55f3a94d5d41716df80d2867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:57:d6:c0:85:1a:09:16:c9:ff:a1:bf:a0:db:
                    9e:12:eb:ab:c9:31:ba:00:3f:59:b4:8e:53:75:29:
                    b7:7c:26:7d:9b:4f:e9:98:b8:16:99:95:c4:80:c2:
                    56:ee:53:9f:6c:58:7a:8e:51:ae:a3:88:f9:18:73:
                    a3:91:f6:d3:12:6f:7f:e2:25:6b:38:e2:9f:f2:c6:
                    f0:5c:99:40:e6:b5:41:f4:0a:b8:0e:18:f9:e6:32:
                    e3:ae:40:cc:a8:d2:97:f0:6d:f1:4d:ed:43:b7:3b:
                    93:d7:b8:30:69:c0:41:95:82:61:22:f5:b9:5d:db:
                    0e:60:ed:cf:c7:5d:0a:4b:e6:18:68:d3:99:60:75:
                    3d:5d:3c:6a:87:71:8a:ce:03:d6:3f:44:f2:54:0c:
                    d9:4e:c6:b9:a8:3d:c5:b2:e1:b8:8f:56:9a:72:0b:
                    62:ac:2b:71:3d:41:ae:30:a7:f0:b5:32:90:f9:9e:
                    e7:a3:89:e5:5b:20:66:cd:7a:6c:e7:81:3d:bc:eb:
                    01:0e:6b:2d:21:6d:45:a7:9e:90:95:1e:8d:57:61:
                    ba:83:5d:25:fa:b1:34:0f:d3:f6:e0:53:04:24:c9:
                    49:3b:9c:aa:74:15:32:22:b2:43:c4:61:41:a0:d2:
                    7c:96:d1:44:70:00:87:73:7c:ed:73:c2:bf:32:a2:
                    16:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:31:3A:B1:FB:55:7B:5C:55:F3:A9:4D:5D:41:71:6D:F8:0D:28:67
            X509v3 Authority Key Identifier:
                keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:96:9d:37:0e:75:bd:73:d5:36:37:04:4e:2e:9d:3a:e9:d0:
         c4:90:d5:f2:f5:f8:0f:67:ef:db:fd:ab:9d:ce:f8:5d:2d:61:
         35:f3:b7:06:e3:24:8a:2f:22:79:c8:61:8e:62:44:ea:12:e4:
         69:36:93:9a:62:c4:84:d1:d0:83:de:34:13:b1:8c:ef:7d:dc:
         1a:b1:ea:c8:3d:b9:02:47:d8:00:bc:18:04:ea:cf:a4:f9:86:
         1a:ab:88:a4:f4:f1:23:53:b4:af:cf:4f:b5:f3:d4:48:58:d0:
         4a:8d:c7:6f:06:75:16:78:0e:02:f2:d1:8a:8f:01:22:c7:f2:
         0a:8c:ee:46:10:8b:30:1e:6c:bb:7e:c4:a9:ac:73:0f:de:5a:
         6f:fe:18:f1:cf:4d:03:3d:20:6b:df:78:3d:5d:9a:8a:2e:67:
         b3:be:6f:a7:e7:ac:b7:68:0c:9f:96:a6:a1:72:af:1d:fb:c9:
         d9:3d:cc:d4:39:2b:c9:9e:cc:a6:0e:f4:92:cf:91:51:ce:eb:
         08:bb:bf:c4:29:25:32:0e:3f:f6:15:d3:57:d0:25:5c:d9:13:
         55:e2:7f:f0:64:4d:e5:05:cd:5f:8e:29:e0:cf:25:51:7c:c8:
         58:c5:32:50:96:9f:28:07:39:25:a0:d8:42:3e:9c:5a:9d:5a:
         c2:da:f6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:18:13 2025 by rpki-client