Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft
File:                     MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft (raw, json)
Hash identifier:          ee8PDegUpKLAr9m1VGsk9iGJdUX+kSJqwMQBJzhFK4I=
Subject key identifier:   1C:A0:2C:E1:00:0B:60:08:4E:48:E7:8B:21:4B:F5:5E:1E:E4:3A:76
Authority key identifier: 32:4C:71:04:6C:54:9F:B3:C7:D4:EB:C4:CF:95:19:D0:02:E7:6D:F1
Certificate issuer:       /CN=324c71046c549fb3c7d4ebc4cf9519d002e76df1
Certificate serial:       0196D0627F011DF0F5F284AFF78A8AEEED1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft
Manifest number:          0A06
Signing time:             Wed 14 May 2025 20:00:37 +0000
Manifest this update:     Wed 14 May 2025 20:00:37 +0000
Manifest next update:     Thu 15 May 2025 20:00:37 +0000
Files and hashes:         1: 2W4Y0bQNlvS93LoW6fNHPM7BKLQ.roa (hash: I9C4k+xseXfObTJ4huNUkRHHI0jQTaqLFqDJffjcwOE=)
                          2: MkxxBGxUn7PH1OvEz5UZ0ALnbfE.crl (hash: FSsA2BmLO1IhKZz1b27VDv/5DpZrqG5NocuL8W5BiGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 17:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d0:62:7f:01:1d:f0:f5:f2:84:af:f7:8a:8a:ee:ed:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324c71046c549fb3c7d4ebc4cf9519d002e76df1
        Validity
            Not Before: May 14 20:00:37 2025 GMT
            Not After : May 15 20:00:37 2025 GMT
        Subject: CN=1ca02ce1000b60084e48e78b214bf55e1ee43a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:c5:3d:4c:25:09:c9:46:4d:88:4d:42:52:
                    64:62:5a:41:44:93:1d:65:71:64:b6:69:8a:fe:03:
                    84:c6:57:cb:0d:7a:23:e8:2b:ee:df:2a:2e:90:4a:
                    dd:78:66:7d:49:03:3d:c9:f6:f0:97:30:07:8b:3d:
                    d1:08:dd:4d:04:28:0f:9a:e5:26:24:df:fb:80:0c:
                    1c:61:1b:e0:e7:62:44:60:56:5a:cc:70:8b:a3:6c:
                    7d:6a:58:89:83:ea:4d:db:e3:fe:57:5d:7d:ca:e0:
                    a0:f8:0b:26:61:b2:df:53:eb:af:8b:54:a6:38:37:
                    ac:bf:d5:e8:e6:73:ad:df:e1:fb:99:9f:c6:1c:a9:
                    f2:3b:dc:bc:49:9a:e8:0b:7a:05:a8:a7:ae:24:5a:
                    ee:d8:39:09:22:d0:8d:e9:00:a2:02:d4:29:0e:98:
                    0f:b2:73:38:cf:c2:d6:92:17:00:d8:e5:6a:38:46:
                    df:d3:3f:70:00:1b:16:6a:6b:36:68:d0:c5:0f:67:
                    4d:e7:61:8c:50:3a:63:fb:bd:74:6e:f3:07:d0:a8:
                    88:d9:de:2b:c9:fc:16:7a:ba:73:4c:dc:49:88:b5:
                    ce:0d:38:9c:1b:66:e2:53:92:54:6c:9f:01:70:fd:
                    93:c9:e1:c1:26:f0:d3:2b:2d:10:1c:6f:2b:89:fc:
                    96:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A0:2C:E1:00:0B:60:08:4E:48:E7:8B:21:4B:F5:5E:1E:E4:3A:76
            X509v3 Authority Key Identifier:
                keyid:32:4C:71:04:6C:54:9F:B3:C7:D4:EB:C4:CF:95:19:D0:02:E7:6D:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:bb:15:dd:1f:23:ed:a5:01:fc:85:1a:f4:8b:d0:e6:e7:76:
         af:32:6b:32:b8:3f:05:68:b2:b6:63:d8:8f:07:82:9e:09:92:
         d2:4a:73:22:af:7e:1d:ea:4a:24:e8:e7:93:57:f4:61:d3:81:
         22:78:ac:b8:74:3d:e0:f2:b6:84:98:09:7c:d9:33:0d:f1:f6:
         7f:d0:64:e1:cd:06:0d:7a:9a:51:1b:22:7e:22:5b:5f:6a:e5:
         c2:dd:8d:dd:dc:fc:32:67:3f:10:93:b2:7d:b0:c9:5e:af:8a:
         6c:23:4e:f2:7c:9b:7d:fd:78:f7:08:cb:1a:c5:52:36:92:7f:
         03:39:88:42:79:a3:12:83:a0:40:87:29:6a:39:b4:a5:eb:70:
         dc:fa:b8:e3:de:72:4f:b8:7c:71:d4:16:0a:43:07:15:25:c1:
         e5:2e:24:f9:fe:29:5d:1b:d9:f2:d8:45:78:d3:3a:8b:da:7f:
         87:80:fa:bf:1c:48:c8:5d:82:c5:38:0a:15:21:ae:a2:d2:e7:
         aa:46:97:20:5e:d3:22:87:d0:2f:0f:c0:88:1a:e7:2c:ab:28:
         75:8a:0a:e2:d1:4c:89:c3:95:0d:c7:d3:86:24:68:ce:cd:da:
         b8:b7:76:c1:bb:b6:08:1f:77:a0:84:4c:a7:ee:59:2e:fd:1b:
         c8:7d:6d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:31:38 2025 by rpki-client