Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft
File:                     MOalwxNr0v3TbISgzHJb98sP6rU.mft (raw, json)
Hash identifier:          Qz0uSZs5d1CyNsEvol+iETCZqIHkrFk9cTZztaqre4Q=
Subject key identifier:   86:58:8D:31:FE:F7:2F:F1:91:55:BD:89:35:CF:A1:D3:A6:8C:BB:7F
Authority key identifier: 30:E6:A5:C3:13:6B:D2:FD:D3:6C:84:A0:CC:72:5B:F7:CB:0F:EA:B5
Certificate issuer:       /CN=30e6a5c3136bd2fdd36c84a0cc725bf7cb0feab5
Certificate serial:       0196C5711237D892C3A84F61E8C2B76B36D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft
Manifest number:          1018
Signing time:             Mon 12 May 2025 17:00:43 +0000
Manifest this update:     Mon 12 May 2025 17:00:43 +0000
Manifest next update:     Tue 13 May 2025 17:00:43 +0000
Files and hashes:         1: HqsZJgL9LBUTcewanQzxQHLDph8.roa (hash: UQ79eEyJ8LyCIFyjDtOvtd/bCzwLuuC1qKDG3mAmlzU=)
                          2: MOalwxNr0v3TbISgzHJb98sP6rU.crl (hash: Q1fx0aanXGtk1BVFBzZfNRZzcQsrYd8joDftwpsY9+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:71:12:37:d8:92:c3:a8:4f:61:e8:c2:b7:6b:36:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30e6a5c3136bd2fdd36c84a0cc725bf7cb0feab5
        Validity
            Not Before: May 12 17:00:43 2025 GMT
            Not After : May 13 17:00:43 2025 GMT
        Subject: CN=86588d31fef72ff19155bd8935cfa1d3a68cbb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:63:c5:44:5d:44:80:53:c5:2f:79:eb:63:c5:
                    b5:77:f9:11:c8:ca:c0:3e:6d:de:af:00:d6:e4:db:
                    02:6f:af:05:f7:3b:06:77:b9:12:0f:1c:aa:71:cb:
                    c2:87:bc:bf:6c:88:2a:68:8f:c9:72:65:8f:48:9c:
                    87:cd:5f:6d:c1:9f:10:8c:28:9f:55:8d:3b:d1:1e:
                    fc:e7:5e:73:cd:05:5a:ab:a0:55:6d:47:73:66:fa:
                    a8:66:1a:ef:23:c9:c8:1f:4b:05:3b:df:7b:62:e2:
                    f5:fc:1a:a3:76:e6:84:26:b8:61:b5:d1:73:ca:bf:
                    ca:9c:63:f8:e4:66:ba:54:b0:c1:32:4e:81:15:71:
                    cb:bf:4a:d6:00:f7:31:8a:b8:43:ff:eb:7e:82:20:
                    79:a6:f4:83:c8:d0:1a:4b:84:e1:48:c3:c6:3d:84:
                    eb:bb:65:2b:c8:0a:29:80:c4:eb:b4:ca:3f:57:4c:
                    ba:2b:60:60:1e:25:cf:44:36:1a:7d:d1:09:6e:9c:
                    d5:b0:17:c9:e2:d2:21:0b:b8:7f:bc:fc:06:19:51:
                    3c:20:c7:fa:28:2d:40:b9:df:4e:45:b7:5b:56:0a:
                    75:8c:fe:b9:6f:a3:42:71:50:e9:23:ea:a4:33:96:
                    17:95:70:b6:12:f9:6b:13:ce:db:b8:0e:a2:19:1d:
                    aa:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:58:8D:31:FE:F7:2F:F1:91:55:BD:89:35:CF:A1:D3:A6:8C:BB:7F
            X509v3 Authority Key Identifier:
                keyid:30:E6:A5:C3:13:6B:D2:FD:D3:6C:84:A0:CC:72:5B:F7:CB:0F:EA:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MOalwxNr0v3TbISgzHJb98sP6rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/febeb6-79e6-4d97-9c92-b79968e0e174/1/MOalwxNr0v3TbISgzHJb98sP6rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a7:fa:51:fd:5f:cd:33:c6:26:77:ad:c3:56:d8:3c:34:15:
         99:b6:69:2a:c0:9a:b0:fe:18:f9:80:4a:56:08:57:73:fc:70:
         69:e7:b2:fa:72:a6:99:c0:b2:ec:47:84:64:38:cb:7c:1d:fa:
         7f:24:ca:2b:28:ee:04:e2:9f:a8:8e:32:54:bf:18:80:6c:ec:
         33:10:80:46:f2:b1:a2:3b:fc:23:2f:2e:29:00:20:83:4e:ab:
         52:2c:8a:b3:78:b0:99:09:1f:6a:88:8c:87:6a:78:d1:0a:e3:
         ce:e0:06:62:23:74:7e:fd:da:79:88:2c:3d:e6:1e:9c:22:0a:
         b7:a6:fd:24:de:84:2f:82:6e:c8:a3:3a:65:80:31:79:6c:32:
         21:c5:f7:6b:f3:cc:84:83:0f:37:4a:0c:cd:ec:5b:8f:eb:43:
         32:24:fd:4e:b7:0d:cd:58:d1:73:9b:ea:8e:f3:d0:74:0e:2f:
         56:ff:a8:e5:f7:71:02:d7:91:56:31:55:25:20:27:aa:ed:c3:
         f0:89:ce:73:84:e6:70:ac:d4:78:f1:5d:71:49:28:d9:64:d4:
         9b:8c:4c:8e:fb:69:79:f0:9a:54:34:e1:4c:13:82:79:c2:0e:
         45:d7:47:52:0a:65:b2:8c:79:bd:9d:cd:ae:59:d0:70:c5:07:
         9a:81:38:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:18:50 2025 by rpki-client