Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
File:                     MX71WudtQiUE6uWyBnJNNkQzEcc.mft (raw, json)
Hash identifier:          IbtJkNxmX/8KuRtnf4dpgyB6EcwfyshxgDh00YE14sk=
Subject key identifier:   E9:D2:60:70:90:11:46:BA:A1:F5:F5:75:CF:29:E7:6B:B6:80:70:32
Authority key identifier: 31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
Certificate issuer:       /CN=317ef55ae76d422504eae5b206724d36443311c7
Certificate serial:       0196C0EF7C0E9B2C63D6DAE59FD641C281F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
Manifest number:          1536
Signing time:             Sun 11 May 2025 20:00:42 +0000
Manifest this update:     Sun 11 May 2025 20:00:42 +0000
Manifest next update:     Mon 12 May 2025 20:00:42 +0000
Files and hashes:         1: 6KI42LA3k4Z423gzE8zSlIe9RA4.roa (hash: MywiSVripv33Y3DFEx1AfwLFpUpd5icicODvhSpR2Lc=)
                          2: MX71WudtQiUE6uWyBnJNNkQzEcc.crl (hash: gm+Lr4HeZfRcrulQP1s/xpr7ITuMS0tglj+yKE/XIJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:ef:7c:0e:9b:2c:63:d6:da:e5:9f:d6:41:c2:81:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317ef55ae76d422504eae5b206724d36443311c7
        Validity
            Not Before: May 11 20:00:42 2025 GMT
            Not After : May 12 20:00:42 2025 GMT
        Subject: CN=e9d26070901146baa1f5f575cf29e76bb6807032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4c:c7:2d:04:b3:64:05:24:72:6d:3c:74:f8:
                    0f:cd:41:a7:21:9c:28:0e:a9:67:9e:86:98:ae:2e:
                    bc:ea:82:65:b9:6a:8a:4b:25:77:40:44:c2:69:c7:
                    7b:61:eb:60:e1:5c:08:9e:f9:5b:81:4a:03:45:b0:
                    d4:48:af:c7:55:1f:71:c5:bf:ee:e5:87:69:3c:e1:
                    73:50:23:15:79:0f:3e:6b:93:c9:87:50:c0:12:7b:
                    c1:b5:f7:6d:28:e0:35:53:8c:5d:b9:89:e6:74:16:
                    d2:27:a8:d8:6e:cf:dd:5a:a9:e3:84:43:9d:01:1e:
                    ce:f2:3a:8a:c4:85:8b:48:d8:f1:e2:40:c3:23:ce:
                    34:b2:fa:be:25:fc:33:96:3a:fb:3f:97:ac:88:35:
                    e8:0b:7e:b7:e8:61:05:f8:32:47:31:9c:50:0c:6d:
                    fd:20:31:b6:a3:a0:a6:50:df:a9:48:31:3f:9b:b5:
                    3a:fe:5d:cf:dc:12:29:5b:96:dc:ce:1e:54:ce:3c:
                    ed:3f:25:5d:51:13:91:67:2a:2b:02:21:3b:a6:01:
                    2f:98:04:af:7f:46:62:8f:19:83:c7:06:70:39:05:
                    32:1d:69:f9:f0:89:e4:94:33:5f:26:81:a9:d3:3f:
                    d5:30:54:a2:b6:5e:6e:8f:90:89:3d:9b:96:98:86:
                    f8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D2:60:70:90:11:46:BA:A1:F5:F5:75:CF:29:E7:6B:B6:80:70:32
            X509v3 Authority Key Identifier:
                keyid:31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:33:8f:0f:c4:0e:ae:4d:3d:d5:90:cb:e6:c6:71:96:18:5e:
         54:0a:dd:bf:cf:d3:f4:e3:24:1c:cd:44:96:4f:86:9e:d8:7a:
         8d:22:31:e2:48:ac:ef:d8:81:98:b3:50:93:df:a5:15:0f:d4:
         e8:0a:06:3b:d0:4b:d5:3f:80:20:8d:db:d4:63:b7:46:4a:3e:
         49:73:89:38:05:23:bf:cc:8d:b1:5f:ba:de:a3:29:90:b8:fc:
         7b:a8:a4:b6:d2:3c:5a:38:8e:af:aa:ec:5e:b4:f2:a6:ce:68:
         c7:9c:be:71:c2:c0:79:ff:5e:b7:ea:72:de:26:05:0e:68:42:
         90:a5:1b:ee:f8:d2:c6:28:6d:4d:63:fe:5c:60:5e:b6:d5:ad:
         73:82:05:40:29:4e:3e:ad:88:db:7d:92:2a:34:7a:0f:ae:c2:
         08:6c:b9:38:b7:07:bc:cd:ab:64:c4:bb:d0:60:93:9a:09:32:
         ae:cc:9e:f0:a7:36:9d:bb:7d:42:c7:4f:38:a3:01:fb:42:f9:
         2a:c3:20:f3:ef:67:d1:b5:84:98:53:2d:62:a1:de:95:f1:bb:
         6f:72:7f:ad:c0:81:b6:af:94:63:ce:f7:c7:dc:fd:13:5f:27:
         93:a5:4c:0d:7a:51:fa:a4:a6:91:8e:03:cb:dc:3c:4f:44:df:
         70:16:fe:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:14:53 2025 by rpki-client