Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
File:                     Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft (raw, json)
Hash identifier:          LUUbIJ9Pbei8SxGjmz72s5zyBBF7aX2d7RCLI8B9Jnw=
Subject key identifier:   D0:75:89:17:65:6E:1F:B0:A8:37:FD:70:32:38:5D:9B:10:29:1A:90
Authority key identifier: 33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07
Certificate issuer:       /CN=330e3fdb11d826bc01663290bd7ca406b8d76507
Certificate serial:       0196D476387473D837C46A61C9F717093551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
Manifest number:          0C24
Signing time:             Thu 15 May 2025 15:00:39 +0000
Manifest this update:     Thu 15 May 2025 15:00:39 +0000
Manifest next update:     Fri 16 May 2025 15:00:39 +0000
Files and hashes:         1: DT1onb-4ObKDzalYYHYuQuaaeIo.roa (hash: vu1nm9V8jbxKLGzlJsgL+mHK04vH81jI0saGvnr/HOw=)
                          2: Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl (hash: nnrYXuDwtpO5HTcNbTsQC41UWzryu1UagVYLbhKdfA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 14:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d4:76:38:74:73:d8:37:c4:6a:61:c9:f7:17:09:35:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330e3fdb11d826bc01663290bd7ca406b8d76507
        Validity
            Not Before: May 15 15:00:39 2025 GMT
            Not After : May 16 15:00:39 2025 GMT
        Subject: CN=d0758917656e1fb0a837fd7032385d9b10291a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:ac:bc:da:39:f4:c3:a8:3f:35:be:a0:6d:
                    d1:80:3a:bd:9b:25:ea:41:08:fe:91:0f:f4:b2:64:
                    2a:9d:31:cd:76:f6:7b:99:36:5d:38:46:91:5b:d6:
                    b9:40:cf:34:00:07:a4:ff:23:20:a0:b5:4d:56:d2:
                    93:7a:76:d0:ac:b3:34:64:d8:fd:ce:a3:56:21:a3:
                    a3:4b:52:41:f6:be:16:d1:04:79:da:5f:59:23:59:
                    73:02:ae:eb:83:a7:eb:64:0f:08:01:f0:5e:07:3b:
                    55:36:aa:77:7f:89:c0:e5:ad:b9:4f:93:a3:9c:94:
                    27:ff:c4:ac:27:08:b4:fc:c9:05:21:09:7d:3d:f8:
                    36:6f:ca:81:cd:07:2c:98:95:88:db:54:40:9c:82:
                    fb:f6:45:d1:c2:da:e4:36:89:10:87:8e:3c:dd:a4:
                    6d:70:c8:fd:20:9a:68:2b:e4:d1:62:60:11:64:57:
                    c5:fb:74:78:6e:56:f5:2a:8d:a7:d2:81:e8:4b:59:
                    0c:b5:29:3b:bf:26:98:91:68:da:c8:76:79:e2:26:
                    79:86:77:a1:8b:2e:af:c4:0d:bb:7d:26:17:39:28:
                    b7:9e:b9:35:b9:eb:74:17:77:fe:a0:ae:15:ce:60:
                    ec:86:37:65:73:ad:70:da:f1:da:5b:25:e7:fb:b6:
                    f0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:75:89:17:65:6E:1F:B0:A8:37:FD:70:32:38:5D:9B:10:29:1A:90
            X509v3 Authority Key Identifier:
                keyid:33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ff:ab:6c:ca:8a:cb:ae:ef:8e:8d:5a:ce:7d:f2:c8:85:80:
         7d:65:61:57:63:55:21:7f:04:29:7f:90:c6:7f:8d:80:af:fe:
         8a:ed:74:a6:29:3a:0c:46:3c:84:91:6a:e1:ab:50:e5:3e:90:
         fb:5a:f1:3f:07:b5:1c:58:f2:d5:68:19:39:2e:85:db:7c:3f:
         2c:67:2f:8c:44:ee:9b:1f:cc:d0:8b:c8:81:c5:a2:b2:a6:5e:
         45:e9:ad:8a:3b:d4:23:71:91:80:6d:c9:84:49:65:95:0c:89:
         92:8b:91:ba:85:c1:ab:9c:af:3b:cb:1b:58:50:01:5b:58:cd:
         82:52:9e:2a:15:63:8f:4b:14:d6:15:76:22:ec:b8:a1:f4:ff:
         97:99:60:55:31:c0:33:40:cd:fb:74:8f:ab:12:1d:4d:0b:b7:
         c0:10:71:c2:c4:e6:78:f8:dd:35:80:9f:03:e5:a3:55:11:8e:
         06:fc:0e:f4:4e:04:29:57:c8:10:5d:3c:bf:57:5b:dc:82:c6:
         24:66:1e:d3:1d:c5:29:3f:86:a5:f9:6b:8a:3e:6d:19:7b:f9:
         0a:3e:d6:3f:9a:14:cb:ff:e4:f4:5f:a0:c1:bb:67:19:29:c7:
         45:d6:5c:cc:ca:23:ae:e8:75:66:d2:9b:d9:1d:64:b3:1e:89:
         b4:65:39:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 21:36:05 2025 by rpki-client