Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
File:                     z-DfghIUOCcckTwk_1D9O2LUDcY.mft (raw, json)
Hash identifier:          V4wogeSC5AT/kBE2Bjxa7bcOo69q3Bz5ynxaBuvMrmc=
Subject key identifier:   0E:CA:55:8D:E0:4D:99:A4:38:AB:70:4C:02:B8:82:3D:65:DC:3B:E6
Authority key identifier: CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
Certificate issuer:       /CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Certificate serial:       0196AC55B5CA2B68D7CE53AFA533BBEACA00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
Manifest number:          054A
Signing time:             Wed 07 May 2025 20:00:20 +0000
Manifest this update:     Wed 07 May 2025 20:00:20 +0000
Manifest next update:     Thu 08 May 2025 20:00:20 +0000
Files and hashes:         1: dg19fPDPdlao_unFvCVYC9RvrNk.roa (hash: 1cfvjDRPYU7JD/YdM+FbsUT+iUhZddEmRAh2tZhtxpM=)
                          2: hjhGPiy3UFBr9ANkRCMDMmtPbyY.roa (hash: sqw0T+Zj9m/aPxSyQB0liPAB0Jl/klsDHqYei7sLIoY=)
                          3: mrfqZX09-GYD22YGA7OHI1KATR0.roa (hash: iAu2ErUzWfhvcM5+CamqqvdYTRwJsRA5N+3mtIKS/Kc=)
                          4: ovGP4arKXoonSAQIQ1WNcsWj-gQ.roa (hash: T9HKSRGXUzrIsVuq9KTvv/Pp6ahuWPC0kj3dMzK0+WE=)
                          5: z-DfghIUOCcckTwk_1D9O2LUDcY.crl (hash: +qlRK/AboB3NTjlDu0/MrvdiZwZsHCNq0z5JnQ7nbJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:55:b5:ca:2b:68:d7:ce:53:af:a5:33:bb:ea:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
        Validity
            Not Before: May  7 20:00:20 2025 GMT
            Not After : May  8 20:00:20 2025 GMT
        Subject: CN=0eca558de04d99a438ab704c02b8823d65dc3be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c5:3b:2b:0a:ba:13:1e:ea:2f:9a:b0:0d:98:
                    f3:4a:38:3f:3e:41:38:df:f5:96:c1:a5:08:24:93:
                    09:de:cb:8a:92:3e:c7:83:d2:35:c3:7e:e6:eb:58:
                    6e:37:f7:7b:2e:dd:18:43:89:df:fb:ea:bf:1d:84:
                    3f:f1:2a:87:82:38:51:5d:d7:f0:51:3e:c7:60:02:
                    86:6d:02:c1:52:01:98:01:bf:f1:c1:5a:f8:f7:d2:
                    e2:c9:df:14:d6:a2:60:fd:f3:a3:5c:4d:26:84:2b:
                    17:2c:e6:35:2f:fa:ec:ed:29:71:64:8e:b9:d3:d3:
                    e5:2e:17:70:e5:52:87:74:93:ef:7a:cf:b5:d2:6d:
                    58:17:26:f7:80:04:81:2b:5a:f8:e1:56:af:09:3b:
                    f6:80:15:e6:37:ce:19:e9:59:d1:2f:ec:8b:0a:07:
                    20:96:45:d0:bc:2a:16:93:f9:06:68:0b:f2:0b:bf:
                    fa:7e:a8:70:fa:3a:f8:84:dc:5e:5b:04:e1:2f:af:
                    fd:31:77:ec:c3:71:bc:ab:5b:a7:64:95:fc:11:c2:
                    e0:59:b7:a9:31:0c:60:8e:3e:69:19:4f:04:9e:f7:
                    8f:0f:cc:80:c6:07:28:b2:4e:de:74:81:c8:dc:3f:
                    6d:5d:fb:cb:92:b8:bf:2c:16:39:d0:81:93:4a:0a:
                    83:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CA:55:8D:E0:4D:99:A4:38:AB:70:4C:02:B8:82:3D:65:DC:3B:E6
            X509v3 Authority Key Identifier:
                keyid:CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:42:8d:f2:d9:9c:8b:d2:05:40:00:52:7d:2f:d2:83:13:43:
         b6:5b:00:50:08:51:5f:fd:80:2d:09:d8:20:38:b3:8d:9f:d1:
         ae:40:cf:5e:f4:90:fb:fc:27:99:25:2a:bb:7e:1e:0d:02:e8:
         55:11:cf:68:39:d9:e6:5d:0a:83:f1:e9:d7:37:71:c7:05:bf:
         68:35:02:6b:ae:0a:45:9b:07:16:42:80:20:9c:84:0a:07:d4:
         c0:7f:4a:4a:c5:15:3e:9a:b4:ee:63:d9:f6:24:fe:34:50:7f:
         28:63:85:87:4f:82:f4:e2:58:cb:e1:f5:2b:23:ab:4d:11:c0:
         51:2e:8b:33:61:97:35:93:51:bf:b7:8d:3a:13:40:88:0d:af:
         c6:23:02:6f:3d:19:29:84:b8:10:eb:26:f8:c0:27:f5:23:35:
         38:9d:64:fe:c6:5c:c4:c5:55:c8:30:95:f0:7c:ca:7b:90:07:
         18:5f:f3:44:31:72:82:ae:44:07:e8:5e:a3:84:da:95:6a:2b:
         2d:c6:64:4d:e6:87:9d:2e:b2:b7:b2:21:b9:cd:8e:b8:4d:75:
         08:fe:bd:0b:98:87:ce:d3:25:aa:1b:f4:cd:de:71:41:08:39:
         12:cf:4d:c2:30:c1:e2:96:07:10:ba:29:c8:88:db:84:4d:e2:
         27:f4:2b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:52:48 2025 by rpki-client