Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
File:                     pi8tPCadk1InaQsot_vdlT4entw.mft (raw, json)
Hash identifier:          oawy8+sDw7HbvcV4rAv+eVWmvPvHXyjlFDAzmX6XvwI=
Subject key identifier:   15:36:EB:24:6F:69:BB:E8:63:57:77:72:AC:6D:30:2B:00:2C:41:07
Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
Certificate issuer:       /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Certificate serial:       0196BE259FA926EE7A33F1862F374BAEC98B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
Manifest number:          09F1
Signing time:             Sun 11 May 2025 07:00:58 +0000
Manifest this update:     Sun 11 May 2025 07:00:58 +0000
Manifest next update:     Mon 12 May 2025 07:00:58 +0000
Files and hashes:         1: 2bwoacVhn9Ey8-WA6HPqgOWaS3w.roa (hash: +4RKvBlDgq1ptS9Kf/qX9i6nHjxZCbfdf3DtkVyJdE4=)
                          2: OFc0yBZFy4Wa20RcLrHQGW0n8Z0.roa (hash: TB30ZCImx4FabUXsP6FrJ/8xR1ebGEeWXJhQyL3afw0=)
                          3: gBycawi1ika7Vj_3TGa6n8ZyOcc.roa (hash: eGdxhHwT3weYIz4n0K5fQnn/ZNevVWIphIjoit3SpJE=)
                          4: pi8tPCadk1InaQsot_vdlT4entw.crl (hash: DQTkp4DkZc5uWXPKhsnyid8auwJB6YVJ/EDcgkMaWjE=)
                          5: thsewX5m5QEbqC1hk05OepLePSE.roa (hash: Qec8TVM/3O2FwTtHE6+SXRB/S0VWZFEK7seQA4WOq3A=)
                          6: uZ5GJPrp9SFd4Iq3FGcL7RdiaHc.roa (hash: qgD6SLmZc9P0p+V20mf5ZvuX3cLkvcDCzUTLrsNawj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:25:9f:a9:26:ee:7a:33:f1:86:2f:37:4b:ae:c9:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
        Validity
            Not Before: May 11 07:00:58 2025 GMT
            Not After : May 12 07:00:58 2025 GMT
        Subject: CN=1536eb246f69bbe863577772ac6d302b002c4107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1d:16:75:2c:ce:c6:91:8b:56:54:64:2c:4c:
                    8d:5c:1d:ae:30:0e:8f:40:ca:c3:ed:8b:e4:28:4e:
                    ec:7e:95:51:ef:f2:d9:c3:64:b5:6d:15:c9:ad:2c:
                    47:80:f1:88:43:91:71:d6:76:b9:41:1f:09:11:1b:
                    d8:e1:8a:fd:fe:3e:b6:b2:5f:87:77:67:e4:23:f5:
                    f8:ce:8f:4c:92:c1:89:bf:ce:e1:e3:eb:ed:d2:a0:
                    42:74:a1:94:a2:00:56:65:9e:ac:99:93:7a:53:32:
                    f5:38:d4:a7:03:0a:a2:37:32:f0:88:e6:5e:5c:28:
                    b1:75:51:0e:08:f9:84:25:d7:bc:d3:3c:81:cb:55:
                    2c:48:d7:71:32:80:6c:b1:66:1d:e4:5f:a9:83:f8:
                    3f:3f:ae:b3:19:36:7b:60:08:49:75:39:5a:b9:20:
                    ea:12:46:eb:0f:19:fa:24:55:09:ce:42:ba:6a:8e:
                    91:ba:1b:07:bc:c5:ce:a1:dd:2b:8a:32:c1:be:e2:
                    a4:cc:c5:b1:6e:39:87:53:15:74:63:37:a3:96:7b:
                    d7:db:e2:e5:74:c3:14:55:96:18:13:17:8e:ec:3a:
                    22:e0:ea:62:96:fa:83:30:41:e8:ee:08:00:a7:25:
                    a2:29:e4:93:77:86:fe:35:a8:ef:ee:a6:dc:69:a4:
                    40:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:36:EB:24:6F:69:BB:E8:63:57:77:72:AC:6D:30:2B:00:2C:41:07
            X509v3 Authority Key Identifier:
                keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:9c:78:16:0a:31:b6:42:b6:fd:9e:e0:ca:d2:15:77:33:9f:
         9d:92:58:9e:27:07:13:26:f7:9d:5c:ad:85:92:4d:1f:a3:06:
         b8:52:7f:a9:7c:8b:fd:25:d5:6d:38:bd:de:53:8a:4b:ff:10:
         1e:59:1e:de:7f:ef:0b:f3:e8:22:3d:38:05:e0:ae:f2:4f:9e:
         46:6c:06:98:0f:0b:61:1f:ee:17:2e:de:03:d0:1b:7a:b1:03:
         98:e1:ad:6d:55:34:ff:06:9f:93:bf:a6:11:75:56:e2:8a:ec:
         0c:90:61:e7:9f:be:2f:13:9d:51:99:7d:14:4a:06:83:06:b0:
         84:18:3c:03:7d:6c:b0:a2:25:27:28:c4:95:ef:9a:51:60:7e:
         a4:96:9d:cb:77:95:94:07:9b:95:d6:49:03:aa:79:34:e8:ce:
         b8:5b:15:42:2b:f5:60:bc:91:a7:1d:90:3d:71:cc:9b:d0:3e:
         f5:cf:bf:7b:5f:47:60:01:88:94:49:e8:c7:e1:35:a3:1c:3b:
         e6:bd:0e:d2:7f:75:6d:88:c2:b9:3d:a4:57:04:42:f5:54:6f:
         5a:08:80:f6:2e:88:e2:8f:f5:a0:24:2b:98:8e:c1:fa:e5:89:
         fb:df:e7:09:6a:59:34:4d:d4:5b:79:0e:78:23:45:b1:9b:c4:
         d9:ce:49:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:56:52 2025 by rpki-client