Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
File:                     s1ACugiNW9CcFVPc7VsL85B_9zY.mft (raw, json)
Hash identifier:          t5+zjPvZxSdLXDB+LFLurZOZi8H7SiODxmMGnYQY5Ok=
Subject key identifier:   84:91:21:89:C9:02:34:21:FF:FB:E2:7E:23:78:E7:C0:F4:40:A4:8D
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Certificate issuer:       /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial:       0196BB5B389E80B73CC54ABD9A01318DDE00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
Manifest number:          0842
Signing time:             Sat 10 May 2025 18:00:39 +0000
Manifest this update:     Sat 10 May 2025 18:00:39 +0000
Manifest next update:     Sun 11 May 2025 18:00:39 +0000
Files and hashes:         1: K7_w83CbqB50p5lcpbyDnATtK4Y.roa (hash: /8SCcb2O2tmxF/iex69u1hAPcq9K2D7sGmmIbln+NaE=)
                          2: MbhzlhxrvaXyO1Lw7RGG1dMkiFg.roa (hash: hlzCmhJ2QYyMARxKmSDGkDcLH5m78FN0GFM2VOrt0hI=)
                          3: MuKsPf92gYpb4VkgQi1f9xcWVfE.roa (hash: 8DECBi25scQbmewrZN0eRe0LEc/MBejb+MDaRq8CQ1k=)
                          4: RU33m0E_v4JtyZuDuLE7um4TGFs.roa (hash: rYLpalqoskbodL0bGl/nYGGqSHm/lj+AMxh3BExa9eA=)
                          5: s1ACugiNW9CcFVPc7VsL85B_9zY.crl (hash: D9cQ6wADaPAt4FergA+E5Cl8ne40GWQm8MTN9veU+fc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 18:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:5b:38:9e:80:b7:3c:c5:4a:bd:9a:01:31:8d:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
        Validity
            Not Before: May 10 18:00:39 2025 GMT
            Not After : May 11 18:00:39 2025 GMT
        Subject: CN=84912189c9023421fffbe27e2378e7c0f440a48d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:55:6b:fa:cb:05:95:fb:49:e2:e4:d5:ed:aa:
                    53:32:4c:28:17:5d:6a:0d:00:16:ab:d4:f2:f1:97:
                    c2:0a:ec:1f:f3:fd:86:f5:e9:ec:99:22:ee:d5:12:
                    45:74:7f:62:33:0f:6e:2d:ae:8b:e6:96:d7:5d:a9:
                    22:0d:ba:38:e3:a9:48:60:01:61:c4:de:78:e3:1c:
                    b8:c2:a5:57:35:f3:c8:00:aa:4b:9c:af:2d:05:71:
                    55:1f:27:db:92:e5:fc:58:90:86:f5:1e:c6:33:38:
                    0d:36:33:f2:82:d0:83:df:f3:6b:66:8e:61:65:76:
                    03:6d:2f:b0:a5:a6:00:ff:b8:d9:04:a5:51:f2:e4:
                    07:7e:58:48:77:81:5d:22:30:96:40:92:dd:ab:28:
                    1a:b6:82:0d:87:c7:09:47:6c:38:a5:10:9e:4f:92:
                    de:27:1b:71:71:47:52:5a:87:c9:71:ad:5d:ff:5d:
                    10:f8:73:c7:d9:99:31:6e:25:cb:85:c5:2d:cd:04:
                    5c:f0:cd:e2:0d:7f:26:c1:cd:41:4e:d0:6d:0a:a1:
                    4a:4f:68:8b:fb:12:ee:ce:52:b1:e6:b7:2d:b8:68:
                    e2:d6:ab:32:ad:fd:e2:db:58:be:53:e5:9d:42:2a:
                    94:19:35:3d:1b:2a:30:b4:5c:f3:56:70:05:ff:26:
                    01:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:91:21:89:C9:02:34:21:FF:FB:E2:7E:23:78:E7:C0:F4:40:A4:8D
            X509v3 Authority Key Identifier:
                keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:96:e6:aa:8f:80:27:19:47:7a:1a:69:89:0b:0b:d0:5c:a4:
         91:79:b9:ba:4e:68:d1:ae:f1:52:95:37:e3:0a:31:60:46:ec:
         f7:f4:a8:b2:cb:af:2d:50:86:da:53:18:b3:4d:7a:73:c3:78:
         31:e4:f1:47:12:31:cf:c9:c0:6d:c4:70:3b:42:e3:98:85:7d:
         ce:3d:0d:2b:89:a0:d5:27:ec:0e:7a:df:a2:ce:22:74:d7:37:
         36:33:79:72:1f:84:69:fe:29:a6:38:ba:9c:ae:81:a9:f0:1c:
         96:d0:3c:e2:6d:7e:18:e7:47:e3:ec:0b:c1:54:02:be:69:73:
         f3:6c:57:20:ce:cc:19:3c:b3:c5:00:84:0c:62:c3:d1:c8:f9:
         f7:1e:59:e3:7b:35:1f:0a:59:a4:6e:12:4d:df:d9:7c:b4:35:
         0c:d1:20:76:0c:63:13:a1:36:30:c8:c0:37:dc:a3:ad:e5:b8:
         b1:bd:82:2c:04:1f:04:5c:b4:28:a8:81:ed:2c:74:52:a8:18:
         db:c7:6d:7c:bd:81:5e:ad:71:09:b5:a8:6b:66:f3:ac:8e:c5:
         7f:da:02:34:e0:aa:0e:9a:b9:3b:af:65:09:35:71:9b:b0:1f:
         67:c7:c2:46:42:31:5e:6e:69:ee:44:30:27:8c:31:29:be:3f:
         57:ef:e9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:25:09 2025 by rpki-client