Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
File:                     mdy98GMqEBYTqPbJRJsp7UXBqHI.mft (raw, json)
Hash identifier:          FKJGwQoLzJprHhmirnxYdReBiiJ9UBizd1Img1EQrCU=
Subject key identifier:   4A:78:1C:D4:69:CD:14:CC:6B:F8:16:A8:8F:D2:DF:0E:0C:0F:6C:48
Authority key identifier: 99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
Certificate issuer:       /CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Certificate serial:       0196C1CB8FBF0BC0959188A358D4129EF587
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
Manifest number:          0EE3
Signing time:             Mon 12 May 2025 00:01:05 +0000
Manifest this update:     Mon 12 May 2025 00:01:05 +0000
Manifest next update:     Tue 13 May 2025 00:01:05 +0000
Files and hashes:         1: GM4FjF5iGCwwZrvF5OPLK7EJcKc.roa (hash: TNBXDdJILbU4GHZNotTea3UIv8zTS99ELWCKcINIuvk=)
                          2: cMpaW7cVC0wOITYTuoFWwIF5n44.roa (hash: 4diQ6JOCI3p/sKjl0F+QVRHdBT8AYRe0IlWz174rlII=)
                          3: mdy98GMqEBYTqPbJRJsp7UXBqHI.crl (hash: s829/12MYd7TZMzhTm7BHboItD1blaHLK9/naXDwEOc=)
                          4: q11-oGTlQe1qTZRc7a_TUm1IpLc.roa (hash: LcRd4esaozcBtrhM5u7DUki+tNg95Mjqju0EcrMRViM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 00:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:cb:8f:bf:0b:c0:95:91:88:a3:58:d4:12:9e:f5:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
        Validity
            Not Before: May 12 00:01:05 2025 GMT
            Not After : May 13 00:01:05 2025 GMT
        Subject: CN=4a781cd469cd14cc6bf816a88fd2df0e0c0f6c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5e:6d:2e:d7:40:ad:12:da:b8:a6:30:0b:15:
                    e1:44:df:b2:4d:dd:8e:29:6a:e6:59:e9:67:96:ad:
                    e1:9a:62:a0:87:4e:a1:c4:bb:c0:50:cd:97:ed:f1:
                    49:13:49:8a:d5:de:57:e8:31:61:ac:99:a2:5a:1d:
                    1b:e8:78:fa:75:e6:ad:18:39:98:f0:55:d6:38:13:
                    5b:4b:76:a1:ae:3d:1d:9c:5a:7b:cc:21:08:e9:1c:
                    90:10:aa:4a:31:3b:7e:f8:a2:55:47:2d:4b:9e:41:
                    53:a8:ea:49:d5:04:05:8b:bb:af:24:5a:9f:c7:6d:
                    26:3d:8a:7b:ea:a7:93:a5:63:1f:ea:ef:2f:65:88:
                    5b:0e:28:b7:80:0a:17:b6:ae:fa:13:48:0f:ff:dc:
                    7e:0f:4f:21:e4:66:7b:6a:90:fb:04:d6:3f:cc:31:
                    80:89:8e:fc:a9:71:68:b6:27:65:88:e8:ec:ac:57:
                    68:04:63:d9:36:c6:e8:a4:8b:9c:5b:25:c0:3a:f6:
                    63:0d:24:bb:73:ae:69:53:ec:a2:72:d2:79:ba:e6:
                    e5:fa:bf:37:20:c4:7c:c7:be:1d:ec:33:32:81:83:
                    74:dd:6d:a7:5b:65:8f:be:0c:5f:50:e9:bb:cf:ac:
                    f1:7d:82:aa:38:45:2d:03:15:3e:9c:5b:31:3b:b8:
                    59:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:78:1C:D4:69:CD:14:CC:6B:F8:16:A8:8F:D2:DF:0E:0C:0F:6C:48
            X509v3 Authority Key Identifier:
                keyid:99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:cb:14:72:76:fc:c5:37:8f:86:d7:0d:87:1f:2e:58:13:88:
         35:2a:f2:46:ac:30:dc:47:66:e0:71:3a:67:a0:05:51:49:8d:
         13:4e:c2:ec:04:63:27:34:b7:be:49:7c:f8:a1:5e:04:07:07:
         25:81:94:9c:87:aa:bf:6e:06:73:7a:17:c8:74:9a:97:dd:1c:
         fa:06:e5:b6:29:f6:a7:97:58:14:ed:91:f6:d4:cc:b6:e7:f8:
         99:9a:68:56:62:c7:88:16:98:01:8c:80:71:68:23:65:af:e6:
         17:29:04:81:17:f8:07:5d:10:f2:36:ed:fa:ca:0b:ff:25:1d:
         24:a2:14:82:14:f0:86:16:14:bd:ca:a1:2d:b4:28:f6:27:b6:
         d3:f5:5c:35:93:71:8d:85:a3:54:4d:d7:5b:88:35:a3:e4:1c:
         85:94:31:b4:b7:fa:28:3e:7d:f0:7b:e9:f9:2a:b0:83:e1:ec:
         62:7f:74:f6:ee:d2:2f:37:f2:e0:93:38:10:77:ac:c8:cd:62:
         a1:56:2d:0d:60:6c:30:b5:88:97:a8:74:e1:0f:66:f3:a1:b1:
         c1:17:de:ab:d1:96:7f:5d:c2:48:41:a4:bd:23:b7:97:c0:14:
         c1:06:a1:23:f1:9e:69:46:c0:be:2c:0d:5c:f6:6e:36:23:2d:
         28:cb:f1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:08:58 2025 by rpki-client