Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
File:                     4MKGY5gUKldLpHsZfXF5G14jr3w.mft (raw, json)
Hash identifier:          0ArQ12Sc7PAixbmXYXTCwR/GXIPtnFi43VCIqD8LWGE=
Subject key identifier:   D3:2D:23:F7:BF:E4:EC:31:68:3F:33:C9:E8:99:29:6B:93:F7:47:42
Authority key identifier: E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C
Certificate issuer:       /CN=e0c2866398142a574ba47b197d71791b5e23af7c
Certificate serial:       0196CEE2026A8ECECC541C2711462A3DB844
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
Manifest number:          153B
Signing time:             Wed 14 May 2025 13:00:40 +0000
Manifest this update:     Wed 14 May 2025 13:00:40 +0000
Manifest next update:     Thu 15 May 2025 13:00:40 +0000
Files and hashes:         1: 4MKGY5gUKldLpHsZfXF5G14jr3w.crl (hash: EDOqq67XtiUxcVtq0Wv8HTxWJv0IBoGBRooL7yMvPBo=)
                          2: S8FepsEj5yTfhoJEKIV6MM1Ae2g.roa (hash: akrj8wyt2+2beT5os1QACCsWDw3JzGKZbUx/i8JS4K0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ce:e2:02:6a:8e:ce:cc:54:1c:27:11:46:2a:3d:b8:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0c2866398142a574ba47b197d71791b5e23af7c
        Validity
            Not Before: May 14 13:00:40 2025 GMT
            Not After : May 15 13:00:40 2025 GMT
        Subject: CN=d32d23f7bfe4ec31683f33c9e899296b93f74742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e4:f4:7d:f4:c1:e2:05:9d:a7:fe:83:7b:76:
                    74:fe:c3:8e:d4:1d:a5:9f:f3:84:0a:7c:69:41:01:
                    c9:c5:61:6e:11:f9:42:c0:89:a8:f5:6d:0d:65:22:
                    c9:0b:3b:32:34:9e:85:e6:5e:35:b8:6f:e3:b5:a2:
                    ec:d2:f0:dc:29:13:48:a5:0f:66:46:70:c6:ce:a0:
                    e4:54:f6:81:15:9e:6f:bd:02:7a:59:83:79:ee:1c:
                    23:46:4d:c2:9e:4e:bb:69:32:d6:73:0d:a7:cc:2f:
                    33:07:da:38:d3:42:0a:d8:07:49:a9:69:58:82:a3:
                    7d:51:05:c2:a8:a2:83:1e:54:47:b0:78:dd:5f:52:
                    b7:e1:cc:e2:ad:01:d3:d8:dd:79:7d:0e:63:33:2a:
                    60:51:23:4c:97:4e:5b:22:8b:c4:21:b2:21:7e:f8:
                    48:ed:e2:60:56:90:7a:26:cd:2f:d1:5a:10:44:da:
                    a4:45:7c:df:6a:68:df:d7:f2:22:49:af:aa:4e:83:
                    13:2d:8a:89:82:2f:10:78:29:35:13:96:d0:2c:c1:
                    3a:c3:04:12:2b:77:3c:64:21:e0:93:e7:c6:95:f3:
                    22:42:ec:da:21:81:f4:12:83:4d:2d:83:92:73:fe:
                    a4:c3:fa:53:48:a2:2c:b9:6c:4e:43:5d:39:42:ed:
                    80:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2D:23:F7:BF:E4:EC:31:68:3F:33:C9:E8:99:29:6B:93:F7:47:42
            X509v3 Authority Key Identifier:
                keyid:E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f1:06:d1:8f:cf:92:f7:d0:92:2c:ec:27:43:89:ad:4b:47:
         6f:19:d2:dc:d9:d7:6a:de:6b:28:6f:2a:ae:3b:8d:75:8f:c1:
         19:25:65:40:6a:86:69:93:a0:fc:62:71:72:3a:9f:44:7b:70:
         26:5b:26:85:11:8e:92:7a:b9:5e:d5:59:17:47:73:a8:db:e9:
         34:9b:10:35:2f:7e:73:d9:f4:60:29:0c:b4:e0:af:e3:82:6d:
         f0:1a:2b:48:5d:5e:cb:4e:85:05:45:80:fd:f4:fd:a6:9b:d0:
         f9:4d:d6:bd:f7:9e:a1:8e:f5:cf:a5:ee:c2:4f:96:ba:f7:85:
         c3:6c:c4:4f:ed:b0:31:40:18:e8:14:c1:e7:2f:fb:25:53:48:
         d8:e2:e1:c6:d9:21:9a:77:3d:16:e8:59:ed:2a:16:18:c6:46:
         56:91:42:d6:46:50:3e:bd:52:a8:af:c6:41:79:fe:03:5a:b2:
         30:35:d8:96:47:8a:97:bc:db:2b:6e:b0:db:1b:4a:91:89:b7:
         9a:f9:dc:55:5d:2c:e6:07:e3:d6:fb:11:20:0b:42:0d:f6:ca:
         20:a0:23:cb:d0:7f:3a:9f:68:71:ea:83:50:bd:f0:0b:db:21:
         bc:84:1a:de:eb:45:ff:80:54:7d:89:79:27:e8:57:9d:cb:0b:
         62:c1:c4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:52:56 2025 by rpki-client