Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
File:                     J5O96Uauk208rME2pfMjnt8kMfQ.mft (raw, json)
Hash identifier:          QS7rxG0g4Ky5uGFFQinteIg5u5tcyFc12RW9iCEXBAA=
Subject key identifier:   E1:7E:CB:55:8F:20:DB:51:78:01:C5:17:F0:A3:E1:39:AC:8D:02:98
Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
Certificate issuer:       /CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Certificate serial:       0196B0D76E7129083B04AD64B92405E1761A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
Manifest number:          0FE3
Signing time:             Thu 08 May 2025 17:00:30 +0000
Manifest this update:     Thu 08 May 2025 17:00:30 +0000
Manifest next update:     Fri 09 May 2025 17:00:30 +0000
Files and hashes:         1: 7E5LSfCOnSbjv-AVC1nxJJ66F4U.roa (hash: /aIHlfM99fuCwlGxN5/ehUDLpA24+vyDEzZMgylijKg=)
                          2: 9UkCw4b12dxaFQuWu2BWrAq18cs.roa (hash: uCtVg42ZHDXRQtsH4hBM45QWmlQhdogsHZ3bdPv3hOo=)
                          3: J5O96Uauk208rME2pfMjnt8kMfQ.crl (hash: wgzdlGdtBzxt+bDyNoD1BO0ZD+WKwaiLD0FH/oX5b90=)
                          4: Lzxta0jd7ucvehlsvKMLCGGj4SU.roa (hash: r2f4C1ycLWis+wP1tatuwRPmqShhZKPPE1FJIgRZw1w=)
                          5: ONAb3aa9aLqBAH1nZ2X-0Z8C9Vk.roa (hash: toxq5hd68ktpiB99iFz4dER/H0vTabk/sYSInN7166g=)
                          6: P_96blpHfAQM3voIBaqDmBhs-8E.roa (hash: R9hyFEujTVmaNvCmjtuWK6MWoWwhFPOAcCmIzjoPwgM=)
                          7: ZtPUyk_TNktoLC4Kb0JqAQbyro0.roa (hash: AOW26RlAnZ0u9tHghS8csH7uDfnP5ryVT/Rp+gEYBlU=)
                          8: ulUXrUDPWH1jBF3XUvGFq6u9UBA.roa (hash: JO8Wuf/EekqDvWZVFwjNa4p80lEXLhg9dIYBQ3yRrjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b0:d7:6e:71:29:08:3b:04:ad:64:b9:24:05:e1:76:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4
        Validity
            Not Before: May  8 17:00:30 2025 GMT
            Not After : May  9 17:00:30 2025 GMT
        Subject: CN=e17ecb558f20db517801c517f0a3e139ac8d0298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:02:4d:25:0f:bd:ee:a9:2e:22:de:f6:00:04:
                    65:24:70:6a:cf:45:c3:51:b3:89:30:50:b5:c5:57:
                    ef:b6:8d:2d:ab:00:b9:0e:b5:de:bf:e0:e1:6e:ed:
                    5f:59:a5:53:ff:7a:83:a9:e6:04:03:92:92:fe:86:
                    ec:85:cd:81:20:93:c1:8b:9f:b3:d3:71:d9:a4:99:
                    94:89:9d:e2:b8:1b:15:d9:e7:7c:37:1a:0a:5c:45:
                    a7:d7:4e:30:46:20:9a:c3:1f:90:e5:85:fc:5b:4e:
                    e9:f8:f7:b3:f0:6e:fa:61:a9:eb:75:23:43:f7:28:
                    57:ee:bc:f4:6a:b9:de:6c:4e:21:ff:40:82:14:2b:
                    6c:44:b1:34:3f:45:26:4c:78:3c:0f:6f:73:54:4c:
                    ea:8f:4e:94:6e:76:15:f0:01:7d:73:33:46:0a:97:
                    52:30:cc:5f:7d:84:9e:10:73:a0:2f:6a:27:84:02:
                    5b:6f:b4:59:2f:7e:da:75:d7:97:4e:5b:85:f9:db:
                    ff:ef:f0:4f:5c:4e:18:0d:ac:90:b2:d2:82:42:7b:
                    0a:d8:34:a7:fc:e3:10:8f:b5:af:8a:27:27:7f:7b:
                    db:42:f1:8e:06:8e:a0:a4:ce:18:7b:b5:2b:96:1e:
                    fa:81:b4:65:05:fb:50:8a:f4:6b:28:96:32:0c:df:
                    3a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7E:CB:55:8F:20:DB:51:78:01:C5:17:F0:A3:E1:39:AC:8D:02:98
            X509v3 Authority Key Identifier:
                keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:92:32:03:e0:cf:59:06:67:0f:dd:ad:bc:65:f2:cb:51:84:
         77:d3:ea:be:ec:2d:2f:98:31:1a:bf:c5:62:1f:04:9b:72:ae:
         25:0c:33:38:76:15:c9:c0:4c:c7:90:7f:5a:d0:22:ce:b2:c3:
         10:79:f6:4a:29:6c:dc:a2:9b:d5:6d:00:c0:c2:c2:5e:26:d9:
         06:cc:37:82:4a:58:77:cc:b9:c1:ef:b4:be:92:15:c6:1c:d1:
         0e:73:50:0c:9d:e6:12:b6:c6:05:e7:5f:5c:b7:05:56:ee:be:
         79:6a:f3:a7:3a:14:f6:f0:6e:b7:a8:50:0c:1d:f6:2d:c4:57:
         14:b9:a9:6c:c9:34:7e:6f:18:88:1e:a3:af:58:3d:d8:36:c4:
         a3:5a:67:eb:2f:d0:c9:9d:d7:c8:39:45:26:ed:d4:af:ee:52:
         bb:35:82:bd:ae:cd:d9:d8:9f:bf:94:99:ca:fb:33:f4:9f:24:
         02:e8:d2:74:a4:72:09:6b:9c:4f:5b:f9:65:22:06:51:58:76:
         26:4e:f7:02:2b:ec:02:e4:d7:fd:d2:21:e4:b6:80:a7:10:c0:
         9d:80:63:ea:4a:2a:b7:08:b8:50:d0:08:e3:14:17:57:cf:28:
         d8:b3:73:fd:f8:43:73:87:ba:b2:0b:cf:9a:06:06:32:a7:53:
         53:9a:e5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:54:33 2025 by rpki-client