Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
File:                     zWj3o5G3sWSe1JA0gtPpMe0049g.mft (raw, json)
Hash identifier:          M/ZrTMQHpmhSd/b8m3TNw153GPkuHiMNpqcMOmPt0FQ=
Subject key identifier:   DA:2C:58:84:4E:74:A3:0A:D0:51:49:78:5C:A4:B7:5C:74:56:C2:44
Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
Certificate issuer:       /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Certificate serial:       0196CD98786E443D318A10A6E1416F78CA27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
Manifest number:          0E38
Signing time:             Wed 14 May 2025 07:00:43 +0000
Manifest this update:     Wed 14 May 2025 07:00:43 +0000
Manifest next update:     Thu 15 May 2025 07:00:43 +0000
Files and hashes:         1: O1GYVhxFS0M7H20Hoh1Atb3eLaE.roa (hash: tCVke6K7TW9gUgASV8dTundK+jeF3bulXbwfPaxFtHY=)
                          2: SWAth1mKD6FwJVqaJWtV6D-F51Y.roa (hash: REJDhZOwFyr4wdpkCheBE0DhoqN625ViwDnudBYPico=)
                          3: Sc-FyfdVDPaQqHGz-GI3fsuN6cM.roa (hash: zSZi5viNxy6Qez2EVg97kMrTwqojW2kb2exfumMpwjg=)
                          4: hkuhpnMVVYRgPxAr-LQ10OakoTI.roa (hash: oAtibnQ6KN2VeS7D1IHVgfHz1J3VS/wtW0fPG2i0OP0=)
                          5: zWj3o5G3sWSe1JA0gtPpMe0049g.crl (hash: aRk4Y5FNafsr4F5HNMeUBQ04zg8GOkbUG60QBo5LP0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 07:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cd:98:78:6e:44:3d:31:8a:10:a6:e1:41:6f:78:ca:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
        Validity
            Not Before: May 14 07:00:43 2025 GMT
            Not After : May 15 07:00:43 2025 GMT
        Subject: CN=da2c58844e74a30ad05149785ca4b75c7456c244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c0:d2:ae:8d:39:e4:b8:03:d6:00:9b:b4:38:
                    bc:08:20:ab:04:79:13:c9:e9:13:81:2e:58:aa:56:
                    8f:0c:67:44:34:6b:4b:b4:ed:b6:40:c2:8b:d5:ab:
                    42:a2:4a:bf:8a:52:60:6b:dc:c8:8e:9e:14:68:0a:
                    50:b8:97:fe:ce:eb:b0:c5:84:9e:40:31:03:55:21:
                    8f:de:d7:da:72:37:6f:c9:cc:7b:29:ec:e4:bc:5c:
                    0e:bf:92:48:ae:ba:8d:6d:8f:1c:95:53:59:27:ea:
                    7f:67:fc:78:e2:7e:18:03:3f:6f:d2:68:b9:93:a4:
                    2a:50:33:a7:15:2e:2c:c5:3c:c7:8c:dd:0c:8d:ba:
                    01:8b:21:fc:af:d2:25:7e:51:68:7b:24:f7:a5:f0:
                    f6:6c:ba:a9:35:3f:ec:c4:89:cb:b3:4b:83:61:90:
                    4f:1f:73:e9:4e:bb:42:a8:40:8c:ea:e0:4e:e3:b0:
                    00:69:e7:14:f9:28:89:84:98:aa:f2:b9:ba:5f:02:
                    89:0e:30:cd:3e:bd:1a:09:13:bd:95:ff:4d:fe:1a:
                    76:4d:6d:0c:07:e7:fe:a5:6a:1d:66:68:4d:4c:27:
                    38:6e:a2:65:62:75:5d:48:2c:a7:79:a0:18:28:25:
                    8e:1d:81:0c:95:2a:ce:bf:61:af:0e:a1:de:7f:b2:
                    f4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2C:58:84:4E:74:A3:0A:D0:51:49:78:5C:A4:B7:5C:74:56:C2:44
            X509v3 Authority Key Identifier:
                keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f0:6d:5c:b9:2f:3a:95:cb:f9:be:8b:09:d0:79:d9:c8:d7:
         ec:f8:a0:1e:c6:d7:3f:b4:e6:6a:c9:b7:71:d7:38:f4:df:6e:
         a4:b2:c6:e2:d9:1f:ad:48:7a:c3:09:6e:c9:b2:7e:62:bd:c5:
         25:0b:ba:94:da:c8:38:e7:39:4f:ff:5f:67:64:db:fe:58:39:
         53:01:0f:7e:5b:f4:84:f6:b3:e4:83:7a:3d:15:8b:06:ad:02:
         59:38:04:67:25:9d:7a:a5:88:9c:fd:04:69:8a:70:e1:94:9f:
         20:3a:f9:44:03:52:e1:e3:92:d9:ce:e8:72:f3:56:2c:76:62:
         f4:d2:d6:37:ac:9a:18:55:40:43:06:ad:26:49:18:d2:3e:a2:
         92:f2:c4:ea:d9:a8:06:36:98:cc:a9:8d:3d:1f:c7:31:ea:c2:
         44:e9:11:f0:f9:12:13:85:39:4a:0e:4e:a5:40:02:08:43:b9:
         ea:68:be:ad:90:07:09:11:af:31:f1:59:82:f4:39:e8:3e:4c:
         87:18:38:d4:1c:e7:da:a6:c3:34:14:df:4d:a7:e1:34:69:a3:
         25:68:dc:db:38:be:83:f9:32:c6:73:6e:6c:69:a7:80:16:b3:
         3f:8a:91:21:5c:27:5e:01:3e:6f:56:dc:ca:eb:64:6e:ed:59:
         e4:ca:2d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:24:52 2025 by rpki-client