Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
File:                     MduEfR2x4LLCwlUCIQ_1pxmWehk.mft (raw, json)
Hash identifier:          Y62wrdlxsehNsLIT+KN9VjSUgznBLVTwKnzXw6TiG2A=
Subject key identifier:   F2:62:E1:5D:7D:89:65:47:48:62:A1:25:14:7C:0E:CB:41:6F:22:B0
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Certificate issuer:       /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial:       0196B333A129DDFBF8810F0DF1CB64B957BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
Manifest number:          0DB6
Signing time:             Fri 09 May 2025 04:00:27 +0000
Manifest this update:     Fri 09 May 2025 04:00:27 +0000
Manifest next update:     Sat 10 May 2025 04:00:27 +0000
Files and hashes:         1: 0IHmyTelW8zpO-_QdR9UfSEkXAI.roa (hash: UlYSOxczUbkdfKJ9miYaE+QEa9fb9mQhLOlffEgcsoY=)
                          2: MduEfR2x4LLCwlUCIQ_1pxmWehk.crl (hash: 0Ekrd+ufEJnhzqEMr8vCf7oNqvSJQWjD8gWnkrrfqXs=)
                          3: PQvHlqxPOZ5EcVf6KsUmqrHycoQ.roa (hash: 3ksFdFv/Fa3gpXmdL0Lg1ZLkcfv0kVJRQQQ2mO5ywLk=)
                          4: ahJNP8kQoasOGfOn59FuyopzzTg.roa (hash: 6vRaJqB5sPcJZ3/fvcKuSD1RiGeRJgHPqC0FIBy6qGg=)
                          5: al6s6WgAHfcCaxm7dnRoKhGccgc.roa (hash: dELh70vEBgRpyjJwV+u67ZFF6OWlxJRy1hJNSwq3TqA=)
                          6: cz_i6inXtcUIjcIN9oJWb2HinvM.roa (hash: PQ0BLB4sI2B91vehL/dzDGr3GUpFGQqMElA5h/dx7n8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b3:33:a1:29:dd:fb:f8:81:0f:0d:f1:cb:64:b9:57:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
        Validity
            Not Before: May  9 04:00:27 2025 GMT
            Not After : May 10 04:00:27 2025 GMT
        Subject: CN=f262e15d7d8965474862a125147c0ecb416f22b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4f:7c:47:00:14:f7:cf:f7:09:41:6d:0b:ba:
                    9a:86:07:2d:29:f2:a3:e1:36:ce:52:b8:08:d9:15:
                    85:bf:ce:eb:4b:a5:e8:1c:b1:98:47:70:24:82:80:
                    72:64:ed:49:46:ba:fb:52:9c:02:4d:6b:ec:0b:47:
                    9d:f1:52:c7:3a:91:3c:ca:3c:90:67:a0:37:f0:f3:
                    86:35:78:a3:af:07:64:4d:05:d6:67:3b:7f:0f:9b:
                    25:3f:fa:3f:aa:81:5f:e9:3f:e2:52:01:7a:ce:dd:
                    cc:c7:99:41:54:32:71:a5:4a:5e:a1:eb:46:da:d3:
                    fd:a2:28:82:a2:6b:a4:57:f7:82:3c:e0:14:9f:03:
                    3e:6d:bd:44:6e:21:d2:8e:ac:a4:98:6f:24:92:eb:
                    a7:7c:0e:d8:1e:9e:0c:7f:eb:a4:5b:37:e9:c2:87:
                    1d:6e:ae:f1:79:bc:32:08:58:ed:bf:a9:95:41:7a:
                    cb:10:48:66:70:e2:7e:e4:a5:a6:a0:94:b6:0b:be:
                    68:2d:48:31:22:de:fa:f7:1d:1e:37:d3:24:ea:e2:
                    01:84:8e:8a:0e:a0:1a:c5:02:bd:7e:20:ea:e1:2f:
                    30:5d:dd:61:23:63:72:9b:45:85:52:42:4e:e5:88:
                    84:05:35:74:21:05:6a:49:27:56:b7:58:83:ef:62:
                    e7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:62:E1:5D:7D:89:65:47:48:62:A1:25:14:7C:0E:CB:41:6F:22:B0
            X509v3 Authority Key Identifier:
                keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f0:33:04:95:9e:49:f3:83:d3:c3:19:3a:02:33:d8:e3:5c:
         8f:22:4d:a6:aa:e5:5c:03:0a:6d:37:5e:52:6f:a2:40:25:77:
         dd:fe:1d:33:bc:f9:1b:de:71:7f:98:56:bc:c1:33:3a:32:8e:
         fb:a5:d4:9d:10:a3:b0:a9:14:8f:ca:04:84:df:67:cd:10:d0:
         37:5d:b5:73:74:ef:1b:78:e9:4b:5f:c7:d5:cd:68:88:9d:63:
         b7:67:37:5b:09:c2:28:84:43:a8:f6:68:40:18:75:c0:07:d7:
         a0:e5:17:7d:3d:73:e0:2d:86:bc:bf:16:d4:53:70:1e:10:9f:
         31:8e:59:3e:8e:56:8c:60:a9:b1:ca:66:e0:7e:37:6c:d0:d2:
         e3:8e:a2:8a:cb:e6:77:4e:c6:d8:d6:b4:ca:ea:2c:2c:3a:46:
         53:6e:38:3c:20:ac:2f:15:41:99:80:12:88:1b:3e:6d:af:64:
         a8:61:fc:a4:33:6e:20:fb:da:48:b4:f0:b5:fd:4e:1b:a3:90:
         13:5d:58:e4:99:38:62:79:df:79:e5:82:a1:61:17:eb:9a:68:
         f5:9c:18:79:e8:e3:7a:7b:9b:84:86:a9:70:f0:2e:c6:4c:7c:
         52:dd:d8:d1:d4:1e:74:70:ab:45:1b:2d:20:92:ab:a0:24:37:
         6e:53:6f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:31:42 2025 by rpki-client