Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          MOiVzD/P3/jqCHkROoT1yUGNXbQudsMNZ3gIJ11yd48=
Subject key identifier:   63:45:93:46:B1:1E:3C:F7:CF:BD:30:01:32:3B:61:B2:1D:12:A7:57
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       0196C3F0BFAACF24B2E275F94CE1F2AEF157
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          156C
Signing time:             Mon 12 May 2025 10:00:56 +0000
Manifest this update:     Mon 12 May 2025 10:00:56 +0000
Manifest next update:     Tue 13 May 2025 10:00:56 +0000
Files and hashes:         1: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=)
                          2: 6ef47TXoBdfjKnlsNsow8DBixKo.roa (hash: CJVWo8/zfulxwmsfO0I8Hpt8eJudz4hqVHD23gptH10=)
                          3: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=)
                          4: KbQ--oBtSgvSfZVrBwQ6M553Hwk.roa (hash: NJgK04btjY64hOecbKh54mIt3v+Yqupp2O5zCZPtgv0=)
                          5: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: ojJsfmSnQRn7s5GbyhTyTsrM/SJMFmUzHdK5b4bFz84=)
                          6: Oi1LQnm4lsa7_1hR1J20jJ6vxNI.roa (hash: SY2CzV8LXx9B2pkUZksUiYNXDfeS5dNBeKSh1IfycAI=)
                          7: ceO16qlffjwVmTDre4MTi9JYh1w.roa (hash: LdrSCC7KTOiFTOG9K1IEELZSSon5d8KH3uKvarSFJ6c=)
                          8: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=)
                          9: vVy9Mxdsvfnr1vUZ0-8wK4FbgB0.roa (hash: jxRXoh0wf+uALyoraEcw1RWqJaG6YYAjUQaSYyRezmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 10:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:f0:bf:aa:cf:24:b2:e2:75:f9:4c:e1:f2:ae:f1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: May 12 10:00:56 2025 GMT
            Not After : May 13 10:00:56 2025 GMT
        Subject: CN=63459346b11e3cf7cfbd3001323b61b21d12a757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:37:25:db:29:bf:3e:52:07:34:7f:ec:87:16:
                    8a:c9:03:e0:32:75:39:86:f9:f0:56:c5:4c:72:36:
                    91:45:2e:47:a8:a6:02:71:68:90:0e:ac:86:c8:7a:
                    26:86:b2:a8:ce:78:33:26:9a:57:d5:f7:aa:19:45:
                    9d:e0:d2:3f:ec:f9:5a:95:a1:20:8a:41:89:8e:84:
                    b9:84:80:07:43:90:26:f4:cf:2b:db:41:6a:ee:fd:
                    0c:41:43:82:2d:04:48:1b:f0:27:af:d9:3c:d2:12:
                    bc:d1:ad:d0:e1:37:9f:59:e4:61:a0:aa:a9:95:20:
                    7e:42:f4:22:a3:cb:34:97:9b:18:a2:24:ab:64:89:
                    d7:06:05:5e:f2:9b:d3:90:a6:0f:b5:ff:27:51:7c:
                    3c:a2:ae:47:75:91:0d:21:38:88:1c:de:3e:4c:b8:
                    9a:b8:14:85:f3:17:2b:77:eb:82:57:cd:81:c7:40:
                    9c:7f:0f:62:0f:da:e9:64:be:52:3b:96:85:94:83:
                    57:ef:c0:73:09:5f:a0:42:23:c2:ce:d0:f3:e6:54:
                    73:9e:f1:3f:a9:6e:8d:40:47:da:7d:11:20:21:cb:
                    fb:7b:be:5b:dc:da:ae:9a:cf:30:0e:43:0c:c8:0c:
                    f5:a1:7c:91:d9:a2:f0:19:1c:bc:35:81:1b:90:1b:
                    2d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:45:93:46:B1:1E:3C:F7:CF:BD:30:01:32:3B:61:B2:1D:12:A7:57
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:79:d5:d4:bd:37:fa:71:e7:45:79:f2:b3:17:a3:cc:77:d7:
         40:3a:03:48:94:4d:00:a6:5e:74:30:3c:0e:0b:22:da:df:46:
         0d:0a:b5:c7:13:48:d2:5d:40:ea:06:62:00:c2:11:0b:f7:fb:
         b7:4e:04:2c:20:0b:0e:26:5c:d1:31:62:f1:57:13:79:87:46:
         32:17:63:92:24:cd:5c:a9:4e:14:be:df:d6:13:a0:45:8a:dd:
         04:ab:bd:20:d0:db:61:86:d4:91:6b:00:a3:ba:30:b5:2d:d1:
         75:d3:7d:56:af:fe:ee:20:1e:27:b2:71:c4:70:47:15:35:be:
         03:be:f5:bc:47:30:15:65:98:6a:c8:dd:d0:0e:f9:c4:18:f1:
         2f:79:ec:eb:cd:37:a3:ac:25:d0:f7:c4:12:ab:88:0d:db:09:
         5a:f1:f0:96:fa:2a:9a:5d:b9:fc:8d:f7:57:9d:33:6e:11:11:
         85:d3:1e:7f:56:72:61:53:17:cd:44:e4:3f:e5:61:39:c6:43:
         9a:80:e9:81:ec:8c:27:a2:26:e2:e0:39:33:fb:cc:71:49:b3:
         23:0a:e3:56:9e:17:8f:28:ae:64:a3:b2:75:17:ea:b4:37:21:
         13:bb:87:50:52:ef:9b:3c:23:7a:24:d1:28:c4:5c:cf:2b:56:
         63:50:f1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:45:44 2025 by rpki-client