Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
File:                     9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft (raw, json)
Hash identifier:          xi7n2xvuCTFeDNQ2IJQ5dKXKZqOMJynriT8VmbGOeQk=
Subject key identifier:   CB:A9:D2:94:2C:D8:68:9B:21:E7:6C:B9:0F:CC:37:B4:06:F8:25:DD
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Certificate issuer:       /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial:       0196A46572C93C38544262ED0ACF3B564198
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
Manifest number:          1527
Signing time:             Tue 06 May 2025 07:00:34 +0000
Manifest this update:     Tue 06 May 2025 07:00:34 +0000
Manifest next update:     Wed 07 May 2025 07:00:34 +0000
Files and hashes:         1: 9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl (hash: Pz7CO/9gnpfc/PqVnP+XPoIY61ovKOgDJSUWe6e6lvs=)
                          2: DrQmBo0FJlrJoVNz6cvjHGXIPbw.roa (hash: jPCQqOInn6qb0ZqW36PJZt+zluVilNLrZjQ6O21hgVE=)
                          3: Kx43u91ottGxgmt7gDhfHxtVV6M.roa (hash: oAjaZj07dvWVjkqsm1WzLPiF2cbysKorTZmr79Z4Q6k=)
                          4: gWTmtVhx7E0cSGJMWbh0KdkVJLk.roa (hash: Ti/CZSFOtoIaq484ozrtbBvj7jlxko/Yt5KtEt0muLk=)
                          5: yNgJ74PHW6j6ShCLYVR80g-qs28.roa (hash: NFcociFY8RbRnIP6feXbGFrUtff0WpEOuuopuN1v+Ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 07:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a4:65:72:c9:3c:38:54:42:62:ed:0a:cf:3b:56:41:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
        Validity
            Not Before: May  6 07:00:34 2025 GMT
            Not After : May  7 07:00:34 2025 GMT
        Subject: CN=cba9d2942cd8689b21e76cb90fcc37b406f825dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:00:8f:54:84:6d:cd:50:1d:73:95:ac:e4:36:
                    cf:ed:9a:75:bd:e8:fb:4c:e5:91:45:04:b8:0a:b7:
                    51:86:b1:71:55:c6:23:c9:5f:21:28:95:94:b1:53:
                    70:53:29:1b:fd:d4:88:fe:dd:97:55:b1:a9:b3:50:
                    e9:96:38:31:96:82:2c:10:cb:42:c6:df:fa:a1:73:
                    97:38:65:35:d9:da:fb:e2:f0:aa:bc:14:07:d9:fc:
                    87:eb:23:7f:8a:3a:82:76:38:d7:fc:2b:ed:0e:a3:
                    54:a2:b5:3c:2e:12:a5:3a:4c:89:32:da:d4:cd:dc:
                    b4:77:2d:6c:63:30:c7:fe:7d:c2:74:e1:b1:8b:6d:
                    5b:3f:db:16:12:37:0e:f1:4e:b1:b7:30:63:bb:1b:
                    a6:f5:54:b4:72:58:4a:12:5b:e7:0a:29:d1:ea:38:
                    bc:11:95:a2:56:35:5c:e5:69:73:94:ee:e8:d0:82:
                    c7:7d:65:33:1d:7f:b7:ed:9e:de:c5:d4:a2:15:71:
                    82:55:96:aa:02:d7:3a:81:d3:b9:f4:94:a7:8d:8c:
                    6f:cd:17:80:de:eb:0a:d4:d2:23:d5:3a:64:82:7d:
                    37:4e:ac:8c:a2:d1:a3:db:f7:71:73:35:59:c7:78:
                    2f:85:ea:fb:04:74:16:08:61:22:6d:42:8d:f0:16:
                    a2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A9:D2:94:2C:D8:68:9B:21:E7:6C:B9:0F:CC:37:B4:06:F8:25:DD
            X509v3 Authority Key Identifier:
                keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:09:2e:e8:2c:f8:9e:ed:40:bf:d2:77:2a:e6:66:b9:f2:dd:
         c4:74:a9:d2:0f:9b:33:b8:fc:a9:ba:56:c0:69:1d:8f:3f:2b:
         a8:5f:88:11:5d:b6:53:a3:c7:3f:7a:47:47:b0:c0:28:d5:e6:
         17:08:02:f5:d4:81:ec:4e:62:1b:24:52:ab:c9:2d:91:1f:71:
         c8:d8:07:db:8d:32:5e:3e:2b:e0:d4:04:d0:53:d3:22:87:e0:
         5b:86:cd:31:5a:a4:65:fa:39:78:8f:1e:8d:51:47:da:8c:85:
         aa:c3:52:7e:43:4e:e0:f4:54:c4:16:8d:96:c7:27:05:b1:55:
         60:f2:ff:f1:9a:47:71:9c:d5:3a:4e:32:07:23:b1:8a:45:c8:
         b1:e6:51:a2:3a:e6:83:57:f3:9f:01:79:92:0c:63:5d:52:d5:
         9f:6a:48:74:f4:fe:65:c6:62:d4:79:75:e4:97:bd:4a:b7:84:
         71:80:92:d0:28:29:76:79:d0:4c:f5:92:3d:2c:48:d0:48:85:
         c7:85:86:5a:94:6c:84:f1:3d:07:de:6b:a7:32:09:ca:77:09:
         49:a4:9b:b1:9f:93:d2:cd:af:1f:2c:6f:95:66:c3:cb:5c:1d:
         a6:77:f0:cc:f9:5f:27:7d:65:56:a0:02:bb:bf:4f:6c:08:69:
         5d:65:3b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:47:26 2025 by rpki-client