Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
File:                     mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft (raw, json)
Hash identifier:          bztG+QfVf/v/h7oYHLgyRjKAhfUwewjlS1g+0UdaMuk=
Subject key identifier:   EA:39:90:40:93:98:FB:B5:47:17:F8:B9:93:94:55:0E:41:5C:19:DB
Authority key identifier: 99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D
Certificate issuer:       /CN=998674263fccd07f684e1e199302eeefe783fb3d
Certificate serial:       0196B8235898C3E9088D7E0F30CB88963B93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
Manifest number:          0A62
Signing time:             Sat 10 May 2025 03:00:46 +0000
Manifest this update:     Sat 10 May 2025 03:00:46 +0000
Manifest next update:     Sun 11 May 2025 03:00:46 +0000
Files and hashes:         1: LB9yxSJR9ouxobcPst7y075Gi24.roa (hash: 9cHQrj6vkKZZg+caaJv03RON5UELRQ6rlqWUQeFM15Y=)
                          2: mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl (hash: 2wWaL98YwIhp4r/TWTWGxFJiHPxCyjvS8OVzfM/jXEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 03:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:23:58:98:c3:e9:08:8d:7e:0f:30:cb:88:96:3b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=998674263fccd07f684e1e199302eeefe783fb3d
        Validity
            Not Before: May 10 03:00:46 2025 GMT
            Not After : May 11 03:00:46 2025 GMT
        Subject: CN=ea3990409398fbb54717f8b99394550e415c19db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b6:13:2b:f8:14:46:3a:44:fe:40:fb:71:6a:
                    47:9f:bb:43:f4:29:79:d3:7e:26:fc:29:9d:04:cc:
                    07:25:d6:41:f3:60:77:a6:9d:d0:dd:6e:f0:f0:8f:
                    44:eb:a4:7c:db:53:a4:b5:d8:59:65:f1:15:9a:5b:
                    48:40:92:49:33:d6:b1:96:62:02:5c:47:dd:34:b9:
                    79:a7:da:31:e8:44:19:43:f1:94:e3:b3:b0:67:ab:
                    c9:9e:35:5f:80:77:c3:35:ef:7e:6b:c1:91:c1:13:
                    80:93:58:21:79:5b:30:72:8c:d8:c0:d1:2e:8b:15:
                    62:ac:0b:40:4d:70:ce:6a:c8:6f:67:40:b7:d7:ee:
                    d5:44:5d:0c:cf:ae:00:66:0c:9c:5a:bc:04:62:e6:
                    4d:38:e9:9b:ea:03:81:7f:72:ea:10:ea:ac:cf:0e:
                    70:83:ea:fe:f5:6b:1c:7f:fa:ac:c7:5c:13:18:82:
                    09:dd:db:8f:82:3d:37:4a:84:58:ed:6b:9a:af:be:
                    2a:cd:76:e9:74:e1:e8:09:e9:c6:56:bb:ee:09:ba:
                    40:e2:96:d1:02:38:7c:79:de:c9:c0:d5:4b:f7:af:
                    72:bb:99:e8:1a:c3:37:c4:d7:d5:82:36:db:84:56:
                    5a:a1:af:09:74:03:25:18:45:75:fe:f8:ed:1a:6d:
                    49:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:39:90:40:93:98:FB:B5:47:17:F8:B9:93:94:55:0E:41:5C:19:DB
            X509v3 Authority Key Identifier:
                keyid:99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:20:76:fd:6f:b1:6e:98:af:4f:7b:1c:19:0b:34:a4:8f:4a:
         2c:cd:3f:0a:15:f8:6b:e4:40:8c:d3:5f:39:aa:36:02:31:9f:
         e4:b8:3f:53:1b:f7:75:b7:05:d7:66:0b:38:8c:f7:b0:5a:03:
         29:de:73:4a:a4:55:97:56:b4:8c:fa:42:dc:c6:a0:9d:5c:cf:
         bd:e8:9a:07:68:e3:b3:f0:18:f4:78:37:48:3a:4e:73:c7:77:
         9f:6e:4f:9e:0f:32:3d:20:0d:be:51:52:a2:c0:f1:af:4b:70:
         f9:cc:a6:f8:03:83:23:cc:4a:ea:78:e9:36:f5:bc:21:44:ce:
         7b:30:fc:7c:35:eb:f5:de:80:3c:d3:d4:1e:b9:c8:69:33:e0:
         f3:c8:6b:6b:4d:c4:fa:e4:bf:19:18:7c:2d:6f:b5:0e:39:ba:
         3e:41:81:99:93:ea:e7:e1:11:0c:f1:d6:95:a8:e7:09:08:86:
         7b:05:8e:61:3a:aa:37:63:c7:ea:40:b1:98:67:ba:90:3d:66:
         44:e4:39:c7:1d:8c:de:f1:fb:9b:a5:e5:2d:97:c3:20:dc:3b:
         1c:b2:7a:0c:6f:ff:b4:9d:aa:e0:d5:00:2d:1d:5f:4e:cf:1f:
         ca:d3:c3:9b:28:a1:04:72:23:a6:03:dc:97:35:e2:f5:0e:44:
         a0:3b:0d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:46:22 2025 by rpki-client