Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
File:                     0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json)
Hash identifier:          PS9+iYGO4EHhckUBWL3qRiqE1H1GQPjqCBaFORY2Pmg=
Subject key identifier:   48:30:83:71:C8:4C:4C:C9:3C:00:87:87:7F:F3:39:15:7D:20:0F:37
Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Certificate issuer:       /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Certificate serial:       0196CC17C326DFB98F2EFC765863DC5B8767
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
Manifest number:          9E
Signing time:             Wed 14 May 2025 00:00:31 +0000
Manifest this update:     Wed 14 May 2025 00:00:31 +0000
Manifest next update:     Thu 15 May 2025 00:00:31 +0000
Files and hashes:         1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: mh74nabkQKWRHGsoXbmTz+0pIAe3oYpUcHAbR8uYWL0=)
                          2: 7YhU_vK5G08AkR9W5LfWHGVyypQ.roa (hash: RlhL4E2mBOXIjwSddZ4sZnexQ4dNTH+ubROkoPIYvn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:17:c3:26:df:b9:8f:2e:fc:76:58:63:dc:5b:87:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
        Validity
            Not Before: May 14 00:00:31 2025 GMT
            Not After : May 15 00:00:31 2025 GMT
        Subject: CN=48308371c84c4cc93c0087877ff339157d200f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:37:30:11:9d:e0:52:5f:a2:6c:dc:62:04:26:
                    aa:ff:be:21:b7:34:b4:f5:ef:e9:1e:e0:66:5e:77:
                    e4:3c:bc:94:39:ab:1c:b2:9b:dd:d8:cf:07:3a:53:
                    cb:ff:85:9b:46:cc:23:b5:82:b7:cf:10:79:44:9c:
                    93:a2:0f:02:42:c7:1e:06:b9:ea:84:56:13:84:42:
                    22:f0:09:56:63:7a:15:13:bd:c2:1a:3e:23:13:d9:
                    2e:5e:d0:e2:cf:65:b2:a9:fb:ca:6a:a4:37:e9:81:
                    da:5a:38:f9:bb:62:96:56:1d:83:f8:b7:ea:1a:42:
                    0c:f8:7a:79:9d:a6:a7:6a:48:b0:a6:83:f7:51:f1:
                    f3:24:47:2c:a4:89:3d:de:6a:ef:11:15:50:59:22:
                    49:f4:4f:ba:7f:76:32:3a:0e:db:f6:c0:e2:97:bb:
                    d7:91:75:f4:b7:11:c7:7f:17:93:e0:e3:9d:be:6f:
                    b8:08:fa:62:41:00:1e:86:f3:62:91:84:01:98:ca:
                    39:ff:03:ae:eb:69:1b:fc:30:da:7d:e5:ee:1d:fc:
                    43:10:77:37:a8:6f:d8:11:ba:48:16:a9:40:3b:d0:
                    b9:ef:04:0c:06:32:dc:a9:27:d4:1b:c9:cd:00:3d:
                    57:17:d2:d6:b3:8e:a2:40:e7:ed:2d:45:d2:5d:7c:
                    66:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:30:83:71:C8:4C:4C:C9:3C:00:87:87:7F:F3:39:15:7D:20:0F:37
            X509v3 Authority Key Identifier:
                keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:84:7d:8a:f4:6b:f8:82:cf:58:72:1b:91:64:b7:ef:55:55:
         cc:63:a5:d9:39:7a:75:da:d0:2b:0b:b8:d8:39:df:00:26:ee:
         5d:4c:ba:63:bd:59:7b:f0:69:e7:5b:54:cd:b9:2f:3c:8f:6b:
         8d:74:c9:56:a3:6b:8e:45:b7:02:87:21:2d:03:26:90:77:6a:
         fd:c5:72:e5:29:49:6e:24:f5:0e:87:92:7e:87:d2:cf:c4:eb:
         89:00:ae:b0:ef:d4:01:64:cd:a1:d5:67:09:8d:d7:a7:11:e8:
         a2:50:3a:01:81:77:54:d9:80:08:de:8a:3b:70:e3:17:f6:75:
         da:63:a4:a0:11:c9:ea:3b:f9:49:85:55:82:a7:c1:94:0f:9e:
         d2:0c:df:47:06:c3:bc:5d:a8:98:d5:f3:bc:a5:5b:4e:7a:4d:
         09:c7:35:7b:d4:f7:47:da:09:63:48:38:c9:ea:e8:f7:5d:51:
         24:33:1b:c4:7f:79:f8:23:6b:77:c7:77:b9:de:3f:6b:b3:72:
         79:bc:cd:7f:57:d6:71:76:86:94:7e:2f:3e:af:7a:c0:82:b6:
         c8:d3:e8:ff:70:9d:ce:7a:d2:50:2c:84:81:e6:69:15:3f:1e:
         1e:48:fc:d4:4c:dd:b1:87:cc:a9:dd:bf:d8:76:bf:4c:f9:64:
         c0:81:8e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:06:04 2025 by rpki-client