Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
File:                     MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json)
Hash identifier:          OuuXcFrzQ1C4u3u2ZgrZy4SFsvfmOyblekgt90nP5FU=
Subject key identifier:   F1:99:D9:CA:59:9D:22:44:CE:87:CD:3A:97:31:3B:80:4C:7F:D1:E8
Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
Certificate issuer:       /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Certificate serial:       0196B74758DA7EFD52A1003A6DAFA1A63A66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
Manifest number:          076C
Signing time:             Fri 09 May 2025 23:00:28 +0000
Manifest this update:     Fri 09 May 2025 23:00:28 +0000
Manifest next update:     Sat 10 May 2025 23:00:28 +0000
Files and hashes:         1: 6csp2LeD7vly2n1j-VpIEsucAhQ.roa (hash: WR+qcQQTkccFoOguSbUEIuw7HhStcNOST97gvk9zp7k=)
                          2: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: KFP0i736El5uJoj6RoNjKOGGr+I8IVDStClQs0uKnCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:47:58:da:7e:fd:52:a1:00:3a:6d:af:a1:a6:3a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
        Validity
            Not Before: May  9 23:00:28 2025 GMT
            Not After : May 10 23:00:28 2025 GMT
        Subject: CN=f199d9ca599d2244ce87cd3a97313b804c7fd1e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a4:ad:e0:c6:b9:1e:78:0b:57:35:ca:e7:bf:
                    f8:2c:08:f9:c3:90:79:34:9a:a8:a7:20:07:22:eb:
                    a7:0c:52:21:ed:cf:31:f2:94:bd:78:d1:0a:2e:df:
                    20:4e:74:de:04:39:86:54:72:d7:ee:02:78:80:e7:
                    74:54:42:d9:78:55:8d:c8:07:b2:44:ae:ad:95:16:
                    f3:06:0e:19:85:4a:53:9f:b9:07:00:39:53:2b:47:
                    87:62:0b:51:59:2d:9a:5d:c0:74:d8:59:1b:99:93:
                    12:93:61:8d:c1:a3:bf:6f:21:af:56:e7:c9:0d:9f:
                    ab:b6:df:b2:01:3d:ea:c0:19:6e:ba:58:87:34:6a:
                    55:70:51:3e:fa:91:a3:72:ce:47:49:7f:47:13:c9:
                    5f:be:0d:51:9b:c9:a9:e5:20:69:7e:0e:1b:7a:fa:
                    2f:26:05:81:09:24:35:96:7f:b0:1a:9a:9c:cb:7b:
                    6b:dc:df:53:99:a9:c4:95:28:38:c1:3b:4a:52:0c:
                    c2:7d:8f:5d:e7:35:68:ad:31:91:e3:54:0f:0b:06:
                    97:fa:02:77:bb:95:ea:0e:f2:37:d3:90:5a:45:e0:
                    dd:7c:09:03:24:ea:a4:d4:b8:bf:70:de:6a:21:2e:
                    60:4b:09:b8:0e:95:89:18:37:79:10:38:01:9c:71:
                    58:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:99:D9:CA:59:9D:22:44:CE:87:CD:3A:97:31:3B:80:4C:7F:D1:E8
            X509v3 Authority Key Identifier:
                keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:12:85:9c:a7:d6:38:4f:df:df:b4:78:9f:35:e3:e3:3e:ff:
         1e:a1:9a:85:e6:c5:b6:29:de:2d:2c:b3:17:57:1d:13:71:bc:
         65:29:cc:26:8e:7c:15:2c:05:0c:23:c8:37:3e:7b:6a:bf:4a:
         ca:03:68:24:03:38:06:88:b1:99:ed:8d:0e:df:e1:3b:1f:7f:
         dd:c5:a7:5c:98:17:37:c7:84:77:a7:d2:b4:8d:86:b5:38:59:
         f6:70:e4:b5:f6:45:44:31:81:a6:20:6d:28:b9:7f:dd:06:f2:
         a6:ab:5f:ba:12:f7:5c:f9:bb:14:31:c2:b3:ba:e3:0f:4f:7c:
         bd:c2:55:65:3b:64:49:90:b6:78:17:d3:06:53:c1:22:2d:27:
         ba:a6:34:8c:cc:18:a4:b6:9f:b5:4e:a9:7c:e7:2e:d2:1d:46:
         6d:b2:86:b2:53:f3:30:93:5b:73:ab:e6:75:32:fe:c1:28:bc:
         17:33:e9:50:d8:44:fd:5f:5d:77:a7:f1:78:48:be:ff:5e:25:
         6e:ce:0f:e5:e9:2d:2a:8d:d1:8b:f4:98:c9:f1:b2:fb:e4:ed:
         62:de:a8:0d:eb:df:77:b6:bf:86:c9:c0:c4:fa:f2:91:c0:a0:
         84:13:92:dd:d1:c3:cb:50:ff:51:60:27:52:59:70:78:df:e0:
         1c:7e:81:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:19:18 2025 by rpki-client