Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
File:                     4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json)
Hash identifier:          jzaNNIk8crAHFrzfiNXn8k59+tjog5oV4soyFBVUD/c=
Subject key identifier:   D1:96:A3:2F:92:F8:73:94:23:61:2B:95:14:FF:11:98:D9:D0:AD:36
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Certificate issuer:       /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial:       0196C26FE5F75C95F4313BF0E204BAB43DD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
Manifest number:          1474
Signing time:             Mon 12 May 2025 03:00:35 +0000
Manifest this update:     Mon 12 May 2025 03:00:35 +0000
Manifest next update:     Tue 13 May 2025 03:00:35 +0000
Files and hashes:         1: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: +C4FzkLm71Qh64lO+uq3I8s+rb26615L2SDK/359Q3Q=)
                          2: a66Wq_cz1-opkUh3xxWdvnCXHIE.roa (hash: RBd7B7hKzSBV9gC+hmCCrVD1uw4jr8IoDZkTqDG8H1A=)
                          3: am2sy58F1CS8R1serePPA8VUSM8.roa (hash: mn9+spB9id4ITF5EVifryU58phMpNbZ14Htzb13CxjQ=)
                          4: mBtneH0apKymD1yidiviYwQz7bc.roa (hash: +okWaOCxw+vLPC+W7D2xJzjJ34ydGJtCuhpbcrxYg+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:6f:e5:f7:5c:95:f4:31:3b:f0:e2:04:ba:b4:3d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
        Validity
            Not Before: May 12 03:00:35 2025 GMT
            Not After : May 13 03:00:35 2025 GMT
        Subject: CN=d196a32f92f8739423612b9514ff1198d9d0ad36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2d:57:f9:55:82:76:58:18:68:0a:52:bd:3c:
                    5f:6d:b9:eb:78:88:98:cd:78:b7:c1:fc:9a:e6:d4:
                    de:d8:55:7f:97:31:c9:94:4f:01:34:89:51:e9:f3:
                    e1:29:03:bc:1a:3b:0b:39:33:01:44:c0:41:1f:c6:
                    63:88:c0:ca:66:8d:8c:2b:ae:63:44:00:14:45:61:
                    44:f9:78:ac:28:42:40:26:d2:7e:5a:fc:32:ff:55:
                    8e:67:61:58:52:bf:11:5e:57:93:1c:93:28:76:ae:
                    7a:77:e2:1e:0a:9c:c1:8d:56:b1:e2:2f:b1:c9:a0:
                    ff:24:f2:36:73:8a:39:48:10:cb:b4:c9:ab:cb:fe:
                    1f:18:40:21:52:b5:cc:4d:92:15:5d:96:22:92:07:
                    e9:71:a6:f0:c3:87:c7:45:99:87:15:af:71:5f:f5:
                    c7:1e:24:69:90:51:da:fe:6a:32:7f:5e:5d:eb:e0:
                    b8:6c:0b:43:e3:64:6e:a4:05:fc:17:fc:04:9d:a5:
                    28:2f:e4:03:4d:69:b9:11:24:6e:f4:cf:f1:c8:f8:
                    67:24:a3:a9:ca:3d:a7:7a:37:66:45:83:89:84:a5:
                    2b:e1:86:3f:9d:00:a9:ff:49:73:98:8e:01:54:79:
                    6d:a2:c8:59:50:48:5b:52:96:ab:35:d9:d8:49:6b:
                    7d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:96:A3:2F:92:F8:73:94:23:61:2B:95:14:FF:11:98:D9:D0:AD:36
            X509v3 Authority Key Identifier:
                keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:6f:86:59:d9:92:a7:5d:42:d5:54:04:c2:f5:d2:03:2d:5d:
         45:48:c7:40:67:d8:96:8e:1a:84:0c:a0:88:a9:cc:92:71:5d:
         49:ea:50:89:17:23:88:e7:69:81:6c:d7:7c:32:cb:51:15:c0:
         e5:3b:18:da:82:97:9e:55:59:86:b5:1e:ef:14:12:0e:10:9d:
         41:3a:2d:b9:4d:da:db:0e:4a:64:c2:1f:37:58:71:65:e1:e8:
         ca:7a:80:79:d7:22:96:18:9b:05:02:bb:8e:01:0f:42:c4:bd:
         2c:bc:79:2b:4d:e5:c7:ac:d5:6b:66:d0:a6:f7:f4:62:47:69:
         b9:04:f0:99:a3:51:7a:b4:c4:f6:65:80:88:32:67:59:e5:c2:
         0a:f2:96:b7:a1:4f:8d:41:d1:07:fe:07:3b:65:cf:af:31:9e:
         6b:de:44:54:4d:4e:b9:08:52:55:e3:1c:35:aa:e6:0a:de:30:
         40:9a:b4:1f:a9:1f:fc:a2:43:a6:30:35:16:14:49:6b:e7:f9:
         72:c1:9e:df:79:1d:d2:52:11:e9:35:15:6a:8a:a3:8e:a0:36:
         0f:01:82:77:82:e9:d8:f1:f5:67:6b:7a:06:43:6b:7a:cd:55:
         52:90:83:35:b7:8f:35:dd:21:cf:a8:ca:01:e0:0b:b3:43:0b:
         c3:94:7d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:12:27 2025 by rpki-client