Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
File:                     mmCuS92dbvum6hHGBzfLoC3PHmA.mft (raw, json)
Hash identifier:          7g28HiTSY1KfWA2DLcMUSvCUqSh8PtukBA7H74kH4U0=
Subject key identifier:   54:FA:F6:35:E3:80:DF:92:D3:74:82:CE:F5:FC:3B:50:B3:8F:B0:D6
Authority key identifier: 9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
Certificate issuer:       /CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Certificate serial:       0196B7EC5198429B3F55D4933F60D5C8F959
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
Manifest number:          07F5
Signing time:             Sat 10 May 2025 02:00:39 +0000
Manifest this update:     Sat 10 May 2025 02:00:39 +0000
Manifest next update:     Sun 11 May 2025 02:00:39 +0000
Files and hashes:         1: mmCuS92dbvum6hHGBzfLoC3PHmA.crl (hash: i1iT/WeGV0c6ChwT4nMB8u+2eFTPp8oVLRqO/y8bjTs=)
                          2: u1q93eogqq8ewSFI28D24ujX7vQ.roa (hash: pvm3GrE3J/VbhZBCkLiKY82QF1T8mhNfTTlLlGr7usY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 02:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:ec:51:98:42:9b:3f:55:d4:93:3f:60:d5:c8:f9:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
        Validity
            Not Before: May 10 02:00:39 2025 GMT
            Not After : May 11 02:00:39 2025 GMT
        Subject: CN=54faf635e380df92d37482cef5fc3b50b38fb0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b1:51:b4:77:46:e0:40:92:83:19:6b:b6:fa:
                    f9:eb:5f:2b:b8:83:ed:f3:f2:1b:85:93:04:9c:91:
                    e2:4e:99:0e:33:a2:72:b5:dd:dd:24:41:98:c9:34:
                    a0:c0:36:e6:68:f8:1c:5d:bb:cf:59:57:0e:b6:95:
                    f6:74:7c:01:46:ae:2d:b9:95:67:e8:2d:dd:eb:9f:
                    a2:bd:0e:b3:97:f3:60:4c:ea:64:f4:d0:2b:e9:8d:
                    77:79:cf:61:34:b1:67:67:84:f9:f6:39:81:92:1d:
                    68:60:a6:85:c6:6e:50:55:96:48:e6:67:21:e9:52:
                    af:d2:a7:f0:db:3b:87:1b:8e:41:7c:8c:ea:51:47:
                    c2:80:e3:b5:dd:6e:3e:29:25:42:7a:a9:7c:c9:c2:
                    fb:f5:e7:12:a2:88:1c:07:3b:ca:aa:2c:41:c3:84:
                    b6:49:48:bc:de:b7:22:37:0d:3b:40:30:9d:42:dd:
                    a9:ac:23:7f:c5:07:5e:fc:2f:2a:00:3f:18:a2:b2:
                    a1:47:2b:37:d3:79:0f:96:f5:91:78:89:ec:f0:8b:
                    c7:97:86:41:56:9f:f1:8a:12:8b:1f:a2:4e:7d:43:
                    f7:8e:09:37:a4:fd:c8:3f:c6:d0:a0:30:c5:bb:fd:
                    83:93:6e:8d:43:62:53:cf:65:b1:e9:58:28:54:a0:
                    96:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FA:F6:35:E3:80:DF:92:D3:74:82:CE:F5:FC:3B:50:B3:8F:B0:D6
            X509v3 Authority Key Identifier:
                keyid:9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:00:32:06:83:08:92:73:51:66:4d:30:68:b4:fc:d8:17:86:
         41:c0:4f:73:58:cd:ae:48:09:da:23:e0:48:04:4c:5e:4f:d6:
         01:4a:75:c6:3a:dd:b0:a8:95:79:51:82:d8:0e:66:17:3c:24:
         73:6e:88:6f:9e:80:f4:b4:06:56:a3:9f:01:ff:08:67:f0:24:
         12:e3:10:1e:98:6f:36:83:38:34:56:df:2d:2f:80:1c:49:82:
         0d:e4:78:0e:16:f1:53:6f:e4:bf:6a:62:c8:f6:3d:4e:78:ed:
         e6:3b:8f:dc:c7:ea:49:e8:c9:5a:05:74:d9:95:e0:34:f4:8a:
         b4:04:aa:7d:27:4f:13:8b:7f:e5:be:9b:4e:2e:ee:63:fa:27:
         53:7a:c7:5c:4f:34:d5:61:12:2e:60:23:51:15:c4:a2:9b:e2:
         fa:7b:7b:48:40:ca:8f:93:be:e7:88:87:d1:6d:44:e6:05:c4:
         47:a2:90:0f:ba:22:5d:9e:d6:1c:79:bc:03:23:3f:a2:e9:20:
         37:8f:31:c5:2e:ed:a0:1b:ff:a5:00:ac:03:fd:28:17:06:0d:
         ac:bf:bf:f1:80:fd:96:f9:a4:03:85:58:87:1e:fe:91:e1:85:
         ba:f4:5d:5d:65:0a:bd:47:af:96:d1:55:8c:b1:45:b1:ff:b9:
         7d:98:a6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:26:19 2025 by rpki-client