Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
File:                     CeKvCM9uEuIwT7O97GTPvO2qhSI.mft (raw, json)
Hash identifier:          fzsM14RptVb0UEx9iorwKgL7tbxNIKynKrnHO0TXxzs=
Subject key identifier:   A1:12:A6:30:04:05:5B:CA:A8:AE:46:04:DB:28:7A:B3:E3:9D:B0:E3
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Certificate issuer:       /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial:       0196B6A2BB939B09706806179C68F2255CF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
Manifest number:          0FA6
Signing time:             Fri 09 May 2025 20:00:40 +0000
Manifest this update:     Fri 09 May 2025 20:00:40 +0000
Manifest next update:     Sat 10 May 2025 20:00:40 +0000
Files and hashes:         1: 9BZlV5u49Gak3QK5oEuLPOBSnn0.roa (hash: FmzCgS4aXNRr8JerLZUsfQlHdIEA6EKm/rMgvtNymy8=)
                          2: B6wSZJvSGeybR7CPqtyVhXyylu0.roa (hash: JHvST/m8T4zGrW1YqRbxakpRITmsR241Cez8p9x2uaE=)
                          3: CeKvCM9uEuIwT7O97GTPvO2qhSI.crl (hash: HkKyI8nNRNLTCVL4AL2h4kLmFC7iAiZKA0z9FWamVUY=)
                          4: HoNzXhT8lx7vw7JlMXDLD2qJC4o.roa (hash: cNxTbsYhGJbBaA5KX6zTYu/tMB/8NFnmb2pRJ5AhFSg=)
                          5: ao-pH_2txkXRm36Fqqb0zfVnxeQ.roa (hash: PbN0VPyFR+E4wVcHf4vZ5OY6UiGEFVo+Jh+vf+hGjQM=)
                          6: mEa7ci9GxscmRsk-oNcnX_tH1Ws.roa (hash: ooLE+dfj0M2cSMZSDMJWC5DsnnWyEmz/3Hgg0yiBDWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:a2:bb:93:9b:09:70:68:06:17:9c:68:f2:25:5c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
        Validity
            Not Before: May  9 20:00:40 2025 GMT
            Not After : May 10 20:00:40 2025 GMT
        Subject: CN=a112a63004055bcaa8ae4604db287ab3e39db0e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:30:ac:f1:0b:0e:66:9f:11:66:d6:67:92:
                    d1:d1:d4:5c:9a:56:b0:e1:72:ca:e7:8f:04:87:c2:
                    00:10:2c:47:7a:2d:94:68:07:fd:e8:4c:4c:4e:a1:
                    4b:5e:fb:a1:f8:01:8a:d6:54:79:cd:55:d5:6d:aa:
                    34:46:ea:fd:70:50:6a:82:f9:e1:83:d9:97:62:6b:
                    50:55:50:ef:d3:db:24:2b:49:1e:4e:33:f2:6d:da:
                    54:f2:09:29:b3:8b:f4:86:35:04:e2:24:ac:57:6c:
                    51:66:68:d1:b0:af:e5:0e:ef:34:27:57:6e:97:79:
                    39:fb:1b:9f:eb:a9:d3:bd:a5:47:cb:70:47:66:10:
                    0a:28:ce:27:53:3b:4a:4e:eb:0f:e0:17:0d:03:e8:
                    e1:26:1c:ac:92:9c:fb:e9:8a:96:06:5d:ef:72:39:
                    f3:54:a3:4f:f5:78:d8:60:eb:5c:be:7c:cf:25:42:
                    e2:5b:4e:27:b3:cb:1c:23:1a:6e:40:cc:24:12:15:
                    d0:95:5d:50:18:77:04:8a:d0:0d:1d:8b:6a:b9:bb:
                    63:1c:c9:56:05:f6:08:4a:16:97:33:2d:ba:c3:5b:
                    eb:71:08:e1:ba:37:5b:39:cf:18:42:4e:cd:2b:63:
                    79:82:cd:fb:ee:2a:6b:b1:77:d9:e1:90:59:bd:a3:
                    e1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:12:A6:30:04:05:5B:CA:A8:AE:46:04:DB:28:7A:B3:E3:9D:B0:E3
            X509v3 Authority Key Identifier:
                keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:23:a9:1d:f1:ed:2d:75:8f:01:7b:78:0a:0e:99:2e:0d:78:
         4d:07:3a:85:34:ed:ed:1c:3b:ea:74:f0:7a:18:c8:ce:d1:0f:
         dc:e9:42:86:bc:f7:61:a9:49:90:07:76:2c:d8:b2:b3:91:a0:
         9b:37:1a:d7:08:f5:fb:5b:3b:e6:27:fb:c2:75:47:95:52:20:
         3a:33:97:5a:f7:39:62:db:e3:31:1e:78:70:36:61:21:5d:ae:
         f9:09:33:12:4b:0d:2e:b2:05:23:b4:be:3f:b2:09:12:eb:4a:
         6f:2e:a2:b2:c9:1d:00:b8:48:6a:0c:fe:9d:ae:8a:e1:5f:30:
         ad:69:cf:9c:87:93:24:a1:bc:51:82:37:b9:72:71:a4:14:16:
         a4:04:0e:c8:9e:51:59:4f:f7:dc:12:ce:02:db:e6:8a:d6:0b:
         84:99:77:28:11:26:f2:31:e0:df:69:90:36:27:db:52:3f:89:
         28:65:99:1b:05:f9:47:61:f3:9a:0f:27:f8:ba:1c:ec:e2:e8:
         d6:a9:bb:75:eb:69:79:03:62:5e:e3:6d:d2:9a:7d:d4:7e:86:
         17:29:eb:a4:23:2a:1d:a4:74:d2:37:98:71:1d:f4:d0:37:2d:
         58:64:6f:d3:dc:92:a8:be:63:7e:c3:9c:d8:0c:e6:34:08:84:
         61:e6:e8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:49:55 2025 by rpki-client