Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
File:                     9n7U99NVdSgcF2yuPdy9QMxcHdY.mft (raw, json)
Hash identifier:          xH+eNIr9PXzKrR2jX4m/r93xqc9pUInfuYqT91OLYqA=
Subject key identifier:   8C:32:54:23:3A:FD:B7:0D:60:F9:34:DC:62:EB:BC:C6:B3:A8:74:52
Authority key identifier: F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
Certificate issuer:       /CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Certificate serial:       0196CE06212643B1D9A14429563959E8F573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
Manifest number:          153E
Signing time:             Wed 14 May 2025 09:00:30 +0000
Manifest this update:     Wed 14 May 2025 09:00:30 +0000
Manifest next update:     Thu 15 May 2025 09:00:30 +0000
Files and hashes:         1: 88-pt2hIN1dTOb7W_yyIcsyIKos.roa (hash: rXxfNXMHY0jcVNFeL7a/dvDj6ZDtDB0GLjdB35wLnIg=)
                          2: 9n7U99NVdSgcF2yuPdy9QMxcHdY.crl (hash: /ALrRgWv2jIozE1c2tMOFu6V55nRo5EHg//NXAwMSKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ce:06:21:26:43:b1:d9:a1:44:29:56:39:59:e8:f5:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
        Validity
            Not Before: May 14 09:00:30 2025 GMT
            Not After : May 15 09:00:30 2025 GMT
        Subject: CN=8c3254233afdb70d60f934dc62ebbcc6b3a87452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c2:f0:76:fb:76:70:fd:32:d4:bf:c3:e0:78:
                    69:b1:47:cf:2f:2a:ee:a3:55:17:36:be:36:b9:bd:
                    2a:72:2e:c1:cb:c0:01:9c:b4:43:74:e3:93:b9:b5:
                    d0:94:bd:82:90:cf:46:b2:8d:5c:e5:31:48:67:8e:
                    6b:ce:69:51:85:fb:bf:88:c1:51:e6:d0:27:4d:71:
                    32:06:5b:57:53:ea:3f:b9:6a:a2:4c:fe:2c:b0:62:
                    3d:85:bd:71:b3:b6:08:c1:91:2b:db:ee:50:3c:20:
                    de:6f:da:99:a9:f2:5b:c9:bc:ac:3a:ea:76:76:2c:
                    d2:ee:4e:87:d8:b6:e6:37:cd:6b:f1:16:30:9f:da:
                    3a:de:3f:c8:07:29:48:bd:fc:6f:bf:9e:92:3a:cb:
                    fa:88:d8:b4:2f:03:3c:0f:e5:98:38:23:be:6e:77:
                    dd:b3:4c:9e:83:f7:5d:03:39:3b:77:19:b5:1a:dc:
                    bf:d9:1e:79:49:e4:c6:8c:09:cc:87:6b:2d:4a:4b:
                    4e:ec:3e:66:dd:9e:3f:fd:72:55:e8:0c:73:88:54:
                    f6:59:4d:ca:a8:06:24:81:8e:1e:47:3f:df:85:cf:
                    ab:6b:37:78:ad:1d:dd:68:f0:91:34:59:eb:e7:bc:
                    ca:c2:7d:ed:f4:1d:84:48:b2:83:9d:dd:97:e3:15:
                    e2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:32:54:23:3A:FD:B7:0D:60:F9:34:DC:62:EB:BC:C6:B3:A8:74:52
            X509v3 Authority Key Identifier:
                keyid:F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c2:7f:60:f7:be:0a:5b:2b:03:7c:cb:b1:4e:a3:83:4d:a1:
         38:97:89:9d:db:2d:66:04:45:51:fb:a8:3a:5d:52:c2:b9:3d:
         06:02:2c:4f:eb:eb:86:5a:f1:53:33:24:0f:00:6b:62:91:bc:
         34:43:16:78:96:4c:74:64:a8:75:68:fa:c2:19:0a:a1:dc:4b:
         ca:00:43:fc:72:e7:21:6a:dc:c3:4d:11:e0:f0:a4:db:b7:26:
         06:fd:72:dd:0d:7b:14:b5:03:da:4d:c1:61:59:84:fc:e0:0a:
         72:0e:1a:63:52:a9:cf:e7:ad:ba:cf:45:0a:31:20:f9:b1:4a:
         91:4c:d0:31:d2:7b:ca:8a:3f:1f:2c:d4:46:a8:7a:72:9e:d7:
         83:3b:12:90:6f:6b:c0:7d:21:13:77:61:48:25:e9:e3:4d:f3:
         58:5b:67:18:88:15:5e:92:f3:b8:55:c7:c4:16:70:08:6e:58:
         ce:1a:04:76:3c:7c:77:04:0e:92:c7:e3:7b:fc:3b:3e:08:c6:
         5a:89:8a:33:eb:d3:b7:3f:a9:64:a3:3a:83:68:b4:2d:b4:a3:
         99:3b:a3:1b:88:76:7c:64:6e:25:e2:33:a0:43:28:ec:2c:67:
         d4:f2:4b:a4:1e:cd:0e:9e:8f:7e:41:7a:88:84:02:16:6d:f7:
         45:b8:c2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:03:31 2025 by rpki-client