Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
File:                     CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json)
Hash identifier:          alKb97NF/z8ByJOl14bfu29cMbmGAFeTCUUCsbGnIh8=
Subject key identifier:   9F:A0:1F:D8:B2:6F:03:E1:09:10:A3:04:E6:08:0F:EA:D3:EF:F3:04
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Certificate issuer:       /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial:       0196B0694F4EB9D0DE5ACB41AE893B5C959B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
Manifest number:          10EE
Signing time:             Thu 08 May 2025 15:00:13 +0000
Manifest this update:     Thu 08 May 2025 15:00:13 +0000
Manifest next update:     Fri 09 May 2025 15:00:13 +0000
Files and hashes:         1: 5TdpsvGEzHHc2DVMKGITS46zP8M.roa (hash: NtR3z7rxkvkkgqfCc2bT1z0ch/WfYD2HGcwqrNfMm/k=)
                          2: 6rcNFpA9OUIHOHJZd3RQ4Nq4JOQ.roa (hash: 8DalHmkqlYHfZ/UiruC9ySCew9dMOULJFQbWBLs8o00=)
                          3: A0RJOA3D0QS8jyOdklsxwozEZks.roa (hash: sW0q/KPoEvaj+bjphgSA1v3RGwifbXQZawO4nY7ko3U=)
                          4: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: X0ke366CgGXRLHoJJ13XFd8MhnIc4iJBWpVOLt86/L0=)
                          5: J_GNQPWHaTopYauZz-X71VDCD30.roa (hash: mYWNHSJ/8l+aWGMPXqK6gzDUsBDut0UQO9etVhI8z0E=)
                          6: ivrBGL0q_NF31wGnb6OsQlrkSGo.roa (hash: OcT5ce9nz2OZqGwJctdjZ8/bty60h4IQcxLhct5JKGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b0:69:4f:4e:b9:d0:de:5a:cb:41:ae:89:3b:5c:95:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
        Validity
            Not Before: May  8 15:00:13 2025 GMT
            Not After : May  9 15:00:13 2025 GMT
        Subject: CN=9fa01fd8b26f03e10910a304e6080fead3eff304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:01:04:18:99:89:e6:e3:52:a1:80:17:cf:ed:
                    5e:55:1c:c0:cd:61:e5:da:3f:57:63:2a:7d:1e:fd:
                    d3:d1:47:c1:40:40:aa:82:b1:fb:52:78:62:07:25:
                    dc:d1:d1:84:d0:6c:89:3f:63:ef:d2:65:a4:5b:10:
                    23:c7:b0:ac:12:ad:87:16:77:b2:bf:e9:29:8f:d7:
                    4c:c4:80:a9:cb:88:51:08:59:64:24:a6:33:d8:67:
                    bf:ba:cf:3d:62:8d:db:40:30:a7:31:ee:f4:54:2e:
                    05:1a:a4:e2:88:8a:dd:d2:9a:e7:73:04:b9:f9:64:
                    4c:d1:ae:a3:62:ff:1b:10:2a:a4:23:6a:7e:b2:f3:
                    cb:3f:d3:7e:c5:17:d2:d1:7e:d6:5b:2b:99:41:f4:
                    b0:11:28:e6:42:d3:1a:40:d4:8f:f1:8d:e8:39:ec:
                    38:f9:2c:a7:1c:2f:f2:dd:78:14:d5:ed:07:90:87:
                    46:3f:f0:82:59:5d:6b:45:3a:ab:c4:cb:16:d9:85:
                    f7:2a:a5:14:20:7c:59:d9:f8:e2:68:c9:93:80:fa:
                    85:92:c1:64:0c:c0:76:70:08:13:b1:3f:c5:1a:29:
                    f7:8a:66:b8:a9:05:36:9a:c9:4f:ad:37:a3:e2:bc:
                    62:b2:35:72:e5:b0:66:47:b5:42:5c:56:1f:8a:87:
                    be:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A0:1F:D8:B2:6F:03:E1:09:10:A3:04:E6:08:0F:EA:D3:EF:F3:04
            X509v3 Authority Key Identifier:
                keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:11:20:d2:79:03:73:2e:36:1f:a3:6e:00:ad:08:f1:9b:4f:
         6e:f9:44:9e:5b:4e:a8:02:75:b0:8f:35:ef:fa:44:b1:c5:14:
         c1:07:4a:b3:89:c8:f5:80:d6:9a:4a:fe:d6:07:0b:f1:0d:67:
         ad:32:7a:3b:ee:0e:ca:fa:1e:85:ae:e1:aa:a0:9e:3a:3b:21:
         d1:f3:c5:c0:21:8e:5b:f4:06:15:70:70:a9:22:97:16:46:4d:
         9f:71:d7:72:7f:00:cf:23:30:92:1a:30:08:25:80:72:93:11:
         71:53:74:e6:2b:2a:d9:de:9c:24:f6:30:00:c3:20:e8:8b:c2:
         55:71:83:89:3d:8f:86:50:49:d3:ba:47:b9:cb:b3:0c:7f:36:
         2f:26:43:05:95:8c:0e:27:1d:10:5e:c5:52:82:41:3c:28:b9:
         98:16:15:34:7c:88:66:74:6f:04:ab:ad:f2:ad:b0:34:5c:9d:
         77:89:45:d3:d1:18:b9:65:95:d6:19:7c:c9:bd:c5:93:e3:6f:
         2c:ca:93:d5:2b:ea:98:18:12:52:82:03:ea:b1:41:8d:23:de:
         45:a8:0f:5d:dd:f2:50:7a:14:07:6d:64:e5:d8:22:29:19:87:
         4d:50:42:80:c7:2e:28:bb:9d:22:f0:5c:0c:bf:97:2f:b0:7e:
         c1:60:3d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:31:44 2025 by rpki-client