Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft
File:                     fZZeprOcIq7CrS1NTAo6MT3x3vo.mft (raw, json)
Hash identifier:          mL0yRlyls/5TsUAKkemRy4weAjJjjZXEkCS/c8UAetY=
Subject key identifier:   F9:D0:4A:2D:30:04:97:94:A7:47:14:F3:57:80:07:4D:58:35:31:CB
Authority key identifier: 7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA
Certificate issuer:       /CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
Certificate serial:       0196B3A19232A89AB764BF9A8E5121254E18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft
Manifest number:          092E
Signing time:             Fri 09 May 2025 06:00:32 +0000
Manifest this update:     Fri 09 May 2025 06:00:32 +0000
Manifest next update:     Sat 10 May 2025 06:00:32 +0000
Files and hashes:         1: 5jihEGuQ4yw7LrN-GxhKRXWzO7o.roa (hash: i+yfzR8jSMTDKBjs/TXoC5+0uTvIRes38f4P8v9dk/U=)
                          2: S0vegGpuiCercYtclM_VH2iVx7s.roa (hash: ei9rkB9FlPql94JwrTYWOFRSXcUG8H3/4pXhvmG/1Ts=)
                          3: fZZeprOcIq7CrS1NTAo6MT3x3vo.crl (hash: z5ag46tNfmHJD3kG2S4vhMsiyR89/RrfC3TqjYffVN8=)
                          4: gZAbXdKIIXZyGHDR512yiOhKrvc.roa (hash: 4+QF/lBUbocOIUtLLdqUYJCroIpokm/YAFfvzHG47+I=)
                          5: mj4UpOOYclM_JjTHAP2KswbbaQE.roa (hash: fAJCCsd04w67kSJn49D770vpfkErruO7UmQMEWCwKcE=)
                          6: z9wFFZP_zA_tDeAiN8JtnO6v01o.roa (hash: i8cRhIUjXH5IXxi+AFlUMsquHQWq5em4btklWiJYWAQ=)
                          7: zQfM-JDEyYtnlHUMMTArONbOmM8.roa (hash: BsV8fCwOGo+p3hz5+JexWR4GrgumAGIe4ztslYYq+fQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b3:a1:92:32:a8:9a:b7:64:bf:9a:8e:51:21:25:4e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
        Validity
            Not Before: May  9 06:00:32 2025 GMT
            Not After : May 10 06:00:32 2025 GMT
        Subject: CN=f9d04a2d30049794a74714f35780074d583531cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:ee:9c:33:35:03:fc:dc:df:d8:c0:bf:c4:
                    1a:4c:11:f7:69:75:7d:78:c0:0b:71:29:69:44:fb:
                    21:16:1d:df:8a:3d:2a:64:a9:84:f2:8d:b1:29:b3:
                    c2:92:15:78:13:aa:c9:fd:f5:6c:cd:c6:b8:39:ca:
                    be:18:82:2f:f4:2d:8a:da:75:d1:85:2b:d0:36:c9:
                    55:fa:21:ed:9b:82:c9:5d:54:2d:36:57:6b:7c:93:
                    24:2f:7d:ea:6f:57:0c:08:4f:68:5c:4f:a2:5e:c1:
                    e5:95:db:51:7c:1d:12:db:17:69:6a:b5:e3:c8:9e:
                    48:91:e3:37:94:0f:93:71:d6:fa:e5:cb:5e:c3:db:
                    ef:82:46:33:b2:88:a3:06:7f:60:4c:77:a9:c0:77:
                    bf:f4:36:cc:51:2b:53:c3:df:bf:c2:09:de:ae:c1:
                    45:11:71:76:7e:56:e1:e7:9d:07:e8:0f:a6:e1:1c:
                    ba:cb:42:71:83:26:d1:2e:21:a8:80:1e:0e:3e:f1:
                    ab:19:43:84:87:13:74:a6:42:6b:8a:d4:4c:c6:ae:
                    d9:23:96:90:28:90:d2:7f:c5:d5:da:a5:34:59:7f:
                    83:20:47:f3:44:65:4a:3a:c6:29:42:10:79:ce:c6:
                    60:bd:23:51:a0:61:25:34:c9:5d:7b:a7:68:87:6c:
                    22:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D0:4A:2D:30:04:97:94:A7:47:14:F3:57:80:07:4D:58:35:31:CB
            X509v3 Authority Key Identifier:
                keyid:7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:60:62:af:57:9d:60:aa:36:32:99:d6:4a:4e:ff:74:55:c2:
         c0:5c:fc:d6:cb:52:08:be:f3:ca:a8:b8:9b:ff:48:ab:93:8f:
         26:fd:2e:ad:52:da:51:19:d0:3b:28:6e:fd:b9:7a:6c:1c:9d:
         1f:79:d0:19:1e:b2:62:89:70:3f:0c:61:25:9b:99:49:2e:31:
         13:89:d1:58:34:38:e8:1e:f3:a1:f3:cd:f1:e2:3d:52:0a:12:
         a2:15:5a:3e:25:7e:65:b6:98:58:0a:31:c6:b3:5a:d8:e3:e5:
         5a:0b:6a:b2:68:65:1c:ea:2d:ad:26:1c:a7:00:4d:86:30:6a:
         a0:0a:ec:95:f6:98:09:5b:0c:c7:49:85:36:ef:f8:96:86:46:
         28:b0:cf:10:eb:fd:ce:3c:a0:34:16:81:3b:eb:c4:2a:03:55:
         16:02:4f:e5:d6:c3:9a:c4:a7:ae:d6:af:8a:33:ac:36:d6:a1:
         d6:da:43:ef:01:79:f3:b4:f3:6a:bb:42:33:0b:b6:cb:99:7a:
         2b:24:87:bd:5e:84:74:26:55:f2:f3:c2:b5:0d:4c:cb:41:51:
         9a:21:9f:7d:f2:ba:a3:9a:22:94:6d:3b:e9:01:bc:30:3b:0a:
         81:90:6e:92:2a:86:cc:bc:f6:27:96:5d:2f:81:2f:59:57:fc:
         69:51:a2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:51:09 2025 by rpki-client