Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
File:                     Mo1NdPJBWjV_502-BA8BVPHaz3w.mft (raw, json)
Hash identifier:          fIxMGiJ/b+rAl4R+YN58ksSceL+QnSN7VlgE3SbSYfI=
Subject key identifier:   40:25:ED:2D:91:B2:BD:3D:7C:92:99:2D:15:3D:2C:DD:AB:25:A1:EB
Authority key identifier: 32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
Certificate issuer:       /CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
Certificate serial:       0196AE0DBD309BFDABA1160EFAE27D46F2FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
Manifest number:          08AC
Signing time:             Thu 08 May 2025 04:00:58 +0000
Manifest this update:     Thu 08 May 2025 04:00:58 +0000
Manifest next update:     Fri 09 May 2025 04:00:58 +0000
Files and hashes:         1: K-39Hqy0AFDZY_cxbUsSzlTGpbc.roa (hash: HOWSSaTxDqgiwOmso54SMRF/DSbrMg9/uUoQhZYJC/c=)
                          2: Mo1NdPJBWjV_502-BA8BVPHaz3w.crl (hash: MI73olxeLlcg5mAWLVZonKIu3/yjb0QyD4bTC3JCK8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:0d:bd:30:9b:fd:ab:a1:16:0e:fa:e2:7d:46:f2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
        Validity
            Not Before: May  8 04:00:58 2025 GMT
            Not After : May  9 04:00:58 2025 GMT
        Subject: CN=4025ed2d91b2bd3d7c92992d153d2cddab25a1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0d:28:1d:68:42:5a:87:d1:7a:45:67:22:c6:
                    18:31:8b:3d:96:6f:51:15:40:85:62:0c:02:0c:52:
                    fe:c0:6f:97:ac:39:45:ed:d0:1d:02:23:a0:63:23:
                    15:e1:20:9b:6e:f2:f5:f8:79:2b:e9:1c:3f:5c:4f:
                    c6:83:ae:db:a0:f7:30:9b:b7:92:58:79:fb:bc:71:
                    47:3e:b1:17:86:d5:06:6f:1e:49:3d:21:19:d5:6a:
                    7c:6d:8e:e4:95:8c:7e:4e:0b:3e:6e:14:93:d6:95:
                    e4:67:eb:46:c9:4c:83:a1:9b:fb:4c:17:e9:c3:39:
                    ec:c9:44:45:62:33:ba:62:61:ec:4a:61:05:a5:4f:
                    cb:f2:27:0a:a4:00:7e:57:5c:73:21:a4:a5:d4:62:
                    54:74:b6:ff:40:6a:ee:74:fe:df:70:7d:26:db:ed:
                    a7:39:cf:a9:9e:34:73:d3:a2:69:77:90:97:04:3f:
                    86:fb:a0:db:19:b4:85:b9:e7:0c:a1:c6:28:cc:25:
                    d6:8a:c8:f9:9d:8a:de:a2:3a:d9:cd:3c:82:7d:a9:
                    52:e8:d4:6e:f7:55:df:32:81:61:5e:c2:f2:b2:83:
                    ec:07:64:78:05:ae:5b:ce:c5:1a:78:4f:05:80:d0:
                    7a:5c:f8:32:4b:c1:23:b0:1c:d8:d2:50:f9:94:23:
                    cd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:25:ED:2D:91:B2:BD:3D:7C:92:99:2D:15:3D:2C:DD:AB:25:A1:EB
            X509v3 Authority Key Identifier:
                keyid:32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c5:e2:19:56:1b:38:9f:a7:4e:33:9e:81:98:da:cf:7f:a6:
         cf:2e:10:f2:b7:0f:ee:bb:05:df:d3:f5:8d:05:68:be:5a:4b:
         de:0c:a1:0c:70:31:9b:22:99:16:66:ff:35:4c:e4:04:84:a8:
         a5:1a:13:16:10:5a:d3:93:8d:7f:d9:4e:0c:3b:7e:46:26:f0:
         ef:7b:a6:e9:ec:88:72:2f:4e:c4:d7:53:4a:f9:10:fa:2d:95:
         fd:c2:e3:a8:3b:77:78:a9:6c:21:8b:a8:07:4c:3c:2f:94:7b:
         09:43:cc:33:ff:0e:d0:09:58:9b:fa:88:0e:7d:cf:3c:62:c4:
         12:27:87:15:84:44:f0:3e:50:f5:16:46:41:31:46:e6:f2:ed:
         ca:f6:d4:2b:80:d6:8b:4e:2a:9f:be:c8:74:ed:76:1f:3c:8d:
         77:2a:14:f5:57:d0:9d:01:54:9c:bd:df:aa:ab:00:d1:a1:69:
         2c:31:c5:12:87:1e:4f:cc:37:6d:92:b1:85:3f:0a:73:96:90:
         49:f3:40:9a:f5:44:91:09:b5:82:04:74:64:69:81:4a:58:b1:
         77:34:6d:68:2a:2a:82:d2:c9:2e:b4:c5:d5:53:4a:90:ce:30:
         c4:9c:5e:b1:93:1f:a6:97:bf:ef:26:65:86:49:56:d9:10:93:
         7e:75:cb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:03:48 2025 by rpki-client