Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft
File:                     mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft (raw, json)
Hash identifier:          CyTNIkNhXJKxwuqXDVYmohfbZ4lK4pdm6/lOUL9MT0c=
Subject key identifier:   A0:B8:1F:1E:B0:0A:AF:3A:23:79:FF:77:27:BD:DE:DE:BE:53:D7:40
Authority key identifier: 98:45:03:D4:D1:81:40:B9:2A:A8:92:31:93:10:1D:0F:3E:AF:E2:C3
Certificate issuer:       /CN=984503d4d18140b92aa8923193101d0f3eafe2c3
Certificate serial:       0196D9D3696FBBE8F90D61F6039231AD4BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft
Manifest number:          0F9E
Signing time:             Fri 16 May 2025 16:00:32 +0000
Manifest this update:     Fri 16 May 2025 16:00:32 +0000
Manifest next update:     Sat 17 May 2025 16:00:32 +0000
Files and hashes:         1: CtjT3jVnXWmD83KR_4TWffaI4JQ.roa (hash: flK9Ib6/h/dfOz32Mluz/WYLhTwywQZxRxjgsE0wek0=)
                          2: mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl (hash: rDJywEtrax3UZk1XWZxmQJG66AyEiYSPC+9PJKIqUXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 16:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d9:d3:69:6f:bb:e8:f9:0d:61:f6:03:92:31:ad:4b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984503d4d18140b92aa8923193101d0f3eafe2c3
        Validity
            Not Before: May 16 16:00:32 2025 GMT
            Not After : May 17 16:00:32 2025 GMT
        Subject: CN=a0b81f1eb00aaf3a2379ff7727bddedebe53d740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a0:87:49:d0:3b:fc:32:7b:dc:4f:54:a3:df:
                    1c:ee:78:8e:cd:c6:63:6c:37:4f:bd:55:04:8f:ac:
                    c1:9f:28:6e:24:51:17:86:6b:76:07:58:44:c7:b2:
                    17:63:4b:56:4b:d4:8c:bd:cf:7e:a6:24:16:37:18:
                    5b:fe:5f:ac:ac:43:81:3c:cf:09:9f:6f:f5:ac:c0:
                    cf:e7:2f:9e:99:80:68:06:fb:13:b5:56:ea:78:bf:
                    bf:2b:29:9a:aa:00:14:88:41:2b:2b:e6:52:ad:9e:
                    20:90:90:a1:af:b0:36:f1:72:01:a1:e0:aa:1e:09:
                    8e:e9:e0:23:ff:43:fe:8d:0f:de:90:6c:e4:9c:d5:
                    3b:95:95:76:f6:12:f2:8f:7a:bd:a0:2b:ba:ec:c4:
                    9d:3a:4f:59:33:77:c4:99:90:e2:e9:5c:7c:a8:27:
                    d1:7d:a6:18:b5:ab:27:8d:c0:66:92:fb:0f:87:f1:
                    85:e0:c6:0e:61:30:90:8f:18:11:ef:34:98:63:a3:
                    6e:f5:72:6b:ee:de:79:66:35:2d:b2:a0:5a:06:d7:
                    94:28:38:2f:81:fb:a7:65:bc:ca:5a:d4:94:75:cf:
                    fb:d9:45:05:0d:9d:61:cd:ff:0a:fe:0e:6f:c0:3f:
                    80:2f:6d:64:c1:83:9c:09:18:48:21:5e:44:3d:79:
                    3a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B8:1F:1E:B0:0A:AF:3A:23:79:FF:77:27:BD:DE:DE:BE:53:D7:40
            X509v3 Authority Key Identifier:
                keyid:98:45:03:D4:D1:81:40:B9:2A:A8:92:31:93:10:1D:0F:3E:AF:E2:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:96:2d:ba:60:b5:30:ff:c1:04:38:ea:4a:54:87:10:aa:76:
         5a:cf:38:b1:91:33:3f:a5:04:1a:c6:15:9e:ee:e5:58:44:e2:
         38:1e:5f:2b:2f:fb:54:de:6a:45:b5:08:d1:90:e9:91:39:e3:
         29:24:6e:d3:96:35:75:c5:22:8b:cb:70:d0:b3:f9:ef:3f:b5:
         fb:45:a6:da:bd:00:14:45:18:2b:96:db:fa:e3:bb:af:39:1c:
         1b:be:df:bf:1f:44:b5:7f:58:40:fa:23:6d:88:85:f5:fd:aa:
         fd:23:18:71:b6:fe:57:6e:5b:71:e5:d0:4c:40:a2:5e:7d:2b:
         3f:97:f6:8e:f2:0c:c3:b8:c3:12:4b:b7:aa:22:b8:a4:ba:39:
         77:8a:3e:0b:4c:e3:96:4d:32:43:a2:81:ae:64:3e:0e:0f:2c:
         32:6a:db:45:11:10:4b:62:f0:d0:c6:3d:0c:b9:e2:13:ba:81:
         ef:13:ae:2a:28:00:81:70:66:4b:c0:87:42:77:41:16:f6:dd:
         bd:12:51:f5:a4:49:76:6d:8b:36:14:4c:c7:00:29:0e:c6:98:
         db:65:11:a0:9d:67:2c:dd:5f:dc:a9:eb:17:6d:20:53:be:63:
         5c:2d:0a:41:97:d7:1a:d5:c4:9f:df:bd:e7:91:b9:24:01:d1:
         db:c6:94:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:23:37 2025 by rpki-client