Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
File:                     ml52-SnSG1hvQuMPfZsAOZs9y_A.mft (raw, json)
Hash identifier:          Rq2FMNh2v8dTtUq45I/G88RgTQov+SxcJHIt7RDwTBk=
Subject key identifier:   BD:04:F3:E1:DC:5D:66:07:9A:8C:B2:DA:AF:C9:27:D8:DB:B8:ED:43
Authority key identifier: 9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0
Certificate issuer:       /CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
Certificate serial:       0196C7CD76A3089C0204113E03B98BB39CE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
Manifest number:          02DE
Signing time:             Tue 13 May 2025 04:00:53 +0000
Manifest this update:     Tue 13 May 2025 04:00:53 +0000
Manifest next update:     Wed 14 May 2025 04:00:53 +0000
Files and hashes:         1: lNqtvqUZifhN9hUTQHsN8rzDv6s.roa (hash: noJIwI7/Q+WHXTBLIOr4/ymrWUykyqujMSct/kdt/UE=)
                          2: ml52-SnSG1hvQuMPfZsAOZs9y_A.crl (hash: X2SKQWbb7aTz9Nf3Pns8EKbv9swNCoEoQw5hrjRxz/A=)
                          3: sLN0Xk8eYZ3fOkEohN2U_OcDnBE.roa (hash: hLQ2+Hv/BslGw+2RJD0A2omXlm9351c5s36b6sRZHRM=)
                          4: tbYCEHCORQD2jU1FhjpVeyl7yzw.roa (hash: UJRgmyhwhn7tm70C5e/aIyFO87+Jd/xNlqZSp90NpM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:cd:76:a3:08:9c:02:04:11:3e:03:b9:8b:b3:9c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
        Validity
            Not Before: May 13 04:00:53 2025 GMT
            Not After : May 14 04:00:53 2025 GMT
        Subject: CN=bd04f3e1dc5d66079a8cb2daafc927d8dbb8ed43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:60:75:14:de:64:5c:ff:58:c5:a3:f8:b0:46:
                    13:35:be:d0:55:5b:cd:1a:c6:c8:65:3e:5e:f8:49:
                    8d:12:97:e4:01:84:86:e3:59:10:5e:93:ad:6b:a1:
                    0d:12:20:0f:13:60:7e:db:c5:ee:21:d3:c1:1a:b3:
                    80:f8:a6:d5:a6:f7:96:de:0e:50:e5:18:01:6d:3a:
                    37:ee:25:46:b0:eb:58:b5:5c:13:da:6f:c5:ac:a6:
                    b3:d7:4d:d7:96:35:e0:88:df:37:f3:d0:bd:46:61:
                    a5:4f:7e:35:f4:0a:47:89:a8:0c:35:9d:f8:31:55:
                    b6:7d:c2:85:3c:45:7d:5c:b3:16:e6:28:c2:7d:01:
                    4c:6b:20:34:22:ac:38:00:ac:32:53:05:9f:85:ac:
                    83:c2:ed:1e:c7:95:71:d0:58:1f:62:b6:79:0f:d3:
                    9f:35:ab:50:bb:22:f6:3f:be:08:ce:88:9b:6c:64:
                    0c:d0:43:07:28:f9:c0:aa:16:c1:40:d9:d3:4e:e5:
                    c1:a2:35:fd:64:33:31:77:6a:e7:d1:86:0b:f5:7c:
                    50:65:e7:a6:46:de:cf:41:02:7c:45:4a:e7:bd:47:
                    67:96:41:49:11:c5:ce:f4:96:f5:90:f1:fc:cd:25:
                    2c:74:e3:67:11:9c:0d:a6:7c:9b:8e:9a:03:ce:47:
                    29:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:04:F3:E1:DC:5D:66:07:9A:8C:B2:DA:AF:C9:27:D8:DB:B8:ED:43
            X509v3 Authority Key Identifier:
                keyid:9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:6b:99:cb:de:a8:03:c9:69:a3:d8:a2:86:68:4f:4c:76:df:
         f4:b1:d2:3c:00:9d:11:7c:15:d7:70:85:d5:d9:01:05:cf:08:
         1c:bb:da:c8:06:ae:9e:1b:a7:8e:ff:a4:91:32:f6:a1:4f:60:
         37:4a:1e:92:fa:d6:c7:fe:f8:7e:52:3b:58:75:ea:89:fa:a9:
         2b:f2:21:15:8d:98:03:6b:f9:9c:7f:63:e6:74:b0:33:fc:7a:
         4c:41:4c:ae:4c:96:c2:08:b1:d3:d2:b7:1e:a2:f6:d2:5f:39:
         b7:5f:a8:11:f1:8e:6a:b3:12:37:cd:53:1d:34:5a:79:5b:ac:
         27:75:d3:44:49:d2:14:c3:40:9b:d5:69:7b:05:cc:fd:2d:2d:
         95:f3:ba:a7:17:29:10:2d:d3:8c:b2:aa:c4:2f:f1:67:d6:b7:
         e5:7d:33:be:f9:a2:0a:c5:8d:f9:fc:3b:c3:24:16:58:ca:8e:
         a5:76:89:24:13:0b:fc:7b:d5:cd:cb:bd:e7:86:88:37:2c:f4:
         52:e0:5f:10:48:f2:05:66:4e:95:79:93:cc:c4:bc:cd:f0:9c:
         64:6f:79:71:6d:fa:26:36:0a:a3:a9:aa:88:48:1a:56:a8:fe:
         f5:c5:1c:c0:08:74:01:b7:76:fe:52:a3:f8:d5:e1:de:19:70:
         dc:96:4f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:23:56 2025 by rpki-client