Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
File:                     mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft (raw, json)
Hash identifier:          EdrZz6WyGvNZOqw9IRHx4S/H7guYnlYgGZhYQiuefQM=
Subject key identifier:   89:A1:A6:81:21:02:AD:DD:0C:1B:B4:25:7A:25:9B:9F:14:F1:15:A2
Authority key identifier: 9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
Certificate issuer:       /CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Certificate serial:       0196BC6E86DEA7E213BDCA7553B6825A7CF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
Manifest number:          135B
Signing time:             Sat 10 May 2025 23:01:22 +0000
Manifest this update:     Sat 10 May 2025 23:01:22 +0000
Manifest next update:     Sun 11 May 2025 23:01:22 +0000
Files and hashes:         1: 0aA52a05uApLKY3CXNmnXhwKrks.roa (hash: MeSVjVqbWBXWuoo0WV7N+n6x9g24v2DXI6O3Ubp3bGI=)
                          2: mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl (hash: Ay4fhBQfxpiaIQR9b3i2aouYgKzDWgcaQ2R8cQlczF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:6e:86:de:a7:e2:13:bd:ca:75:53:b6:82:5a:7c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
        Validity
            Not Before: May 10 23:01:22 2025 GMT
            Not After : May 11 23:01:22 2025 GMT
        Subject: CN=89a1a6812102addd0c1bb4257a259b9f14f115a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b4:85:75:78:21:92:92:20:45:f8:02:06:ac:
                    8d:a2:f7:df:2e:3a:4f:42:ea:16:c9:e6:7b:9d:8d:
                    fa:71:a8:20:07:05:ec:46:77:62:8e:7d:32:0f:9b:
                    26:7b:07:e2:ae:dd:56:95:4f:e5:1a:1d:6b:1d:3e:
                    79:de:43:95:d9:39:a3:3b:6d:25:6a:82:af:0f:57:
                    78:18:8a:ed:01:2b:18:e1:cd:a6:4b:2e:e0:d0:8d:
                    0d:d1:62:ef:89:4f:6b:0c:df:aa:1c:35:4c:31:af:
                    ed:58:a4:ab:b1:0b:75:39:59:5f:ab:f6:d0:dc:81:
                    20:40:55:57:ae:c8:9d:d9:1d:38:70:cb:6d:36:b5:
                    23:a4:1c:64:18:90:30:cd:f0:97:a3:21:8f:8b:01:
                    55:10:46:b5:3d:9d:9e:91:2b:a0:c3:ed:52:f0:ad:
                    6b:48:a6:6b:59:b9:97:a4:48:20:10:2f:01:a2:a6:
                    e0:39:c3:8d:0c:94:4d:7a:ad:f4:51:f4:3d:b5:a8:
                    da:c1:9c:ee:42:c0:2a:35:25:f6:33:c2:e6:9c:1c:
                    84:3b:59:e2:83:a3:7c:6a:2a:3e:03:cc:ed:18:d1:
                    44:7a:e1:af:86:b7:50:0e:df:a8:b1:b6:c1:27:67:
                    61:52:e4:ed:18:f1:ec:f7:41:6c:7b:47:b9:47:20:
                    00:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A1:A6:81:21:02:AD:DD:0C:1B:B4:25:7A:25:9B:9F:14:F1:15:A2
            X509v3 Authority Key Identifier:
                keyid:9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:5b:fe:8e:bc:2c:87:a9:ab:f5:d1:ae:e3:f9:5b:c7:76:51:
         84:3e:7f:0b:53:b4:04:00:b5:29:96:5a:d3:ec:21:41:11:21:
         f8:9f:ca:8f:4e:b1:ce:1b:cd:f3:a2:e6:23:66:1d:a0:57:a2:
         4a:c6:3e:9b:fa:da:75:35:10:19:e9:28:ed:91:2a:91:be:59:
         4f:b1:30:2e:14:bb:95:c1:fc:18:58:30:cc:be:72:08:23:1f:
         e5:a6:da:e9:89:57:3e:62:31:70:69:d6:6b:a2:fb:fa:9c:ca:
         b6:14:56:a9:4b:80:4d:80:e2:e7:b9:9a:fa:17:5c:6e:01:8c:
         03:d2:25:34:f3:5b:da:39:cc:47:c6:8a:14:7a:d4:48:93:43:
         ce:fd:34:fc:2c:17:45:c7:21:f7:d4:a7:a7:21:1b:b0:a0:00:
         20:20:f0:1f:bc:4a:b1:17:4d:24:b1:d2:9b:f2:f8:ee:81:05:
         73:12:10:d8:a8:2e:67:07:4d:c7:a8:53:d9:7d:7c:a3:1f:c2:
         ca:6e:fb:74:95:51:33:6c:8a:bc:d5:7c:bd:26:90:31:c5:a2:
         de:dd:9e:76:89:33:12:25:4b:f7:c0:b0:a6:92:75:22:18:9d:
         db:db:0e:fb:9e:75:4b:70:cb:2c:bc:a3:58:83:2b:e9:6b:19:
         02:03:e5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:55:14 2025 by rpki-client