Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
File:                     mBPi9jUdO00eYapAFvGyz6YtfN8.mft (raw, json)
Hash identifier:          C+pdSsBJz+2LORK5puA/YzV2APL/13a6UshYWHhzxl0=
Subject key identifier:   D4:BE:C8:2C:C5:E5:27:4A:A8:2C:86:D4:0D:1C:27:21:DA:9E:B1:F1
Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
Certificate issuer:       /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Certificate serial:       0196D62DA5F59617CF2ABC2C37B5B65F95D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
Manifest number:          0202
Signing time:             Thu 15 May 2025 23:00:37 +0000
Manifest this update:     Thu 15 May 2025 23:00:37 +0000
Manifest next update:     Fri 16 May 2025 23:00:37 +0000
Files and hashes:         1: N0qByPu3emMo9XfORXwQEiEDLX4.roa (hash: WDWKjOtvs4aBJ9ngAGga+267IwwKrgiGUR6VHAFxV3g=)
                          2: RoGqfo5WHnk9aJGToptEEJnYgSQ.roa (hash: L10AuIcaDMRz0t+d0kRw1yKzyj6eu5ePd1bWDs52MY4=)
                          3: dXZ-6UVHqdia25OyDn-Duexa4bY.roa (hash: 0T5UCEoUYDMxK/4Yih5THGiZdvmX2Rir43/xhLtG52s=)
                          4: ffVCJAudGRklTh6J2p53gbRPIvk.roa (hash: DvmrtTZ+4GX+XZD2/G6E6Uk/XxFpGuY4Z0oM1q4ZEeI=)
                          5: gkNUdTJYKI-HrI5siVhEhSliy48.roa (hash: ABXVZgoh60JAitHXcWT+7NbO1hc9hcd5tRCQ91UiLVQ=)
                          6: mBPi9jUdO00eYapAFvGyz6YtfN8.crl (hash: 2fCVofPMR7U5zfslCNMfombv6j2SvY0Fa65HPwCfgkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d6:2d:a5:f5:96:17:cf:2a:bc:2c:37:b5:b6:5f:95:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
        Validity
            Not Before: May 15 23:00:37 2025 GMT
            Not After : May 16 23:00:37 2025 GMT
        Subject: CN=d4bec82cc5e5274aa82c86d40d1c2721da9eb1f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5d:2a:a2:86:6b:08:ac:b0:bb:2b:37:b4:72:
                    a6:b8:9d:7a:90:c8:dc:e4:3c:79:3e:43:a3:99:fd:
                    78:2e:38:b7:6d:80:e7:87:9f:8e:b8:3a:67:9f:68:
                    ff:4b:3d:0d:1a:15:a2:19:84:9b:ae:8a:db:4b:ce:
                    e7:9d:ca:9a:54:e8:3a:65:8d:88:b9:7d:6f:c8:5f:
                    2d:06:2d:36:b5:fb:9e:07:70:d5:0f:40:2c:f2:84:
                    ce:ca:21:6f:42:2e:dc:63:f9:a5:fe:3f:9c:ad:f6:
                    24:8d:1b:d1:b7:c2:a3:86:7b:61:ed:5d:3e:06:73:
                    37:36:a0:4f:2a:8a:9e:0a:ec:1d:00:dc:ec:18:61:
                    42:77:ff:17:f6:dc:63:ee:01:9c:67:83:2a:c1:6d:
                    8c:63:0d:d7:5c:ad:da:b1:2e:18:a8:cc:3f:dc:c9:
                    38:0e:0a:35:39:25:94:e9:84:06:cf:38:fc:21:1a:
                    49:5b:e1:99:8f:85:51:04:af:e1:b7:34:58:95:42:
                    7f:c5:99:97:e1:fd:67:10:f2:5b:bd:5a:47:c4:52:
                    b5:29:bb:66:d2:3a:b9:5a:9d:f3:b5:18:89:e9:08:
                    10:a0:94:cb:cf:24:93:99:b1:f2:c7:e4:80:1a:74:
                    43:bc:73:8f:4e:e9:22:4b:be:45:39:6a:90:40:6a:
                    7d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BE:C8:2C:C5:E5:27:4A:A8:2C:86:D4:0D:1C:27:21:DA:9E:B1:F1
            X509v3 Authority Key Identifier:
                keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b0:7a:f0:8c:e9:19:db:e6:1d:87:45:46:5e:3c:82:08:f0:
         90:f6:57:c3:06:bc:28:35:0b:ca:78:08:30:12:a2:f9:2e:07:
         36:b8:85:ce:fb:73:6a:ea:92:1d:ee:1d:19:48:4e:a3:04:96:
         a9:27:1a:df:ad:c9:2e:62:6a:ac:c1:4c:8b:2f:e7:36:cf:8b:
         92:0e:ab:75:e9:f4:7e:bf:38:94:a9:2d:68:27:6b:93:3b:67:
         c0:ff:55:42:50:62:7a:be:a2:f9:6a:e0:c1:5d:41:a4:52:e5:
         a6:f1:30:ce:05:30:67:62:b2:01:2e:c6:f2:a8:b0:59:7a:38:
         6c:45:79:6e:54:a3:f4:f2:f2:5d:a6:e6:1e:de:2f:ca:ec:9e:
         ce:39:f7:f8:86:d5:3d:1a:d1:cd:06:53:87:4b:06:bd:61:45:
         fb:f6:7b:7a:49:44:58:17:7c:e2:7c:62:7d:5b:da:16:56:50:
         21:44:e6:d4:2a:b4:a9:01:a7:d8:62:cc:97:34:5f:ca:33:05:
         9a:96:3e:e5:ca:f3:f0:91:4a:3c:15:89:9c:b4:29:3a:03:d8:
         0c:d8:39:7c:56:64:0e:21:c1:6e:6f:7f:9f:e3:59:9c:6b:69:
         60:6d:e3:7d:a2:93:97:ab:8f:ef:dd:ee:39:c3:8d:74:41:6b:
         07:25:3c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 07:57:17 2025 by rpki-client