Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
File:                     x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft (raw, json)
Hash identifier:          vohIXHQwHWRO2Rn/vWbiI39sc1b7rUncYTKTH9Od5nw=
Subject key identifier:   ED:B4:F9:AA:4B:A4:0C:60:32:C2:3B:19:7D:B1:D2:2E:D9:6B:B6:EE
Authority key identifier: C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
Certificate issuer:       /CN=c782735aa98d4645d041093a7662a12379503a31
Certificate serial:       01965B03E32099BAEDFE68C5F3C372895AC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
Manifest number:          0CCC
Signing time:             Tue 22 Apr 2025 01:01:43 +0000
Manifest this update:     Tue 22 Apr 2025 01:01:43 +0000
Manifest next update:     Wed 23 Apr 2025 01:01:43 +0000
Files and hashes:         1: tjSYgzQ0bYjCtyMesUCoqcYRKAI.roa (hash: V0DKhUKbNvI4aOcWkxFt+dLkw7F0CNEt1KU67bvkMmI=)
                          2: x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl (hash: 1xCzAbnipwaFpSz3xEHOCNgIpElx+orgaWcoUi4SYkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 01:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5b:03:e3:20:99:ba:ed:fe:68:c5:f3:c3:72:89:5a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c782735aa98d4645d041093a7662a12379503a31
        Validity
            Not Before: Apr 22 01:01:43 2025 GMT
            Not After : Apr 23 01:01:43 2025 GMT
        Subject: CN=edb4f9aa4ba40c6032c23b197db1d22ed96bb6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:52:a0:96:9e:63:96:7f:f0:3d:7c:87:c9:be:
                    c2:45:5c:b6:88:c1:2a:98:69:b8:55:c1:fa:d9:4e:
                    92:58:42:f3:23:d9:ab:e9:13:09:f9:b3:2c:f5:b4:
                    25:08:79:08:36:b8:c8:1e:72:04:00:10:c2:fd:9b:
                    46:1f:72:11:18:bf:02:60:f4:6d:da:61:c3:01:26:
                    e7:c2:f2:8f:69:c9:e0:10:9a:aa:b5:6c:a6:e6:e2:
                    08:09:ac:35:d7:bc:02:75:0f:79:d1:db:b1:ba:5e:
                    26:0b:f2:29:e9:61:4a:5e:6c:7f:4c:c3:7c:71:8c:
                    87:93:c6:92:71:48:1b:8a:73:14:a2:94:fd:33:32:
                    57:75:fa:4d:d7:90:c0:08:68:bd:84:c8:57:47:48:
                    de:ea:b5:23:a1:d8:a1:05:15:b0:c9:07:c8:29:f2:
                    d5:d6:7d:3d:07:f8:87:40:9d:f8:88:b9:47:4c:88:
                    65:6e:ef:30:a2:5e:f0:c2:be:f3:3b:08:08:aa:f3:
                    86:79:8a:3c:61:a7:3e:be:0a:eb:b7:86:63:bb:04:
                    cd:03:7e:90:7e:ae:51:02:25:d4:65:4e:94:84:89:
                    df:f6:d1:aa:d5:cd:a7:ed:44:96:7f:51:22:2a:2b:
                    09:db:7d:18:71:b7:a2:92:8b:ba:14:b4:80:98:64:
                    4a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B4:F9:AA:4B:A4:0C:60:32:C2:3B:19:7D:B1:D2:2E:D9:6B:B6:EE
            X509v3 Authority Key Identifier:
                keyid:C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:62:44:ed:fe:d7:52:d8:61:6a:ba:2a:79:25:47:ac:26:85:
         bb:d7:12:53:2d:f8:dd:5f:55:68:26:ff:be:98:c7:3e:65:18:
         8d:4a:0d:d9:65:8e:43:2c:89:c3:05:b1:ac:25:05:4e:60:f4:
         d7:58:0f:5c:0c:c2:a9:da:5c:5f:d5:19:d1:da:eb:d5:72:f2:
         b8:ef:e0:69:55:4f:21:0a:a0:87:2e:c1:85:cb:2b:a0:f4:9e:
         82:65:13:7d:d9:89:48:dc:84:36:6b:aa:01:44:f8:9f:2e:9a:
         12:f6:e2:82:82:2c:e9:16:77:91:e8:6a:71:0f:58:4a:31:2c:
         ae:06:cf:11:c1:75:41:8e:75:eb:c7:3f:56:3b:d2:5b:a5:dc:
         e1:bf:97:5a:5e:5c:c5:a3:1f:ba:f9:f9:ad:3b:80:90:5a:6c:
         c0:f6:95:5f:d8:1d:77:0e:9e:45:15:bb:5f:b2:d1:71:90:9a:
         29:e1:72:2f:09:c9:07:0e:ba:f9:f1:7b:90:ee:f3:8b:49:78:
         63:4e:b1:d5:de:eb:05:76:bc:b3:c4:cd:8c:15:de:66:2d:2e:
         18:8d:a4:40:3a:95:92:1e:b8:f7:96:f9:0f:47:54:2d:6e:7c:
         57:43:ed:30:56:f2:e0:d4:c4:e3:ba:f1:43:e6:22:e9:d0:06:
         7c:d3:ad:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:20:23 2025 by rpki-client