Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
File:                     gHmvy6Wodi-3n05eDXo17oTNPfQ.mft (raw, json)
Hash identifier:          m5WXR0SZVXLTDsUhOzHa6c0LlfVTlEzmA8+apGTKxFA=
Subject key identifier:   B3:BE:84:30:22:16:37:AD:DE:A2:DF:CB:46:5B:D5:5E:7B:D5:D1:BE
Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
Certificate issuer:       /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Certificate serial:       01960D8CD929655CE67953C56E4CCCF1DB7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
Manifest number:          0B55
Signing time:             Mon 07 Apr 2025 00:00:56 +0000
Manifest this update:     Mon 07 Apr 2025 00:00:56 +0000
Manifest next update:     Tue 08 Apr 2025 00:00:56 +0000
Files and hashes:         1: 8IUfLut7BygQV_kfUjYxZ6R1hWo.roa (hash: osXEgzEeRLXEDV95MIWOG4REHDOr18vMvAPD5SIJRo8=)
                          2: WbpoYqM2oX3v4QquNuj3aOGKhQQ.roa (hash: rq9cnpsLBzesNH6rgMT8gVQiRyG9ecQKConKub1KWeo=)
                          3: e906IBwj4MSiW-e8owQAWsQ_4Jo.roa (hash: P83ELX1oAyr6YQ0Ab0RC6iwmwrr6PxLhv5UjiehFQxc=)
                          4: eb3BGeh-4gG7gVQzfJYmE4N9iJk.roa (hash: ytxhtvq1ezR1if4ipOboDxmwy8xQfyDHM3VrrrzA9pU=)
                          5: g2b35-nULZDfmdIQobQp625Nk-I.roa (hash: daDEnydg6U3m1GEZ8hWZT3NDMPEI2dbQkvddvsu4lNo=)
                          6: gHmvy6Wodi-3n05eDXo17oTNPfQ.crl (hash: 6Z+P1maums0M/9OGtu2MiFLb6lHjFjDhzlwTmmpCbRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0d:8c:d9:29:65:5c:e6:79:53:c5:6e:4c:cc:f1:db:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
        Validity
            Not Before: Apr  7 00:00:56 2025 GMT
            Not After : Apr  8 00:00:56 2025 GMT
        Subject: CN=b3be8430221637addea2dfcb465bd55e7bd5d1be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:3c:2a:af:74:70:77:ef:16:64:5c:d7:eb:
                    b4:ba:e0:91:7d:30:18:8d:ae:9d:e0:bf:d3:06:9f:
                    06:0e:7b:61:f6:b7:bc:19:d4:6e:9d:0c:df:f4:05:
                    e4:fc:e3:ee:ce:f5:88:bc:fc:6d:ba:74:02:52:58:
                    f4:0d:5f:03:15:eb:b8:2b:ad:bd:a4:98:d2:a4:a2:
                    61:40:40:89:14:c2:33:7e:f4:b1:3a:5b:bf:9b:6b:
                    ba:4a:0e:54:70:a1:64:fa:30:41:f4:47:46:01:c6:
                    a8:10:f1:65:c1:7f:e2:4a:c6:e0:93:7a:cc:47:0b:
                    9f:fa:6c:a6:dc:15:c5:4e:09:45:6a:d5:b9:8e:3c:
                    09:35:66:58:88:cb:7f:a0:ce:4d:02:ff:7c:4d:6c:
                    26:3d:2f:33:e5:e7:79:87:2f:d6:6c:46:a9:9a:10:
                    6e:13:f8:10:dd:8d:9c:80:26:9e:ec:54:15:f5:0e:
                    d9:13:da:ba:d3:02:ac:63:3b:69:40:9c:2e:24:61:
                    08:df:44:30:cb:61:48:97:7b:ca:75:f6:62:0a:49:
                    67:3a:1d:cf:2b:0c:7c:62:79:ac:cd:10:3d:70:3b:
                    f1:85:ec:4f:cb:e4:72:55:77:7e:df:3b:4c:8c:35:
                    e4:5c:e7:0a:2c:47:e4:ac:42:5f:15:d2:d3:24:c3:
                    28:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BE:84:30:22:16:37:AD:DE:A2:DF:CB:46:5B:D5:5E:7B:D5:D1:BE
            X509v3 Authority Key Identifier:
                keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:30:50:95:3e:e5:e6:96:3b:f7:b8:c7:63:13:eb:50:72:64:
         2b:da:49:96:fe:06:f6:51:aa:16:6e:4e:14:58:d9:f3:e2:03:
         6a:cb:d3:3c:f6:52:43:ae:d9:40:df:89:b8:13:90:78:80:ee:
         5a:9a:93:ba:dc:8e:b9:69:3f:17:11:32:f6:10:f9:1d:dd:42:
         c2:6f:16:e0:79:8e:94:82:c2:d7:23:80:4e:c3:fd:a9:09:d4:
         88:16:62:f2:d5:5b:1c:58:c6:59:af:db:1a:08:04:25:93:f0:
         f9:43:df:3c:07:92:4d:ce:63:cb:df:64:33:fb:7d:8a:de:5d:
         12:76:bc:e6:e1:f9:5e:8e:c9:56:a5:a2:22:72:85:8a:48:5b:
         c8:b0:b4:1a:65:6d:6f:8f:0a:63:e4:02:19:1b:d8:e6:d7:91:
         c9:03:25:b3:b4:57:da:34:6c:7b:7d:d7:fd:0f:38:b6:0a:37:
         51:2c:f2:3b:b5:65:6d:8a:43:18:8a:9f:4f:a8:cd:9c:9f:e5:
         b9:ad:9c:1f:24:af:17:08:76:36:05:eb:e2:99:94:18:0e:df:
         d0:ce:7c:4b:25:0b:b0:6d:28:65:09:7e:11:da:52:df:53:c3:
         90:ab:1a:ee:ef:88:08:21:5b:91:a8:a1:e0:ff:c3:ad:4e:1a:
         5d:75:06:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:41 2025 by rpki-client