Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
File:                     KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft (raw, json)
Hash identifier:          tcF9oTa79wlK0u74StTAd+xeq0xaP5sfOrcm4rn7K/0=
Subject key identifier:   72:2D:01:2C:8A:00:F9:48:4D:C9:93:2E:E8:DB:A9:2D:83:9A:BE:B7
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Certificate issuer:       /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial:       019604F7CDE62043961BCCCB53D81298EF12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
Manifest number:          0CCE
Signing time:             Sat 05 Apr 2025 08:01:11 +0000
Manifest this update:     Sat 05 Apr 2025 08:01:11 +0000
Manifest next update:     Sun 06 Apr 2025 08:01:11 +0000
Files and hashes:         1: 3tVWAqpuhZmIvirALPURMbWbRUo.roa (hash: 8vZgncUoPoI0S65ff9n3cIU9sKbrNMXpH1mUnl/CdOM=)
                          2: GerACxDWw1b6KGz6kGs5iVp2ois.roa (hash: 4GcODZKqecND9v8xjlb0j4xGLtBy9xZhAi6ymZShRcQ=)
                          3: KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl (hash: 4txPXbePSiXFGFDYXA749ucwycokfjPRPw7wLmQ3BxY=)
                          4: LEyJ2WNBj9cTPetK4hsEfLcBcEI.roa (hash: WmOLEifdPoH/joG2SNYp6mcbI8myXya9UUZozRyBF44=)
                          5: Qy3Q7lh00t0205L0nhmAvt2uoOs.roa (hash: a4ie5/FL3GVO5YHgzPjyXYH6PIkYqfX1mb+x+F8lR9c=)
                          6: X35BdP6fZcPzqxMLjnciq7uISgs.roa (hash: X6IFONVs0ZqJ9lk+Np5sgqP+DTo255gzewtTiaP3PC0=)
                          7: eGuHIFNh-O-K6vz68gcxBeLPa18.roa (hash: G6cEnCf7JWL4wnvSWWO7ELeSvpGDDJYGerFFAWSt9CA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:04:f7:cd:e6:20:43:96:1b:cc:cb:53:d8:12:98:ef:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
        Validity
            Not Before: Apr  5 08:01:11 2025 GMT
            Not After : Apr  6 08:01:11 2025 GMT
        Subject: CN=722d012c8a00f9484dc9932ee8dba92d839abeb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:f7:11:a0:5e:31:22:ac:86:43:9c:93:74:
                    53:76:f1:7c:de:d7:ac:d8:cd:a1:21:35:a9:14:9f:
                    9c:ae:10:b2:85:ad:24:c9:1a:f8:3c:c6:c3:cd:3e:
                    63:b9:d4:ec:ac:46:8e:a7:4b:cd:9a:67:2b:3c:59:
                    7e:8a:cf:70:6b:2f:8c:44:d7:8b:dc:e0:70:9a:42:
                    e3:28:01:ac:d3:41:11:7c:83:54:9b:a7:c5:b7:ed:
                    f0:24:fc:b2:b8:2a:45:d4:57:db:33:9b:a3:68:56:
                    02:a8:c7:66:24:24:07:b5:e8:cc:98:41:ca:f8:52:
                    4b:af:8c:ef:cc:c9:08:67:ec:58:6e:6c:8e:c0:93:
                    0a:cf:ab:4c:43:44:73:c8:1c:c9:00:36:0d:95:fe:
                    5b:c6:cf:74:45:d8:14:36:64:2c:89:2b:2a:59:7c:
                    d6:42:1b:5f:a3:ab:e1:94:b5:c8:ec:ba:ec:71:55:
                    e1:f7:aa:ce:04:cd:30:34:e0:c0:53:97:5f:03:d9:
                    53:bf:da:ea:b1:24:3e:47:a4:ab:c3:28:01:e3:26:
                    89:75:9b:8d:00:bd:ae:57:c8:dd:f6:c8:d8:8f:06:
                    b6:af:49:f8:f1:74:03:ba:04:46:f1:55:75:c2:45:
                    67:ba:57:9c:84:5d:da:9c:16:12:77:88:bd:1e:f9:
                    6f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2D:01:2C:8A:00:F9:48:4D:C9:93:2E:E8:DB:A9:2D:83:9A:BE:B7
            X509v3 Authority Key Identifier:
                keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:a4:29:1f:34:c8:8e:0f:23:85:93:ff:7b:f2:84:f3:85:b5:
         3d:09:19:69:75:1d:5c:30:a3:16:fe:35:e7:24:9f:6b:14:fe:
         c3:bb:ae:f2:66:f1:d7:86:7f:46:4e:79:34:0a:ec:29:df:42:
         33:55:18:ef:d9:72:66:25:01:d4:38:c7:01:b5:4b:43:6b:4f:
         b1:98:de:e1:5f:44:99:51:3e:59:47:37:12:63:0a:76:96:17:
         31:69:40:5f:5e:a9:4c:4e:29:07:8e:9a:ac:3e:1f:c9:dc:b0:
         8a:af:61:82:df:73:d1:a1:33:c4:24:64:1d:97:c5:68:c9:7b:
         b2:f6:b7:07:91:97:2f:dd:7e:77:1b:0e:4d:86:35:2a:29:5d:
         e3:4a:82:c7:dd:80:91:59:46:0f:29:16:ba:8f:e1:d9:02:29:
         79:fe:b6:32:f2:9a:c2:a2:56:fa:b7:9b:7f:9f:60:8d:b9:44:
         e6:c8:70:ae:00:75:f6:d1:44:cc:55:7a:64:89:04:8c:a5:27:
         16:08:ad:bc:c9:1c:fb:fd:75:16:c9:49:c2:e4:fc:fb:96:1c:
         34:19:85:71:1f:05:ba:76:5f:89:64:90:76:b9:4a:0e:07:49:
         cb:b9:ae:ae:9a:cb:6c:ea:40:5f:30:2f:4b:27:c0:5c:d2:88:
         ac:55:ef:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:10:01 2025 by rpki-client