Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
File:                     yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft (raw, json)
Hash identifier:          h+ZY9e0t8kLsf8oHKyH/OvEkI1xlE/BbvEObh0FnNsY=
Subject key identifier:   F3:F0:D1:BE:7D:74:58:12:EC:4F:C4:A1:69:0F:A8:F2:AD:10:73:5C
Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
Certificate issuer:       /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Certificate serial:       019614A195CB9A9F0C177B51A203D63576E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
Manifest number:          0A96
Signing time:             Tue 08 Apr 2025 09:00:55 +0000
Manifest this update:     Tue 08 Apr 2025 09:00:55 +0000
Manifest next update:     Wed 09 Apr 2025 09:00:55 +0000
Files and hashes:         1: KMVYfNBq8fQcPieeDn4rOXJEAQc.roa (hash: ydascvmFGyZEMeBYeWR21NuJQtwhyewDNO5cyV/mt0U=)
                          2: qQtVwx26Q11uVtNfnJzbmJUlIFc.roa (hash: Us6KZhFay/pkNMEXF/JAjIY/J6B0ztmxrmyXEzSbCqU=)
                          3: yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl (hash: 0Sy2XjfCoSc477YyqekMux+uTrVgWAEtCkkoCHSnRyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Apr 2025 08:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:14:a1:95:cb:9a:9f:0c:17:7b:51:a2:03:d6:35:76:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
        Validity
            Not Before: Apr  8 09:00:55 2025 GMT
            Not After : Apr  9 09:00:55 2025 GMT
        Subject: CN=f3f0d1be7d745812ec4fc4a1690fa8f2ad10735c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d3:c0:44:64:46:49:eb:48:65:9f:7d:57:26:
                    db:4c:ae:eb:80:09:d6:fe:33:b6:4c:85:5b:af:4b:
                    31:14:7f:f7:ad:16:cf:df:d6:cf:56:e9:cb:03:04:
                    00:cf:57:31:ed:00:79:90:8c:d6:fd:02:77:46:b0:
                    df:cf:29:9d:2c:f9:55:dd:11:18:c5:ce:75:b7:d5:
                    b4:59:c5:5f:f4:0a:5b:a8:9a:94:63:15:cf:41:12:
                    a1:05:e5:59:1c:08:20:de:74:df:54:cf:f0:2d:1b:
                    7e:ae:50:3c:02:23:23:68:7a:e5:13:33:db:8a:92:
                    dd:dd:9d:fe:29:3b:b5:5f:1d:99:39:ea:71:f2:b0:
                    2b:02:e9:d2:61:c0:d2:0d:11:1c:05:e5:52:a7:fb:
                    19:e3:95:a2:b0:7d:d4:d3:84:3c:7e:c5:32:72:0b:
                    99:6d:fa:61:54:fc:8e:7b:f4:e4:b9:d4:b1:4c:20:
                    ec:d3:85:3e:9f:43:c0:73:de:8a:14:2a:c3:85:d8:
                    94:ec:e5:6c:83:69:58:07:6f:13:7e:ef:e4:81:70:
                    39:cb:33:2b:60:3a:31:70:11:c1:e8:18:e7:c3:51:
                    a5:06:d1:84:84:10:7d:97:f4:63:be:36:7f:5a:ad:
                    be:23:16:0e:f4:81:a6:02:42:6f:db:56:5b:6a:f0:
                    6e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F0:D1:BE:7D:74:58:12:EC:4F:C4:A1:69:0F:A8:F2:AD:10:73:5C
            X509v3 Authority Key Identifier:
                keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:45:36:ec:d2:55:c4:f4:b5:16:8a:d6:75:37:e9:a4:4d:88:
         2a:7e:ba:47:d9:cc:c9:9f:4a:2c:ec:16:21:67:0e:5d:0b:79:
         a0:0a:4f:90:ef:42:9d:15:8b:34:17:2c:90:7e:7f:ca:d2:8d:
         fa:0c:c6:fa:f7:9a:6e:b0:e6:92:fa:0b:f3:75:32:de:20:c6:
         70:6d:3a:ba:42:74:99:ca:7a:a7:cb:98:fa:df:e5:c5:e1:d3:
         50:5e:a2:d7:57:d9:ee:72:71:c5:cb:79:a7:6d:21:5c:84:f1:
         7e:0e:a5:d8:78:53:0b:ca:57:1f:d9:80:ad:6b:4a:af:b2:0b:
         c0:39:d3:74:da:0e:07:28:05:a7:62:18:20:af:20:ad:46:bd:
         47:6b:cd:f0:a4:fc:47:ce:74:ef:79:f2:18:e5:d4:66:c3:cc:
         99:67:e1:7e:fa:65:8f:92:10:bb:60:2f:25:1b:83:f4:06:14:
         76:e8:57:f8:46:13:79:01:dc:4a:f1:de:c7:b9:8e:e8:84:2f:
         2f:b2:54:d6:d6:82:41:99:11:c1:12:4a:08:d4:d5:bf:b6:d0:
         98:07:58:ea:b1:e9:92:33:68:ac:04:62:04:98:37:cc:3c:29:
         42:83:ce:0d:b0:8b:f8:cd:7a:69:61:91:e8:e6:de:92:52:e7:
         8b:a5:3b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:56:06 2025 by rpki-client