Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
File:                     mRLZRawqSfO02iIhwnuCmq_MsvI.mft (raw, json)
Hash identifier:          m+T17juYNeYnXUzZGjtWaA5aAmyvuVL0uBe9lNG4JgA=
Subject key identifier:   E9:E2:B1:77:0C:5D:0A:13:CF:40:55:84:86:B7:D6:34:9D:E6:F9:ED
Authority key identifier: 99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2
Certificate issuer:       /CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
Certificate serial:       019645C4E29869EEDF50FC53D7E57EBBB523
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
Manifest number:          1312
Signing time:             Thu 17 Apr 2025 22:00:53 +0000
Manifest this update:     Thu 17 Apr 2025 22:00:53 +0000
Manifest next update:     Fri 18 Apr 2025 22:00:53 +0000
Files and hashes:         1: G3bPtDx0TvVdf4ayVJDtbWUroio.roa (hash: 0QDqlFsV7bJD4enXREu7nHOgEbbLdZBSnVYjPXImw60=)
                          2: mRLZRawqSfO02iIhwnuCmq_MsvI.crl (hash: uVMAeHJJwQl7WgmqIBhFpx2gYjhmg63wvbOwG5Kv7ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 22:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:c4:e2:98:69:ee:df:50:fc:53:d7:e5:7e:bb:b5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
        Validity
            Not Before: Apr 17 22:00:53 2025 GMT
            Not After : Apr 18 22:00:53 2025 GMT
        Subject: CN=e9e2b1770c5d0a13cf40558486b7d6349de6f9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:87:2f:b7:c4:e7:f7:92:67:92:53:2d:73:1a:
                    c8:37:52:c3:be:85:09:e7:47:d7:d7:d5:61:91:7e:
                    72:eb:c2:8f:49:12:89:9b:aa:e3:33:95:bf:80:79:
                    a6:4f:79:84:32:9d:15:04:ea:f5:18:3a:77:13:a0:
                    69:69:82:ee:28:0b:c1:fd:a5:d0:82:33:44:03:f1:
                    b5:7c:6f:21:8d:c8:56:62:fc:5c:2e:27:c3:06:6d:
                    29:89:f2:d1:4b:e6:24:d9:f9:44:f5:62:0c:9b:9b:
                    88:8f:78:36:b7:e1:07:67:6d:04:85:6d:c3:66:8e:
                    aa:53:e1:de:11:65:92:71:d9:a8:89:80:89:20:ea:
                    07:b8:54:08:5a:2d:d5:ed:0f:23:96:55:9a:82:bb:
                    da:d0:d8:19:44:44:14:d0:fa:42:02:9e:fc:95:1b:
                    93:49:11:cf:08:22:cb:3f:8f:39:b3:13:fa:1a:7d:
                    dc:02:00:2c:86:99:01:52:cf:48:0a:8d:01:dc:fc:
                    ca:9b:d5:09:f4:6b:61:cd:cc:25:db:81:fb:01:7b:
                    3d:e2:c3:0a:76:71:38:c5:07:ac:6e:7d:91:81:c4:
                    e0:84:be:ac:72:38:37:87:eb:6e:85:04:2c:0c:bb:
                    c9:46:15:2b:56:57:79:4a:d8:1f:00:c2:03:24:33:
                    07:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E2:B1:77:0C:5D:0A:13:CF:40:55:84:86:B7:D6:34:9D:E6:F9:ED
            X509v3 Authority Key Identifier:
                keyid:99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:63:1d:97:3d:b0:92:5b:39:9f:3c:24:2e:7a:17:da:23:3d:
         e2:0f:58:52:97:62:d6:e3:fe:4f:4d:ab:50:62:19:09:61:e8:
         d5:aa:d5:04:d2:79:24:d0:75:5a:d8:8c:24:fa:20:ae:c5:27:
         57:c6:5e:bb:04:6b:86:04:41:10:97:d8:70:ac:dc:e7:fd:01:
         f4:ac:d0:a8:da:37:3c:36:4c:b9:15:97:e9:f5:d1:d5:1b:7b:
         79:7d:5e:ad:f1:95:17:02:1c:38:b2:df:f9:35:09:7b:ac:ba:
         d3:19:9b:08:7f:04:b1:bd:29:af:68:bf:24:3b:ba:d7:eb:7b:
         e7:f6:e6:f0:c2:04:32:69:b9:ac:1e:09:8f:0c:f3:02:63:e7:
         6e:69:e9:1e:df:4d:af:fe:ca:2a:5d:3f:4c:81:71:2b:db:eb:
         54:58:99:44:d4:23:46:22:3c:84:e3:dc:24:23:86:fa:c4:b3:
         bb:fa:af:90:40:15:ff:e4:ee:b0:91:c8:07:b7:9b:fd:da:41:
         c2:3a:e2:a0:e0:ee:d6:21:67:74:8d:b3:36:b4:b4:bd:37:b4:
         55:f6:45:c3:ae:0c:8d:71:31:48:29:e8:e6:53:33:2f:cb:cb:
         ce:f3:64:52:88:d8:e4:70:a0:7a:59:60:fe:dd:c7:63:40:e9:
         61:20:ee:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:52:27 2025 by rpki-client