Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
File:                     mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft (raw, json)
Hash identifier:          UeQgYot6CleBTv5tJxnjcwU3M3AujbZmJCF1s8X6u4s=
Subject key identifier:   C5:29:21:59:B3:3C:89:82:40:58:6C:E7:6B:CF:FB:A8:C1:47:35:D0
Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
Certificate issuer:       /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Certificate serial:       0196542509E4B53899A3B935F07B8B05D1DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
Manifest number:          11EC
Signing time:             Sun 20 Apr 2025 17:00:35 +0000
Manifest this update:     Sun 20 Apr 2025 17:00:35 +0000
Manifest next update:     Mon 21 Apr 2025 17:00:35 +0000
Files and hashes:         1: 8d3irncdHLZkdRnMP5XTaUSwUDg.roa (hash: rzsl5FRJP8PNH7SlWyQWAee7OQ1otGN4ArKngJgMF9U=)
                          2: Xs9T6PK5ijOVxCmCgq_6E2A__nQ.roa (hash: S5Af46ICAzl/XprWaWxfdUsVmQ9qZwM6fg2ZXROy37M=)
                          3: c54NoWEXWRQA-dbSZ-8W6mQyP8E.roa (hash: nRoWd4CNF6uxWBOBAy58vxnhfOJmaxOekRUGTIQqLKA=)
                          4: mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl (hash: H1TQEgTEHHgcrfIGB+6UjJ9RNZzlZ6TfYjv3LmSslcU=)
                          5: yODnLhtEhpSHZKcWtftsr2wrfHM.roa (hash: vGS7Y/f4ssyV0t0WiPGg8Dqt5gZnLrzS3R4VljxDfWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:25:09:e4:b5:38:99:a3:b9:35:f0:7b:8b:05:d1:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
        Validity
            Not Before: Apr 20 17:00:35 2025 GMT
            Not After : Apr 21 17:00:35 2025 GMT
        Subject: CN=c5292159b33c898240586ce76bcffba8c14735d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:89:ae:0c:19:65:b4:7c:4b:98:28:bc:d8:83:
                    93:3f:10:56:47:80:b6:e5:68:f6:8f:10:ce:2a:3d:
                    ba:82:d0:69:f3:b4:1b:80:61:fc:36:fb:b8:8e:44:
                    a2:c0:a2:11:0a:50:58:9a:68:6c:ed:a2:dc:fe:1f:
                    ff:31:a7:2a:54:7c:e9:80:0a:77:98:6f:f3:ac:ac:
                    21:25:c5:f9:c0:4f:cb:ca:73:ef:ae:10:86:91:f8:
                    18:a6:d1:03:7b:e4:e1:ea:03:77:43:96:54:33:54:
                    0c:af:d1:fd:f6:71:07:23:d4:af:9a:cc:92:c7:70:
                    31:fa:5a:5b:50:5e:87:43:22:81:87:d1:ab:db:99:
                    9d:41:c3:fa:29:8e:d6:55:bf:34:bc:96:bc:ec:18:
                    07:c0:f0:a9:11:26:f5:4b:a4:6b:f0:c4:0f:12:30:
                    f8:10:09:61:2d:69:cc:07:d5:2a:66:50:7f:6c:e2:
                    12:83:66:cd:18:c4:a7:3c:3b:24:f7:32:94:47:c5:
                    6a:8e:b5:c9:24:63:4e:56:26:6e:a0:d5:f7:5b:52:
                    d6:e9:63:3a:10:e5:56:ea:9b:41:62:bb:1e:5c:d0:
                    37:b4:ae:6b:79:0b:fe:56:b5:0c:59:1c:cd:d5:41:
                    7a:a7:bc:20:19:da:1d:29:85:6b:8c:43:30:10:a2:
                    52:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:29:21:59:B3:3C:89:82:40:58:6C:E7:6B:CF:FB:A8:C1:47:35:D0
            X509v3 Authority Key Identifier:
                keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:1e:12:1c:43:f8:e6:29:fb:6e:d9:81:80:6b:59:a6:d5:29:
         17:69:dd:b9:1e:7b:45:fc:db:fa:73:3a:f7:0f:d0:b6:4f:2c:
         60:76:8c:35:6b:ce:32:07:82:16:0d:d4:e0:1f:2c:34:c5:34:
         e1:24:c9:4e:e5:3c:1e:6f:7d:b8:1e:8a:28:71:81:9a:3f:89:
         c2:dd:c9:fd:b9:91:c3:50:1e:61:ca:7f:4e:96:1d:24:3b:4f:
         91:00:69:86:a5:12:f8:42:7a:a9:4d:fb:9f:47:9d:77:20:98:
         b1:1b:fc:1a:00:19:64:a5:9f:b6:f8:35:54:e5:b3:b1:0d:64:
         71:5e:85:44:57:d7:62:85:de:69:36:bc:97:0c:dd:1b:f6:cb:
         74:bf:7b:09:7b:9d:db:d0:a2:7d:7d:69:28:2f:3d:1c:cf:c5:
         99:6e:40:8d:ee:5f:49:7d:7b:bf:83:6d:fc:c5:c5:9e:0e:a6:
         00:77:24:23:2c:44:93:53:ac:2b:09:38:b1:5e:3c:07:81:e2:
         c3:5c:34:15:0f:e2:c9:c1:18:1f:1c:1d:62:61:32:e4:54:a9:
         ef:39:bc:ab:9b:ab:5f:21:78:5c:16:7c:4c:66:33:5c:af:89:
         23:27:d1:10:65:30:ce:ab:c6:dc:9b:ed:c6:e0:97:ca:15:9e:
         69:63:54:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:39:18 2025 by rpki-client