Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
File:                     V9mTMZ3MkpdpQxiyRus29V_xNw4.mft (raw, json)
Hash identifier:          ISnkPxeqCM0AKBVq6eWiWLQDQuXuKZxBINr52xKbvvI=
Subject key identifier:   45:83:1C:13:D5:8F:F2:57:64:FC:C3:B6:21:EE:A9:1F:AF:29:26:E5
Authority key identifier: 57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E
Certificate issuer:       /CN=57d993319dcc9297694318b246eb36f55ff1370e
Certificate serial:       01964556687640F52114A4DE134719B5FEB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
Manifest number:          0EE9
Signing time:             Thu 17 Apr 2025 20:00:12 +0000
Manifest this update:     Thu 17 Apr 2025 20:00:12 +0000
Manifest next update:     Fri 18 Apr 2025 20:00:12 +0000
Files and hashes:         1: V9mTMZ3MkpdpQxiyRus29V_xNw4.crl (hash: V9Snl/W8gV90wgxxbsEVvx+OBXmgJpukOwgx9Fgf2ac=)
                          2: VzLG7lyXvVkTshnFEB9kwkc4pkQ.roa (hash: wIvPT3vGaYWNNjOSrAOSHFQIN6FXu9GPlBXc77PLE/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:56:68:76:40:f5:21:14:a4:de:13:47:19:b5:fe:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d993319dcc9297694318b246eb36f55ff1370e
        Validity
            Not Before: Apr 17 20:00:12 2025 GMT
            Not After : Apr 18 20:00:12 2025 GMT
        Subject: CN=45831c13d58ff25764fcc3b621eea91faf2926e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:c2:6e:77:a9:3d:f9:cc:79:f1:86:d9:1b:f9:
                    fe:5c:69:b2:b9:06:d1:6c:22:92:bd:2f:e0:c4:a9:
                    21:4e:83:40:c3:91:c3:2f:5c:4e:87:67:e8:a3:5b:
                    5f:9d:7e:1a:51:3b:a6:ca:cd:3a:8d:89:8f:16:b1:
                    bd:d7:f0:bd:17:bb:21:4d:14:2d:b2:65:91:e6:4d:
                    67:cc:de:f5:30:01:47:16:59:65:53:a2:c8:2c:ec:
                    26:2e:85:8f:0b:24:71:0d:b5:63:ce:b4:f1:75:ad:
                    fb:8f:37:7d:59:78:7f:ab:68:73:17:6d:a6:7f:61:
                    fe:c4:3c:bf:46:dd:39:60:1f:7b:4a:52:de:3c:5f:
                    71:8c:a9:3e:f8:46:f6:fe:82:4f:0d:69:8f:b2:77:
                    07:84:8e:b2:41:ca:3c:f6:92:7a:ba:ed:48:f8:bd:
                    fc:26:4d:ae:a1:f4:88:c3:82:c6:85:19:42:13:41:
                    3d:0c:b4:60:2e:dc:88:91:b7:28:0d:63:7b:e4:64:
                    62:d1:db:a6:06:15:82:f4:c1:98:b2:9d:da:28:57:
                    f6:77:fb:bc:d2:42:b4:b1:5c:dc:3c:74:88:01:cc:
                    e7:7e:c6:b9:aa:9c:50:d9:03:3d:c2:4c:b8:bc:91:
                    38:10:a8:4c:b7:49:ce:93:af:6e:7e:e5:c9:49:77:
                    5e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:83:1C:13:D5:8F:F2:57:64:FC:C3:B6:21:EE:A9:1F:AF:29:26:E5
            X509v3 Authority Key Identifier:
                keyid:57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:06:a9:de:6b:9f:7e:25:e8:e5:fe:78:61:64:d4:7d:cd:9d:
         f0:be:4b:28:00:4d:fd:7c:f3:9f:e7:49:6e:b0:72:fc:57:58:
         6b:3d:a8:0e:fd:92:ae:39:13:03:f0:83:05:4f:23:7b:e4:b9:
         6e:a0:6b:17:0f:5f:fc:79:61:e4:36:52:1d:ac:5b:c4:88:5b:
         6e:89:ad:17:32:e6:4f:b4:9b:61:89:2d:d1:e2:3e:3c:dc:81:
         29:b6:07:ab:3f:78:13:c9:cc:9c:bd:43:7e:fb:34:46:41:46:
         f6:76:b2:ea:ee:19:b7:7e:c8:c9:be:fa:04:af:f8:1a:62:31:
         71:69:d6:6a:b6:ed:3f:07:17:d0:3a:c1:69:a5:f0:4e:73:bd:
         3b:30:e2:00:35:8b:d6:fa:11:33:c9:ae:32:51:f2:91:0d:f7:
         f2:b2:a7:e2:01:aa:81:60:85:fb:e9:b1:06:73:42:07:bc:8c:
         b5:58:62:3a:16:85:f2:fb:6d:68:01:f5:ae:67:db:ff:76:fe:
         a6:b9:a9:7e:4a:3e:13:90:30:8a:4f:96:6a:94:8e:51:64:81:
         69:98:d9:0e:6e:e9:6b:20:4c:ad:c5:ea:5f:1e:8c:74:84:72:
         1b:3d:3a:c8:ee:ab:5c:67:30:51:70:29:62:aa:bd:d4:29:e7:
         df:c9:12:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:32:51 2025 by rpki-client