Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
File:                     n73cYxPvxLZyp-KzKuPESE_l9jA.mft (raw, json)
Hash identifier:          7fY57H0W1jm7EVG+qxB93Ukfc2g1C0+5CCd60YDuItg=
Subject key identifier:   86:BD:9C:FC:2D:A4:13:25:99:A2:DC:FA:69:A8:2C:AC:4D:DA:49:FF
Authority key identifier: 9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
Certificate issuer:       /CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Certificate serial:       01963FC2B6D1A2B5419EB1A83146354392FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
Manifest number:          105D
Signing time:             Wed 16 Apr 2025 18:00:47 +0000
Manifest this update:     Wed 16 Apr 2025 18:00:47 +0000
Manifest next update:     Thu 17 Apr 2025 18:00:47 +0000
Files and hashes:         1: boDA4PQiCnDxp3aC4mFfCKLLJrE.roa (hash: qzJMKZb9GADDw4cKKxLUhJ/VrvT205N7vn0KRws/PGE=)
                          2: n73cYxPvxLZyp-KzKuPESE_l9jA.crl (hash: ksUEv1Xu34s0vA1/K1GdQr4TAvk1abWRk7IWS7VUG9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:c2:b6:d1:a2:b5:41:9e:b1:a8:31:46:35:43:92:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
        Validity
            Not Before: Apr 16 18:00:47 2025 GMT
            Not After : Apr 17 18:00:47 2025 GMT
        Subject: CN=86bd9cfc2da4132599a2dcfa69a82cac4dda49ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7b:42:56:06:69:0f:09:3a:a5:cf:e1:61:db:
                    23:6f:0f:1f:b0:18:65:ff:66:a8:2d:79:25:64:8f:
                    f2:be:05:1c:d8:85:be:22:25:32:91:7c:57:4e:28:
                    9b:f7:94:0d:8f:29:54:68:a8:77:1d:6b:b3:59:44:
                    19:1a:01:19:6f:29:e8:39:dd:52:24:68:b0:22:1d:
                    de:0b:3e:09:81:1b:e3:20:ed:e5:2b:aa:07:9f:cb:
                    78:84:20:e7:92:2b:ee:33:1a:88:e1:86:d1:67:33:
                    9a:f9:c6:8f:21:37:27:eb:52:49:b6:7a:ea:cb:e1:
                    ad:73:4e:e1:8a:ea:c1:d3:bf:82:9f:7e:37:fb:09:
                    77:57:fc:13:7c:66:82:c6:02:e3:2c:c4:b3:b6:9d:
                    f0:8e:90:2e:47:2d:fd:d6:e0:70:37:76:51:8c:38:
                    90:b6:94:94:e0:90:d7:2a:f7:b7:e3:60:a8:4e:71:
                    83:3c:74:b9:c0:7c:2c:40:81:7a:4e:b6:22:08:e0:
                    e3:f2:a3:0d:cb:e4:fe:f2:20:90:d3:87:1c:a6:af:
                    2f:7f:2f:31:f1:b6:18:b4:b1:a2:ac:96:ca:62:3a:
                    1c:60:02:3f:48:92:c6:05:e1:aa:8a:f4:0e:83:48:
                    d3:0c:00:4b:6e:3b:25:60:e8:d2:24:d7:1e:8e:20:
                    d6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BD:9C:FC:2D:A4:13:25:99:A2:DC:FA:69:A8:2C:AC:4D:DA:49:FF
            X509v3 Authority Key Identifier:
                keyid:9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:3b:4e:6f:25:91:06:8b:0b:fd:90:d2:7b:1e:42:35:db:89:
         ed:86:a1:6d:ae:f9:e0:20:ef:3d:fc:f5:ed:2f:6d:4c:6a:29:
         bb:c5:72:cd:2b:c1:42:95:14:ce:9a:69:61:1e:86:5b:ea:b7:
         4a:99:4b:a2:89:19:c2:55:bb:44:ca:75:08:dc:00:a9:eb:5d:
         bc:7f:a6:83:5a:bd:ad:39:fd:69:3d:d7:b4:20:94:c5:38:1b:
         23:6c:84:45:ae:6c:de:7e:ae:e1:3f:59:37:25:5d:f8:65:0c:
         db:40:b8:6f:40:a5:70:b0:00:54:d9:78:73:3e:20:b2:84:b0:
         a6:78:23:08:16:d7:02:08:69:f6:a4:08:1c:ba:b3:56:28:50:
         5e:2d:2f:17:4f:d6:59:6f:c6:20:12:e1:8c:7e:8d:50:bc:11:
         bb:40:77:7a:e0:6e:17:f3:a5:88:53:ae:b4:1c:8f:9f:7e:d9:
         4d:44:a5:b8:e3:aa:76:47:4b:65:5a:46:5d:9d:2a:07:71:bd:
         f4:b4:11:89:82:e8:a8:0e:78:54:d4:d1:2b:5c:69:0c:04:12:
         98:d1:af:55:a2:66:37:0c:e9:07:bb:aa:b0:9b:41:a3:7b:aa:
         87:bc:84:1b:75:d8:14:bd:8d:90:dd:22:81:48:f8:ce:46:de:
         2f:4f:23:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:35:33 2025 by rpki-client