Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
File:                     M1ylITYiJtA8GCkAPYHUmKqDjzM.mft (raw, json)
Hash identifier:          oE20YTrRFes8SWfT5RohZtiQ+Bo4SQCgp+yVZo21GUQ=
Subject key identifier:   6F:BC:FB:1E:88:54:DF:9B:F3:89:6C:01:07:D8:E7:A6:63:09:5C:78
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Certificate issuer:       /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial:       01958BBB9FA6324879417C0F7F551CE96C09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
Manifest number:          0E19
Signing time:             Wed 12 Mar 2025 19:01:23 +0000
Manifest this update:     Wed 12 Mar 2025 19:01:23 +0000
Manifest next update:     Thu 13 Mar 2025 19:01:23 +0000
Files and hashes:         1: ANOircqzUHBj-ZPpTgeyTKkOD78.roa (hash: fDYWM8HWDpI+reW5CgnVi5v3ZgVo9GQn9YV+A+MUIVU=)
                          2: M1ylITYiJtA8GCkAPYHUmKqDjzM.crl (hash: j7jHNgarD02ZPJ+20rzcRbLQC+ixRg2Ou287NJ6FG0A=)
                          3: r3I5Ow6u9Tx4IPHbkMt6nWGV3D0.roa (hash: ikwJhjjFkAWraNuqvVNclfgApMdzpBAB8Aiwx4oSnHc=)
                          4: w_txi_uk4mQ_XR8rFJDiL-c0jd0.roa (hash: f+eCAj94qu5fHRtnAwnLgTIixl7vgaNbEIuTMRlOBnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:bb:9f:a6:32:48:79:41:7c:0f:7f:55:1c:e9:6c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
        Validity
            Not Before: Mar 12 19:01:23 2025 GMT
            Not After : Mar 13 19:01:23 2025 GMT
        Subject: CN=6fbcfb1e8854df9bf3896c0107d8e7a663095c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e2:8f:26:ce:b8:fe:05:aa:da:1c:4c:f8:dd:
                    ca:bc:3d:db:8d:39:42:95:a6:f2:25:68:3c:68:f7:
                    d6:9f:7f:e7:ad:c0:e5:71:64:b5:a1:e9:2d:31:cb:
                    02:73:b8:21:60:34:f2:59:38:7f:be:21:47:98:28:
                    54:a8:2c:3d:84:27:a5:9e:59:7b:d1:4c:a9:ed:01:
                    bf:24:4d:a6:fc:db:e0:67:01:dc:19:29:f8:46:51:
                    9b:5b:40:a5:27:b3:9b:b5:c8:af:50:e0:51:a3:a7:
                    d5:41:30:59:36:5c:4c:02:8f:c0:e0:19:e0:17:41:
                    f3:d8:78:47:5b:a1:78:20:23:7c:4a:38:67:df:bf:
                    29:f1:f1:2c:e2:c9:a0:83:60:18:2e:66:f3:8b:50:
                    cf:69:14:e1:29:26:29:8c:44:e5:44:cf:b6:99:8a:
                    fa:ab:85:45:2a:13:de:0d:2a:08:c6:72:be:ea:7b:
                    c4:60:e4:8c:1e:13:de:c1:13:c8:2b:5f:7a:14:6b:
                    98:1a:9b:1c:9f:e0:0c:97:c2:12:60:2c:03:65:8e:
                    09:d8:c9:38:c3:26:94:58:b3:8b:49:dd:5e:11:5c:
                    33:81:28:d1:4b:8f:1b:3f:75:85:bc:5e:77:7e:aa:
                    f2:47:26:11:61:f4:15:79:1f:b5:46:95:69:08:31:
                    36:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BC:FB:1E:88:54:DF:9B:F3:89:6C:01:07:D8:E7:A6:63:09:5C:78
            X509v3 Authority Key Identifier:
                keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:bb:27:50:a0:83:c9:a1:91:ac:91:1b:7c:a8:70:b0:4e:36:
         10:1f:87:b2:11:01:63:18:2b:e6:21:96:ac:b7:bf:d4:a8:fe:
         26:1a:58:a3:47:27:55:67:1f:6f:b3:3e:7b:68:62:6c:d3:ff:
         8e:71:c8:e3:9f:43:6c:df:ae:49:03:15:ea:91:df:83:dd:62:
         01:b6:1a:59:e1:0b:64:17:79:b7:e2:fd:c2:58:39:15:d2:d5:
         f7:20:5b:39:c2:00:cc:ac:b3:d2:53:26:ca:15:f3:1b:f3:8c:
         21:f0:f3:19:2f:c1:76:c5:47:d3:85:8a:09:a5:2d:3f:56:8e:
         97:30:a5:5c:30:bc:68:e7:74:ec:79:0f:cd:04:43:ec:75:19:
         90:32:e6:19:e0:2e:e7:0c:30:a7:c4:95:4b:f4:c3:c7:a7:f4:
         53:e6:b7:ee:61:82:56:32:7a:3c:2b:41:7b:a9:c9:3e:76:d6:
         dc:38:00:59:51:e3:09:8c:91:c0:74:85:c3:87:0a:b3:94:d4:
         cc:29:5f:bc:bf:38:23:79:1e:53:78:9b:1e:5e:7d:08:c7:f5:
         e7:c5:cc:fa:02:61:97:cf:1a:58:c9:3c:d0:96:6a:df:0f:d3:
         6b:f6:57:f3:b0:15:c3:14:3d:29:8a:90:fb:09:4a:2d:5d:ec:
         ea:c2:c4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:35 2025 by rpki-client