Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
File:                     n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft (raw, json)
Hash identifier:          TMqW/j2Wv5ZkcdurG/mMUHa6zIVceNFRJ1zuh1rgq7Q=
Subject key identifier:   75:82:33:FF:2C:17:E9:24:6A:E8:C0:01:AB:9A:50:03:EF:8E:69:88
Authority key identifier: 9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
Certificate issuer:       /CN=9ff3396374cbf5d767125f02dcf0f97296323092
Certificate serial:       0195900619CB8684D90A12CC2ABEF4EE092E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
Manifest number:          149C
Signing time:             Thu 13 Mar 2025 15:01:13 +0000
Manifest this update:     Thu 13 Mar 2025 15:01:13 +0000
Manifest next update:     Fri 14 Mar 2025 15:01:13 +0000
Files and hashes:         1: VzkNnK8ZZLi3EdFem2ht2MqP6yg.roa (hash: vDh90IOKG2Z4aklRGqaqLJS7/W1wdLFm/VhjhWpb5HU=)
                          2: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl (hash: +yT1M07jw2mRi7tjcCFn4U7B7sj2s2z23QddV/jJwrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 15:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:90:06:19:cb:86:84:d9:0a:12:cc:2a:be:f4:ee:09:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff3396374cbf5d767125f02dcf0f97296323092
        Validity
            Not Before: Mar 13 15:01:13 2025 GMT
            Not After : Mar 14 15:01:13 2025 GMT
        Subject: CN=758233ff2c17e9246ae8c001ab9a5003ef8e6988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fc:87:a1:74:d2:5e:b3:c1:a4:44:ca:11:57:
                    cd:89:0d:af:28:97:2d:f4:24:00:55:43:2c:aa:e2:
                    05:65:47:af:09:f5:d9:fb:d2:5a:16:34:91:86:ef:
                    1e:45:19:8d:d1:ef:1f:19:04:02:79:f6:54:c5:9d:
                    f2:22:76:b1:1e:5b:69:e2:c6:8d:a2:67:5d:22:57:
                    0f:d9:2b:d1:ac:bf:89:ec:95:85:d1:39:fa:87:a6:
                    de:31:1a:50:ca:41:3e:0a:3a:16:0d:47:47:2e:73:
                    f0:35:2e:b7:a4:f0:ce:d4:09:53:6e:7a:1c:c9:60:
                    27:8a:bd:df:8b:d0:ab:77:e2:3f:29:b1:ef:15:92:
                    37:20:b6:79:e9:34:5f:ca:99:90:59:a6:ae:07:84:
                    be:25:3c:f3:a3:6b:7e:23:d3:d6:c3:1c:c4:50:2a:
                    31:c2:fd:2e:54:67:90:6c:53:e6:5d:94:ac:1e:05:
                    07:b4:b7:49:86:b4:d8:a1:e5:a2:a5:73:47:d1:69:
                    5f:f6:96:9b:74:ab:1f:9e:e8:f6:56:c4:3a:d3:e5:
                    25:4a:01:3d:69:db:6b:12:79:74:11:78:b0:0e:bc:
                    8d:74:a0:bd:d0:35:be:31:c6:47:9a:0c:37:e8:b7:
                    a3:9a:3e:05:69:9e:74:c0:b7:b9:bc:0f:6f:41:30:
                    58:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:82:33:FF:2C:17:E9:24:6A:E8:C0:01:AB:9A:50:03:EF:8E:69:88
            X509v3 Authority Key Identifier:
                keyid:9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:1b:8b:9a:e2:b8:a5:e5:f8:f9:c3:ba:fd:6c:e3:c4:13:30:
         c1:14:5c:0b:dc:45:fa:21:be:a9:b0:99:70:40:7c:de:32:0b:
         3f:29:2d:10:5a:6c:4d:ee:c8:61:d9:de:00:2f:ee:be:4b:27:
         2f:9b:2c:d1:c5:1b:c0:20:13:16:d8:53:10:d6:ab:38:b3:27:
         62:0e:9e:73:51:59:6a:2a:89:75:64:02:3d:71:b7:4d:e6:d2:
         e5:67:7a:45:05:a5:32:7d:c8:5f:5a:02:b8:5b:d2:03:c4:00:
         db:6b:8b:aa:ac:1a:05:f2:b8:a0:6a:91:ce:4f:c2:1b:4f:99:
         8b:dd:87:39:0a:99:59:40:ba:a5:55:77:64:f4:96:d0:38:9b:
         f1:52:62:fb:f9:b1:de:3c:cd:b5:ad:a5:52:88:55:c6:8d:bc:
         3e:b7:40:44:8a:6c:90:4c:2d:00:ed:3c:49:cb:c7:fa:03:a6:
         60:d2:12:34:5e:83:ca:1d:bc:b6:87:52:0f:d8:f1:b9:51:3c:
         63:54:43:f7:46:fc:d3:d9:18:79:f3:f6:ef:99:d5:5d:2c:c8:
         51:97:a9:f5:68:8a:4a:fa:1d:12:8a:3c:d8:27:44:c4:2d:d6:
         4c:c6:43:8c:1b:5f:5f:9f:04:57:75:c6:a7:b8:1e:19:da:d7:
         70:5c:70:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:34:38 2025 by rpki-client