Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
File:                     piqMeh9qTJSeAntTadl9dXbhR_g.mft (raw, json)
Hash identifier:          PiPSJ4cvm+xqrwNuUGU56uSbvYnHmhq8CMlELyjU3DA=
Subject key identifier:   8F:2E:9C:F5:CA:43:28:C4:94:12:D0:69:2A:FF:9B:E1:5C:60:E8:42
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Certificate issuer:       /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial:       01964F6D30200B701CD333AE37538FEC1C1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
Manifest number:          093E
Signing time:             Sat 19 Apr 2025 19:01:17 +0000
Manifest this update:     Sat 19 Apr 2025 19:01:17 +0000
Manifest next update:     Sun 20 Apr 2025 19:01:17 +0000
Files and hashes:         1: BxgD-RrZabBuEEfFQkOR7JzPkYA.roa (hash: Dbgg4n4USIHYY1LVI9yt8KqtluJXraRBx7hK71/1AxU=)
                          2: _HboziFCCXY6Aftni-9e_QXHS7Y.roa (hash: 1Dtm7p4VO9zPNWsz+P/VL1I6c+v4X7GMgtJoAtf8pBU=)
                          3: piqMeh9qTJSeAntTadl9dXbhR_g.crl (hash: Ymw9emi9xifLOPoAjephIx+5mjIZn+yZ280JduT3iPw=)
                          4: y3UMX5qqKpS7PayD_PFfS-9xYiA.roa (hash: 1x0+PMsy7NMRlTF0Iq4hoHsB7a+mNEhOddx/6ZAYPrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 19:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6d:30:20:0b:70:1c:d3:33:ae:37:53:8f:ec:1c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
        Validity
            Not Before: Apr 19 19:01:17 2025 GMT
            Not After : Apr 20 19:01:17 2025 GMT
        Subject: CN=8f2e9cf5ca4328c49412d0692aff9be15c60e842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:63:7d:3d:38:24:e8:2c:d5:2b:6d:4e:bc:3f:
                    9b:2b:3a:97:ef:d5:6a:e1:ff:3d:1c:c3:2e:5c:bc:
                    c1:fe:4f:bb:91:df:77:2a:e8:53:ac:df:e3:fa:58:
                    ab:7c:51:9e:20:3e:4c:04:51:70:b0:a2:92:8b:d4:
                    36:f2:48:a7:2a:e0:5c:40:42:80:79:b5:85:bc:ad:
                    40:0d:e8:8a:4d:7b:f9:40:89:26:02:9b:a4:1e:4f:
                    20:e0:4a:e3:00:a6:b4:e8:f3:a9:d3:d4:22:f7:e2:
                    c2:82:02:dd:70:1b:e5:3d:f1:68:1d:cb:c1:c2:1c:
                    c0:5f:4f:7a:47:d4:87:58:c2:87:e7:92:ba:9d:e9:
                    9e:94:eb:03:85:74:95:78:73:9d:dc:a2:41:f3:49:
                    eb:98:d9:e9:86:19:18:28:d5:b6:65:1a:f7:85:4d:
                    0e:43:3f:89:56:7f:ce:e9:8b:8b:9b:fa:22:0a:50:
                    45:0b:d7:9b:fc:95:04:8c:fb:db:10:a8:51:7d:14:
                    24:21:4b:c4:e6:5f:3b:ca:ca:b7:15:b0:c9:6f:c8:
                    46:fd:da:64:2e:b3:51:d1:b7:ef:ac:3e:de:77:fa:
                    7b:b9:de:7e:a4:56:f7:ff:92:ff:1a:1a:ff:cf:51:
                    47:cd:fc:91:e0:f1:dc:27:6e:f3:a8:8e:b1:c0:fa:
                    4b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2E:9C:F5:CA:43:28:C4:94:12:D0:69:2A:FF:9B:E1:5C:60:E8:42
            X509v3 Authority Key Identifier:
                keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ae:e1:7c:4d:e9:18:91:2f:10:47:8c:78:6d:6f:36:19:2b:
         14:8d:96:f5:e8:7a:73:e0:a5:ae:22:b8:14:f7:d8:72:46:71:
         c7:b5:f2:4b:6f:2b:39:4b:10:79:cb:b4:e9:89:b1:12:bc:5a:
         c3:13:73:32:1c:86:2a:bd:34:dd:d7:d3:eb:6a:2c:89:05:72:
         f9:a0:f8:fc:fd:56:42:b5:60:89:6e:1d:e2:29:33:b7:b8:27:
         a5:6b:5e:6f:6d:27:52:1d:44:5b:1c:5e:cb:f2:6c:56:bd:2e:
         53:85:f0:f2:01:c9:78:84:4a:a6:7b:71:f7:1d:fe:9e:e0:86:
         4e:e5:b5:74:08:3c:f6:83:e5:9a:af:d5:69:6a:44:4f:5a:20:
         7c:39:22:f5:fc:28:26:50:79:44:94:d4:16:bb:5d:fc:8c:7d:
         f9:c4:2b:6a:80:ff:f1:5d:f8:30:6b:ac:14:38:46:b8:2a:77:
         18:89:5e:4a:61:f4:e7:fe:87:68:f4:f1:6c:19:4c:31:46:60:
         0a:61:cc:07:14:b8:fb:c7:bf:ca:5f:e8:25:df:76:28:7b:07:
         b2:b4:5c:46:b7:bf:82:6e:f4:04:68:f0:76:f5:cd:b4:11:0a:
         19:1c:07:11:6a:4e:35:20:71:24:fb:7f:2c:d4:4d:55:24:be:
         bf:ed:70:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:27 2025 by rpki-client