Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
File:                     nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft (raw, json)
Hash identifier:          DBH8ZT8b4N4VEfgebTkhbZ/DVWUibkeSV8GpfBp3SCw=
Subject key identifier:   EE:65:CF:A9:DC:AF:80:AB:A6:52:8A:84:E8:7C:88:9E:00:3E:BC:7D
Authority key identifier: 9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B
Certificate issuer:       /CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
Certificate serial:       0196447B0194D780928A014FEAA2B0152C8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
Manifest number:          11B6
Signing time:             Thu 17 Apr 2025 16:00:33 +0000
Manifest this update:     Thu 17 Apr 2025 16:00:33 +0000
Manifest next update:     Fri 18 Apr 2025 16:00:33 +0000
Files and hashes:         1: H8-POwHizkmBcV_QJ_0-Jxyzw5E.roa (hash: vyyHUtBQsEXAg98AdmKq411tDHnSJnqHMROP1JZFAyQ=)
                          2: nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl (hash: 4YDif3bowAcN53y8GFyfTVJTwGfyG7i8gn/4MgICnoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:7b:01:94:d7:80:92:8a:01:4f:ea:a2:b0:15:2c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
        Validity
            Not Before: Apr 17 16:00:33 2025 GMT
            Not After : Apr 18 16:00:33 2025 GMT
        Subject: CN=ee65cfa9dcaf80aba6528a84e87c889e003ebc7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:84:ae:db:5b:c0:ed:61:53:cf:ac:d8:27:58:
                    1a:6f:58:94:02:5b:72:ee:52:0c:35:3f:6b:48:3f:
                    6b:59:ad:96:f8:52:31:ab:6c:02:85:3b:9e:1e:fe:
                    5e:d6:e2:07:50:6a:30:15:07:b3:59:13:2c:9c:11:
                    7a:d2:06:7d:06:67:ff:6c:49:cd:e7:77:34:b0:f0:
                    4a:64:b3:82:a1:3a:34:77:17:3d:eb:56:d8:72:7d:
                    2e:a0:d9:be:90:1e:9c:50:be:e0:31:78:53:fc:00:
                    e3:db:c6:fb:f7:03:95:88:02:4e:2b:be:73:a5:7c:
                    7f:e9:76:ef:3e:ff:e3:b1:2a:ae:e3:f7:7f:25:d4:
                    fb:d2:cd:d5:4f:de:d3:7f:17:e9:19:0a:88:9f:6e:
                    cf:40:6a:c1:1d:58:f9:b4:03:c5:09:dd:1e:06:c1:
                    01:ab:de:88:b8:b0:94:ed:47:4d:8a:ba:78:84:36:
                    99:40:db:62:b9:42:f8:68:27:b3:2e:b0:7a:ee:ae:
                    d7:c9:18:3f:7c:76:5e:87:fe:7e:e0:d1:cb:a1:36:
                    a8:fd:b3:b1:9b:d3:32:23:a2:4c:c9:1a:13:7c:53:
                    90:52:e5:03:85:d8:33:21:25:87:46:8c:10:17:83:
                    31:6a:3a:6c:d2:99:61:99:21:bb:31:b4:d4:c6:8a:
                    29:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:65:CF:A9:DC:AF:80:AB:A6:52:8A:84:E8:7C:88:9E:00:3E:BC:7D
            X509v3 Authority Key Identifier:
                keyid:9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:7b:4c:98:87:f2:85:0c:01:ee:0a:5e:b3:10:a9:8d:35:ed:
         c1:17:0f:99:85:ed:97:39:70:58:ba:63:fe:82:89:89:6f:fb:
         59:40:75:11:1f:8c:06:8e:da:51:93:be:52:b8:12:18:5b:01:
         0e:5f:e9:0a:d0:3a:05:48:d8:d5:62:b0:44:bc:ff:b7:f9:f6:
         9a:c7:fe:84:c8:b0:e8:e6:f4:f2:03:22:c1:cf:69:d1:67:1b:
         95:a0:f1:a9:a9:1b:ee:97:c8:ca:c2:1d:dd:44:8e:ab:8f:1d:
         7d:31:88:2c:72:db:70:0e:fe:31:b6:7e:f7:9b:90:32:c8:5b:
         70:52:bb:5c:41:c1:23:e6:56:fc:6f:3f:86:23:0a:6a:ae:8a:
         e2:ab:83:81:ef:8f:0c:46:c8:c2:4a:28:aa:48:45:be:f0:68:
         f7:82:b0:7b:4d:a9:fc:80:6b:82:db:80:9e:14:4d:4a:cb:ce:
         d1:10:df:47:25:22:34:e4:32:93:ea:f4:ed:81:13:b8:37:93:
         54:1d:d1:1d:63:29:b5:37:de:a0:b2:a9:af:2e:f9:e5:6a:6c:
         35:57:fc:95:a1:96:f7:4d:15:16:dd:f7:de:2d:14:de:19:ba:
         dd:5f:1d:92:4d:e1:7e:6d:b4:c9:6f:20:cf:a6:d2:fe:56:89:
         d8:eb:bc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:03:16 2025 by rpki-client