Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
File:                     mnuajNgZ9KkgM01-cuwjQIcNd0k.mft (raw, json)
Hash identifier:          6injKNTF4b4dfcyGFh8dQYMkUU8NMhdiEaLDcrSASiw=
Subject key identifier:   8A:D6:87:E3:1A:7B:87:63:CD:E7:91:B8:4B:1F:D2:C2:5D:82:52:03
Authority key identifier: 9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
Certificate issuer:       /CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Certificate serial:       0196556E99B3418B060ECE737ED874FB5035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
Manifest number:          0769
Signing time:             Sun 20 Apr 2025 23:00:33 +0000
Manifest this update:     Sun 20 Apr 2025 23:00:33 +0000
Manifest next update:     Mon 21 Apr 2025 23:00:33 +0000
Files and hashes:         1: IKlMOdkuHyBNZAexC-GSK-hjGW0.roa (hash: uA4Q2gsvRlV+sSD0ED9KoTfpAy2mm9Pd7yFqglVpNvQ=)
                          2: ksVbRwAzzCZHci4kH2kQ6u8coqY.roa (hash: QaqWPpVajjOVbtuXKzhecjPRXn+V4yoJpRPVeesXbzw=)
                          3: mnuajNgZ9KkgM01-cuwjQIcNd0k.crl (hash: MtKhQj6uUraWDdd+AfUkbiNVqsaTgcgZ2SaXm+dIF5c=)
                          4: uOUxSiBIbzpDJ7EaKMdYFnC-HEQ.roa (hash: P7xU7zipmmpWbMdR+tIYpEi0SHoYEWAWhVNCw2vAWTE=)
                          5: xH_26XIR8lPG36a6e_UAuv1nVvs.roa (hash: skoMmZjq1jRGHL/wRavlOMxLKJaRep20S4gGa/juF00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 23:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:6e:99:b3:41:8b:06:0e:ce:73:7e:d8:74:fb:50:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
        Validity
            Not Before: Apr 20 23:00:33 2025 GMT
            Not After : Apr 21 23:00:33 2025 GMT
        Subject: CN=8ad687e31a7b8763cde791b84b1fd2c25d825203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:59:ee:3f:17:1d:bc:9c:ff:f5:14:c9:f7:1d:
                    00:30:b9:e1:58:79:74:e4:e6:b6:ca:cc:05:22:1d:
                    03:fe:2a:65:c3:3e:30:9b:c3:41:39:71:d7:8a:b4:
                    90:a7:41:2b:5d:1d:ca:00:2b:f1:14:95:9b:89:b7:
                    06:04:f8:23:2b:bd:5f:1b:5b:1c:09:d5:18:88:c1:
                    21:58:e7:27:9d:9d:ed:a8:8e:70:f2:1b:7d:a2:e9:
                    0e:b8:bd:63:3b:a0:f0:3d:d6:73:43:41:04:29:c6:
                    6d:10:60:0b:c1:5e:4b:9e:dc:c4:10:bb:d0:90:dc:
                    93:7d:31:8d:d2:4a:2e:0b:56:37:d5:04:4d:75:37:
                    4c:4b:d9:1b:4f:7c:8d:af:a1:a5:fb:22:d9:51:b8:
                    c3:c3:c7:fe:ee:7b:a6:54:3e:e5:c6:1b:04:51:23:
                    3d:a3:56:5b:48:d5:c0:4e:79:c5:bc:71:4c:dc:8c:
                    ce:cd:50:70:5b:e9:7c:0c:56:39:41:3b:97:34:d1:
                    22:f1:4d:34:02:f4:fa:5f:a6:80:90:8a:f2:f5:8e:
                    3d:15:ae:f0:cf:97:8e:fe:ad:4f:dd:21:0b:27:03:
                    f7:2d:ca:c3:a2:cf:04:1b:90:6a:bd:67:5f:78:d2:
                    93:78:2d:05:00:e4:53:83:fa:4a:c0:c0:4c:89:75:
                    3c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D6:87:E3:1A:7B:87:63:CD:E7:91:B8:4B:1F:D2:C2:5D:82:52:03
            X509v3 Authority Key Identifier:
                keyid:9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:62:4f:ee:35:6a:e4:08:39:4b:9d:ee:00:ff:47:4e:33:30:
         78:ae:e3:6c:06:b7:3c:55:e5:18:a6:55:0a:33:d1:86:a3:28:
         41:e2:7a:2c:49:8e:79:c1:a9:17:77:a3:d0:9c:53:c6:a6:96:
         54:35:1f:34:e1:25:c8:5d:0a:23:52:55:32:be:74:c3:7a:76:
         cc:c3:2f:63:75:31:e5:ca:f0:3e:95:93:e2:12:55:ea:7d:fe:
         87:10:1f:1f:45:86:a1:e5:44:a4:bb:61:e5:e3:e7:37:5a:6c:
         ed:92:e7:d3:65:9f:2f:b6:1e:e5:9e:73:af:26:77:a2:8a:3e:
         ef:8b:a2:e6:23:c1:31:d5:5e:99:01:39:eb:3d:82:90:98:d7:
         16:28:58:b1:93:4c:b8:56:22:20:e5:76:12:96:c8:ce:72:16:
         d8:2b:e9:8b:b0:71:08:69:83:99:74:ec:b3:8f:28:07:31:9d:
         7d:b0:b6:db:1d:60:fa:11:ac:82:08:1e:47:1d:23:b8:e5:58:
         57:06:f2:5c:e1:97:1c:82:7a:14:bc:9e:d9:4e:a9:9e:f4:30:
         d8:2f:cc:0e:2e:88:54:84:ed:b8:e6:1c:f4:58:ba:9e:94:49:
         51:a9:95:76:03:b6:21:ff:7f:f3:fe:87:c1:21:fb:9e:e4:2f:
         2d:49:a7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:32:29 2025 by rpki-client