Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
File:                     MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft (raw, json)
Hash identifier:          8tWwAUFNFrL7cmdGqe2OInoMukY6+8tZgLDVMreVEQM=
Subject key identifier:   2C:9F:17:1F:67:69:CB:96:3E:CC:4F:8B:31:A8:30:99:D7:34:86:5C
Authority key identifier: 32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
Certificate issuer:       /CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Certificate serial:       01964BFDB0CF63907A0C483E97C4955961AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
Manifest number:          14FA
Signing time:             Sat 19 Apr 2025 03:00:39 +0000
Manifest this update:     Sat 19 Apr 2025 03:00:39 +0000
Manifest next update:     Sun 20 Apr 2025 03:00:39 +0000
Files and hashes:         1: FhZSLFV8-vM046QI8Vb33R1E0e8.roa (hash: f3eqnqdq9rWk7n9nPOwGunFqubODgfs5rafbqH5/HQw=)
                          2: MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl (hash: cSq95KLsOn5e5c8F8SZW75Ng3Th/JxIY6Y6IH8n2Gvk=)
                          3: X-ClDjMzAtgNyKBr2k9TMrqu3vE.roa (hash: 7Ip8LVyEIhcWLOz6eWH0cRFN5zErMvUCRSSMLokd5pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 03:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:fd:b0:cf:63:90:7a:0c:48:3e:97:c4:95:59:61:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
        Validity
            Not Before: Apr 19 03:00:39 2025 GMT
            Not After : Apr 20 03:00:39 2025 GMT
        Subject: CN=2c9f171f6769cb963ecc4f8b31a83099d734865c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:18:e4:bc:1a:3c:5b:76:ff:38:a0:2f:6d:
                    7a:03:df:c9:7b:e2:4d:59:3f:b5:11:0c:37:0d:88:
                    b4:c6:6c:cf:44:98:86:90:6d:6e:be:c4:39:3a:d9:
                    3f:37:62:67:1b:6b:49:89:4b:96:a1:c2:c9:98:d0:
                    1b:bc:db:10:6a:6f:55:5a:13:ae:27:d1:f5:31:1b:
                    b8:23:33:32:4b:00:2a:73:53:b8:c8:48:77:e8:4a:
                    70:4b:84:96:1d:18:e2:b3:fb:30:58:f8:9b:26:a9:
                    89:c8:d0:39:5b:e0:71:74:05:26:b3:af:35:f9:34:
                    c4:46:a4:5a:c3:dd:40:7e:3f:91:51:81:c6:07:60:
                    7f:c6:24:30:c0:0c:db:c1:63:2a:3d:60:8b:27:05:
                    49:34:94:ce:c8:84:2a:59:34:b3:c5:c6:b9:37:b1:
                    27:82:f6:e9:09:4b:79:e4:f2:bb:ac:05:55:9c:bf:
                    49:cc:cc:6c:ef:02:8c:da:3f:e0:0f:28:47:da:e6:
                    e7:73:1c:b9:3c:99:48:10:41:ce:a9:a9:ac:18:39:
                    bd:a6:b8:01:c3:92:aa:d4:57:23:fe:e5:46:aa:21:
                    c2:61:17:d8:8c:58:a3:df:09:4b:e6:db:5a:30:1c:
                    40:f3:3f:42:6f:e7:74:e6:7b:12:bb:1f:53:c9:d7:
                    4e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9F:17:1F:67:69:CB:96:3E:CC:4F:8B:31:A8:30:99:D7:34:86:5C
            X509v3 Authority Key Identifier:
                keyid:32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:62:c4:42:7b:12:4a:c4:0f:c6:84:c1:6a:d7:bd:85:6b:21:
         51:6e:65:83:b6:be:d4:20:83:2f:6a:ef:bf:96:88:ba:04:17:
         29:c9:f9:fb:c8:42:b8:95:26:b7:ab:b0:e1:5e:b3:16:bb:f6:
         94:60:fa:18:89:51:18:ce:84:04:67:e2:2a:d1:f3:7c:ac:e0:
         64:8f:36:4b:ec:a5:7b:bf:0e:38:e4:d1:6b:75:25:5b:c7:9e:
         60:6d:10:7c:19:2b:8c:9d:00:2e:8b:75:b1:7c:b3:4d:a9:d2:
         12:e6:a7:4a:93:b8:84:3b:de:bb:91:7d:e4:da:96:0f:71:bd:
         f5:ca:09:f7:a2:3e:47:87:41:53:8a:9c:b7:8f:18:2b:b8:71:
         e7:32:bd:12:ec:9f:58:e6:34:f0:99:79:b2:df:52:75:27:aa:
         fc:77:da:87:c2:b7:cb:90:cb:be:13:5d:8b:67:59:20:aa:51:
         4a:4c:30:db:8b:21:dd:f4:15:af:0e:72:7f:de:d6:25:b7:89:
         40:96:b5:1c:63:4c:bc:b0:5f:fd:05:c5:cc:71:0b:9c:af:05:
         87:83:3e:7d:17:91:ab:16:a1:30:9c:e0:fd:8b:0a:ae:5b:51:
         57:37:07:ff:2a:e5:63:5a:4e:2e:0e:3a:48:26:92:e8:4b:b1:
         7f:bd:98:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 13:58:38 2025 by rpki-client