Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.mft
File:                     miZlfmslRJQlt0hkXnQgx2rCs6Q.mft (raw, json)
Hash identifier:          F80cyGlK/c0A6w+k4ZcRi8UzSPNuCYN85eqSKBzwK+4=
Subject key identifier:   33:85:19:00:5E:10:01:E6:67:9E:CD:F9:7E:21:E5:80:15:1E:11:7B
Authority key identifier: 9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
Certificate issuer:       /CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Certificate serial:       01964443E6B6E32BF29A4703FF60645A65D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.mft
Manifest number:          0CEC
Signing time:             Thu 17 Apr 2025 15:00:22 +0000
Manifest this update:     Thu 17 Apr 2025 15:00:22 +0000
Manifest next update:     Fri 18 Apr 2025 15:00:22 +0000
Files and hashes:         1: 2V_JK6rjk2y5OzV-jGzfsnfR4RM.roa (hash: 01s7oF2QbdI5IMZDB8rKIwaE1speupoZ2KjAlI2OqvU=)
                          2: ZoKIl9YZFuoqn-M6l74COof5MHQ.roa (hash: PDlBi/GUPca2M+ClQHY6i6FrWZfP2ejkU5uyGLD6hR0=)
                          3: cbtDU2QhUAaEdfn79ud9d1retQE.roa (hash: zIapCEP1U16iRYVZKfI5rkQeutzKrMtnN/VL2r5jtgA=)
                          4: miZlfmslRJQlt0hkXnQgx2rCs6Q.crl (hash: bQhnfBr5S/jLcBs31NXdKbE6dhLFzzLeZIvkhyPk4mA=)
                          5: tcw5kSwgCsyK7wU_KlBpjuCfh_w.roa (hash: IkNsXEM5r0B1nHPPxQlYpu689+V6gLtheirq0sa61gk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 15:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:43:e6:b6:e3:2b:f2:9a:47:03:ff:60:64:5a:65:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a26657e6b25449425b748645e7420c76ac2b3a4
        Validity
            Not Before: Apr 17 15:00:22 2025 GMT
            Not After : Apr 18 15:00:22 2025 GMT
        Subject: CN=338519005e1001e6679ecdf97e21e580151e117b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:cb:ee:e7:ee:17:4b:00:d5:ee:e4:88:56:47:
                    3f:f3:30:9d:0c:bb:03:df:d5:f4:9f:23:31:b0:e5:
                    83:8c:60:b5:e7:0a:fe:84:f3:ff:1f:38:f1:34:5b:
                    5a:49:c3:d6:2f:32:61:07:22:b4:de:2c:9c:ad:85:
                    9f:18:02:c3:c1:60:92:e7:9a:da:45:f3:e2:8c:1c:
                    de:66:40:ad:0b:66:98:ec:cb:b3:fe:a4:37:c0:1a:
                    c1:2a:16:82:41:57:85:ef:1d:00:19:05:ec:73:32:
                    9d:ef:7f:41:d3:6f:b8:6a:1c:df:9c:1b:02:e3:31:
                    0f:a8:2b:24:1d:50:78:95:3c:07:03:6a:59:d2:4b:
                    1e:47:3b:26:18:4a:8f:58:86:cf:7c:36:b2:b1:40:
                    69:43:01:71:30:a7:ac:05:c4:11:d4:9d:e3:93:57:
                    01:13:9a:09:e1:45:fc:1f:57:8b:34:a0:9d:1f:1d:
                    de:f6:88:9e:2a:b1:0f:2f:d4:82:ab:a5:d3:14:c7:
                    f9:f6:82:e5:ca:27:f3:bb:cd:70:a9:88:02:06:b4:
                    22:5d:c6:c0:d8:88:20:77:5b:c7:60:b8:e5:1f:d9:
                    9a:be:1e:88:22:ff:91:84:ea:2b:9f:9d:9b:a5:3d:
                    2e:78:a9:87:e2:c0:00:e2:59:05:c5:56:64:18:bb:
                    14:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:85:19:00:5E:10:01:E6:67:9E:CD:F9:7E:21:E5:80:15:1E:11:7B
            X509v3 Authority Key Identifier:
                keyid:9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d5:96:13:43:a9:44:6c:bb:d4:14:e7:e4:a5:f9:cc:08:ec:
         19:b0:73:f1:59:a2:64:99:49:44:ef:5b:f2:86:9a:72:89:ac:
         f3:e8:0d:41:d2:9d:46:31:3f:92:9b:04:67:67:09:0d:96:d7:
         5c:23:13:c0:3f:fe:77:00:64:0e:c4:a2:a8:4f:49:6d:29:cd:
         df:dc:b8:2f:1d:49:28:98:70:df:de:20:84:4b:99:6a:14:55:
         df:43:a6:25:5c:1e:46:86:3d:56:4f:a8:7d:80:d2:ec:f0:71:
         15:5a:2d:4c:a7:aa:97:b9:0c:3b:c5:8c:67:27:50:73:0a:a3:
         9f:ea:82:e1:5e:a0:a7:b8:67:e3:e1:8d:15:e6:36:c1:3a:9a:
         a9:59:89:ea:94:b3:15:15:75:dd:e9:41:e4:c2:40:ab:bd:c2:
         b4:3a:66:23:9c:f6:45:96:61:ea:ed:c9:1e:52:f2:17:86:4e:
         36:93:2a:e5:bc:71:6f:20:d1:39:bb:8a:62:a0:b0:ef:85:28:
         ee:b6:5a:c3:02:41:ce:bd:d3:03:d4:64:8c:7f:c3:10:3d:d9:
         7d:8e:bb:a0:55:ed:4e:01:ef:48:be:26:af:28:5f:76:53:7f:
         a7:ab:12:43:ac:9f:85:69:23:2a:b3:0d:92:5c:e9:32:ec:da:
         58:15:9f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:03:23 2025 by rpki-client