Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
File:                     nWuXdMlIdsmDId4yAbEbdaE1jRk.mft (raw, json)
Hash identifier:          4pGHwdHVuWK/59HIog/WSdKbXlQM5uI+fdVTxHLxyg4=
Subject key identifier:   A7:5F:9B:F9:1F:73:13:A2:46:59:3E:66:9D:B1:8C:BF:8A:9C:5E:3C
Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
Certificate issuer:       /CN=9d6b9774c94876c98321de3201b11b75a1358d19
Certificate serial:       01950ED88EF62A12FED3B26604336359D3E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
Manifest number:          0F83
Signing time:             Sun 16 Feb 2025 13:00:28 +0000
Manifest this update:     Sun 16 Feb 2025 13:00:28 +0000
Manifest next update:     Mon 17 Feb 2025 13:00:28 +0000
Files and hashes:         1: IgwhmqSO8SiVzutSuC-ggN1y5hs.roa (hash: hWda86la1UQ6+/Ceq4HxCjEUdf3IPSx/E6cAKbn8Wy8=)
                          2: NQOelXfnh9zNy4F5hN9_tYjE3Bs.roa (hash: qXIyT3lUz5bJt0IF4d25cysT8WLakbijoLlu5EAXUys=)
                          3: _fuT4R68BHlPpUP6HiVZDSmxINI.roa (hash: bvu+tWo4UXme3jTLsLEJ6SMX9XI3uAoVhAKkTxW9r90=)
                          4: boOUh_OegScUQI0rJ0GXkth8K70.roa (hash: h8bMxthrp6BSgypE0yBkUmIOsuBuRoBa/El8mfbO7Rs=)
                          5: dencvyi0TxmMkZDQCX9rZJN2RzU.roa (hash: B52p98p3HEzzhef7/oXAaRqNFYHk2h3tC+DtHUn18nc=)
                          6: nWuXdMlIdsmDId4yAbEbdaE1jRk.crl (hash: FOXV7gF0Oj0ZUYt8mE8zbm2af3bJM6aNeYqpGaa8odA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 13:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:0e:d8:8e:f6:2a:12:fe:d3:b2:66:04:33:63:59:d3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19
        Validity
            Not Before: Feb 16 13:00:28 2025 GMT
            Not After : Feb 17 13:00:28 2025 GMT
        Subject: CN=a75f9bf91f7313a246593e669db18cbf8a9c5e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:25:ed:0c:8c:77:74:82:41:57:a0:37:fa:1f:
                    d5:cf:e6:d6:0a:e3:ef:16:86:89:ed:9c:f7:78:f3:
                    8a:25:14:34:ff:dc:ec:7c:8c:e7:4b:54:88:8c:7e:
                    43:b9:e1:a9:9e:57:ea:a4:52:1f:53:77:43:f0:d5:
                    ff:72:e3:df:83:99:b6:8d:00:33:30:81:2a:82:47:
                    46:54:90:3b:7c:c6:4e:88:55:08:62:9e:df:83:c3:
                    1e:5d:bf:28:15:94:f1:d1:33:f8:5f:c4:e9:c8:52:
                    ee:49:c9:f4:a3:b2:52:d8:22:01:81:60:df:6f:08:
                    d3:02:b3:ad:11:a4:20:19:86:f4:bf:f5:00:c5:17:
                    73:bd:77:a5:61:57:98:1d:07:c0:e6:44:11:b5:f4:
                    20:85:18:6b:44:e6:6a:dd:1a:df:bf:79:13:ce:43:
                    86:ff:12:79:fb:25:8a:c0:61:be:36:b0:2a:0b:28:
                    5c:53:62:43:68:91:61:72:95:f8:db:8d:44:b4:b5:
                    08:ee:27:5b:0c:1d:99:77:95:63:7e:1f:b9:84:d2:
                    e2:5b:fc:fa:87:9c:a4:e9:af:71:d4:23:f0:06:3b:
                    20:d5:68:5d:28:7b:90:54:b9:92:72:b1:d5:27:1e:
                    b9:b0:f5:6e:11:10:df:18:19:a9:b2:e2:10:32:b3:
                    5c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5F:9B:F9:1F:73:13:A2:46:59:3E:66:9D:B1:8C:BF:8A:9C:5E:3C
            X509v3 Authority Key Identifier:
                keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:94:a4:f9:25:41:04:10:bd:16:a8:14:a5:ea:dd:ed:33:7b:
         fb:43:14:c1:f4:34:10:97:37:76:c5:72:f2:7b:a2:5d:ab:3f:
         1b:c0:32:8b:12:bc:a4:f1:50:5c:9f:54:13:18:2d:8b:2e:37:
         c7:b7:a7:64:4f:0f:9c:a1:5f:26:36:7b:50:e7:35:2f:ac:9a:
         5b:42:81:4e:23:04:73:a4:80:a6:50:fa:42:d8:59:84:ba:45:
         ad:96:24:54:76:a6:eb:5e:24:4e:99:77:9c:32:d2:1c:29:31:
         2e:75:9d:a4:4f:43:0a:32:1c:58:0d:1e:59:80:63:3b:5b:97:
         8a:20:6c:f4:3c:7e:49:ad:3c:95:82:81:7c:48:c0:b3:70:c4:
         ec:b0:6d:75:cb:3b:6a:f2:a6:b1:5a:ee:93:c7:d6:39:65:d9:
         6e:b4:b2:d2:00:14:79:03:ac:03:cb:bc:a7:b2:c2:64:f2:63:
         73:9c:8b:43:52:ad:df:51:26:b1:cb:86:f8:bf:fd:7a:0f:be:
         c7:83:e7:1e:c5:1d:76:b9:c6:ff:4f:7e:fb:4a:c8:47:ad:15:
         6f:fe:bd:26:64:ea:c2:e0:c2:35:53:e1:ca:82:60:ca:41:be:
         38:80:bd:51:51:60:b2:60:e9:c6:14:22:db:a7:cb:80:98:aa:
         60:2a:5f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:52 2025 by rpki-client