Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
File:                     nWuXdMlIdsmDId4yAbEbdaE1jRk.mft (raw, json)
Hash identifier:          KVRO3ErVAsIR+9kg4obV0NWOwfcgLsJkFLp82J9S+U4=
Subject key identifier:   1D:C4:CA:08:66:90:06:0D:8E:8B:F0:1A:32:50:67:4F:FC:73:2F:AA
Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
Certificate issuer:       /CN=9d6b9774c94876c98321de3201b11b75a1358d19
Certificate serial:       01962AF2963D19DF86E8BC73C9DF728E94ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
Manifest number:          1017
Signing time:             Sat 12 Apr 2025 17:01:03 +0000
Manifest this update:     Sat 12 Apr 2025 17:01:03 +0000
Manifest next update:     Sun 13 Apr 2025 17:01:03 +0000
Files and hashes:         1: HXLS-XKu3_p7nhpZ2K8scEyS_rc.roa (hash: 8XJ8ceqUC/FtGHEdtNIo+tnT3APlE19braxx2C56keI=)
                          2: NQOelXfnh9zNy4F5hN9_tYjE3Bs.roa (hash: qXIyT3lUz5bJt0IF4d25cysT8WLakbijoLlu5EAXUys=)
                          3: _fuT4R68BHlPpUP6HiVZDSmxINI.roa (hash: bvu+tWo4UXme3jTLsLEJ6SMX9XI3uAoVhAKkTxW9r90=)
                          4: boOUh_OegScUQI0rJ0GXkth8K70.roa (hash: h8bMxthrp6BSgypE0yBkUmIOsuBuRoBa/El8mfbO7Rs=)
                          5: dencvyi0TxmMkZDQCX9rZJN2RzU.roa (hash: B52p98p3HEzzhef7/oXAaRqNFYHk2h3tC+DtHUn18nc=)
                          6: nWuXdMlIdsmDId4yAbEbdaE1jRk.crl (hash: uQXGkpCmAEqzpP3DgOcVoGoQqJCaLgi3lCa040Sgy7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2a:f2:96:3d:19:df:86:e8:bc:73:c9:df:72:8e:94:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19
        Validity
            Not Before: Apr 12 17:01:03 2025 GMT
            Not After : Apr 13 17:01:03 2025 GMT
        Subject: CN=1dc4ca086690060d8e8bf01a3250674ffc732faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2b:29:70:f9:30:59:a0:c1:dd:42:e8:a3:37:
                    c5:d4:a9:5e:0e:1c:38:b0:c6:67:07:95:21:11:aa:
                    44:82:d4:66:81:de:ab:28:68:96:22:54:84:b4:b5:
                    32:75:b5:8f:f8:cf:69:79:75:4d:e4:a0:df:2a:79:
                    48:25:9f:63:de:b8:bf:5c:59:76:ee:37:73:f9:01:
                    05:6a:00:81:b7:00:0e:dc:f4:0e:ab:40:59:fc:3b:
                    6e:60:8a:93:8a:c0:7b:46:cb:8d:21:f3:9b:b4:57:
                    4f:c4:d7:31:fd:a2:e2:73:f7:c2:71:ea:31:60:86:
                    f5:89:4d:4f:c0:26:47:12:67:c5:3d:e5:05:17:99:
                    95:d3:bb:24:5b:fd:69:a4:81:9d:3c:47:91:0b:e7:
                    53:a3:e9:2d:b2:d8:26:c3:05:44:33:bd:46:74:74:
                    50:87:33:de:dc:7c:ad:dc:01:39:66:3c:eb:4f:7a:
                    3f:de:13:4d:34:ce:b2:aa:a7:80:4b:41:3d:ff:de:
                    61:92:ff:dd:99:84:61:e0:ee:64:7e:67:bc:b6:f6:
                    c1:bc:48:a1:a3:1f:40:06:da:9b:23:e6:2c:6a:33:
                    72:69:39:12:3c:23:80:82:58:bc:cd:4b:49:ff:8a:
                    f6:f5:6b:8d:e2:9e:60:8f:1a:5d:e1:93:2a:dc:b2:
                    5c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C4:CA:08:66:90:06:0D:8E:8B:F0:1A:32:50:67:4F:FC:73:2F:AA
            X509v3 Authority Key Identifier:
                keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:03:1e:9b:2e:83:2c:c8:1a:1f:d7:a6:05:62:28:98:c9:c9:
         08:17:47:75:16:aa:3a:af:eb:7e:fe:91:b3:e5:86:17:6c:a8:
         00:19:90:9e:82:4f:d6:5e:3e:ad:f4:35:77:1c:4e:24:c6:27:
         ba:96:4f:c7:31:74:3e:64:ae:0a:27:9c:be:6b:d9:d7:22:38:
         54:0f:b3:37:dc:0b:e3:50:87:f6:dd:bb:f0:4f:0d:c7:4b:79:
         d6:ff:b2:25:75:9d:80:dc:79:56:16:0b:a5:60:f0:50:cd:b7:
         ca:ec:8e:b6:09:08:dd:d2:aa:56:2b:8a:91:7b:e5:df:1f:b1:
         5f:0e:af:21:07:46:46:ff:87:4e:a7:f0:2a:71:16:c1:27:53:
         b6:f5:de:dc:41:d1:99:25:d9:da:73:d5:32:ef:19:3a:5b:ec:
         55:62:9a:f1:5b:dc:c9:f2:9d:ea:3d:a9:8b:be:2f:f5:64:49:
         0a:cd:8a:e8:8e:a7:de:c2:47:f5:9e:22:e4:bc:07:39:70:a6:
         80:24:e9:c9:16:a4:b7:19:e7:15:51:af:e1:07:fd:27:57:33:
         0d:ee:51:ed:7a:ce:a8:53:2d:4a:1e:84:8e:13:99:1a:ce:cf:
         12:f0:05:11:b7:eb:c6:09:14:78:9d:18:82:00:d0:ca:38:16:
         a9:38:38:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:05:02 2025 by rpki-client