Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
File:                     Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft (raw, json)
Hash identifier:          V37qca3ieyIL8YXSbZsE6+hDO4SccO4W33oFKnWODEI=
Subject key identifier:   7B:A5:E4:42:CA:E3:76:EC:4C:83:9C:88:1D:44:00:AD:45:4E:A9:4D
Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
Certificate issuer:       /CN=321ec194107843848cd36330232b5f6a43791db4
Certificate serial:       019606E5E118F3475D071AFD58B6BC11CF3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
Manifest number:          14D9
Signing time:             Sat 05 Apr 2025 17:00:50 +0000
Manifest this update:     Sat 05 Apr 2025 17:00:50 +0000
Manifest next update:     Sun 06 Apr 2025 17:00:50 +0000
Files and hashes:         1: Gdu8HvR0GdnLEy7v4D3Y7fu1whI.roa (hash: CRTwkdMF4Lc0blRbrlr/l3IQBv+j5fcBDyVa2paPuVE=)
                          2: KmGlwP7CjIaywccOkX2DOwKl0TQ.roa (hash: sUOuCVVmxheCpfNzBgnrrUGNWsQqJtbWGWiV/9xLfds=)
                          3: Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl (hash: rDS+Tf/jAgNxFEGCFnLRqcySmz67vDensRaT85+iH24=)
                          4: NVPuKIwqd6rXOALhTsUic2d4hlA.roa (hash: T7Dyc87WaeHKY9kvTOaXHf9jWNh88eWIMhxiFozXzd0=)
                          5: ZFAYM9mu8jS6R0AyRbdSE1lnwbA.roa (hash: tJHXTlE43Al/Bk06k42NooyquRAu3ree+mY4auRgVIA=)
                          6: wI9uA-y4Ji_oTB9dGXK_VIsut1I.roa (hash: Flvo8O6ohpyEK44nbX0dnhwPi3WDEZDqBbJfYZCPIXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:06:e5:e1:18:f3:47:5d:07:1a:fd:58:b6:bc:11:cf:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321ec194107843848cd36330232b5f6a43791db4
        Validity
            Not Before: Apr  5 17:00:50 2025 GMT
            Not After : Apr  6 17:00:50 2025 GMT
        Subject: CN=7ba5e442cae376ec4c839c881d4400ad454ea94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:21:56:45:cc:9c:53:e0:76:1d:e0:77:5e:44:
                    07:f1:86:b4:de:a4:4f:c0:c8:14:47:f3:d5:38:12:
                    0e:d0:6d:ef:09:a9:29:71:06:15:23:5c:4f:1e:da:
                    1e:59:87:f9:8c:fe:09:26:56:5e:73:ee:61:d0:34:
                    1e:d1:93:ce:01:db:2c:93:0f:dd:0f:b1:66:93:3b:
                    20:e8:f0:b0:ba:4b:0e:64:2b:1d:34:b9:0c:93:60:
                    1f:61:04:43:16:44:48:80:ec:a2:82:65:52:5a:0c:
                    6b:96:36:94:d3:2c:38:aa:d8:49:d4:25:e5:fa:1d:
                    f6:ce:2f:2f:29:01:3b:45:b9:e8:a7:56:19:5a:1b:
                    50:7d:e4:03:d4:a9:0f:ba:1d:33:b6:e1:e8:49:14:
                    0c:b7:22:81:dd:8f:39:85:11:4c:28:9b:02:15:61:
                    da:b3:dd:8a:e3:9f:6a:27:b6:fa:17:a8:02:a1:7c:
                    0f:38:15:a7:13:b1:f7:5a:82:94:1e:12:c1:3e:7a:
                    6b:f2:ba:45:b3:85:fd:e8:75:f2:55:9c:27:6a:bd:
                    9d:08:2d:2b:c8:2d:b0:2b:31:66:9d:43:bb:c3:db:
                    fd:bf:f7:8e:eb:7b:e8:e2:93:61:6a:36:38:93:87:
                    4f:fa:fa:8d:7f:c8:f4:4a:50:e0:fe:09:bf:5d:73:
                    c5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A5:E4:42:CA:E3:76:EC:4C:83:9C:88:1D:44:00:AD:45:4E:A9:4D
            X509v3 Authority Key Identifier:
                keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:58:62:2a:37:af:73:c1:c7:67:06:07:cf:8b:fa:dd:f1:6d:
         89:f4:51:4a:d9:42:5e:bd:92:8d:d6:65:1d:7e:06:7d:b0:c4:
         e4:92:37:3f:df:a4:bb:d5:eb:cf:6d:62:30:05:3a:ca:f9:5a:
         dc:1d:96:07:c6:bb:f9:29:4c:d5:49:a5:ea:3c:9c:b2:f0:a6:
         68:60:16:d0:b9:9b:aa:db:80:ba:99:43:15:53:16:ae:ad:01:
         5d:8f:1a:8e:02:85:9a:f8:69:66:db:71:9d:ea:79:42:38:9c:
         7a:86:35:d8:9b:c6:f0:08:84:a1:c4:69:ae:a4:97:80:e0:9a:
         5f:a1:08:e3:8f:52:3d:fc:22:ba:ca:c3:34:58:d3:87:48:bb:
         ca:89:a8:67:7e:62:6f:0f:dd:8f:ca:2c:72:b8:bd:c2:33:91:
         28:55:77:0a:f6:68:f8:a8:5d:b8:27:9d:11:ee:62:a2:25:61:
         06:26:d3:78:ae:be:47:d7:01:41:bd:40:15:69:05:59:eb:de:
         06:49:df:cd:1a:36:88:c2:df:6b:e5:16:ba:62:c4:de:90:44:
         6c:a1:68:d0:9d:c0:3b:c1:ac:14:6b:ca:b7:0e:72:95:b8:24:
         30:04:84:84:d8:15:bb:db:02:e8:c6:dc:39:57:be:c6:0d:bf:
         84:51:ab:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:14 2025 by rpki-client