Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
File:                     MVlVxK8-sajTQAqGYl42XCYpjWo.mft (raw, json)
Hash identifier:          3yKmuI5OpunmeTL4O/AAiqGVw/yLJDh6v9HmnAEwjK0=
Subject key identifier:   9D:76:79:DD:86:57:D7:01:62:68:D6:8B:6C:D1:F0:81:92:F8:25:42
Authority key identifier: 31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
Certificate issuer:       /CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Certificate serial:       01964B58E0DCC99B27B6409F283140E84A16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
Manifest number:          12A1
Signing time:             Sat 19 Apr 2025 00:00:37 +0000
Manifest this update:     Sat 19 Apr 2025 00:00:37 +0000
Manifest next update:     Sun 20 Apr 2025 00:00:37 +0000
Files and hashes:         1: AaZqekVqXMtY7zZxpFlHfm5QAjY.roa (hash: sZGw/ceX9GbcsyDNRtsXxQmamgue/4b7o8nJC51Ghrc=)
                          2: MVlVxK8-sajTQAqGYl42XCYpjWo.crl (hash: FlWLSqjvpanOHODxsRpCvKyZzqQa6Cits2zbpCNtfZs=)
                          3: w_D9zm0G6d-xgLYZDk_6k0Fdo0Y.roa (hash: uNakKZ5cInU4w53MHNcs8H1FEfnS50QeJJ6h44hvoXU=)
                          4: xFbU4UXG5RajcOwoLmpvCSpG_lI.roa (hash: EpP3aMWHOolyh4RCM05UrLn8Zcfi0zy+85a7iQrKm9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:58:e0:dc:c9:9b:27:b6:40:9f:28:31:40:e8:4a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315955c4af3eb1a8d3400a86625e365c26298d6a
        Validity
            Not Before: Apr 19 00:00:37 2025 GMT
            Not After : Apr 20 00:00:37 2025 GMT
        Subject: CN=9d7679dd8657d7016268d68b6cd1f08192f82542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1c:5b:51:f4:7f:2a:c3:f0:ed:b2:17:ac:42:
                    0c:2b:53:3e:db:0f:c4:a5:40:0b:78:b4:5d:74:f8:
                    fe:bf:18:3f:72:6b:a7:9e:4e:d7:ec:de:fb:b8:48:
                    45:ef:a9:84:50:5e:24:2f:dc:28:60:c5:a2:b0:5c:
                    bf:2c:0b:32:c6:d4:a6:db:8f:e6:4c:04:71:94:e9:
                    ff:22:da:c1:68:48:c1:d6:3f:a7:cc:3f:64:9e:44:
                    bc:f8:5d:7e:50:50:b7:c0:dd:16:75:cf:b6:fd:c7:
                    f1:53:07:3f:2c:f2:ce:b0:d2:dc:3a:46:aa:4f:ea:
                    6f:84:f2:51:74:e2:ab:e3:94:f2:22:5e:d7:2a:54:
                    32:c7:e0:ff:a6:b6:08:7a:28:97:d7:8a:8f:a6:9d:
                    00:7f:45:06:62:99:8b:90:6e:0e:2d:74:7a:ad:19:
                    f2:5c:64:d4:d2:9f:26:b3:4e:28:a2:4a:9b:1c:33:
                    0e:19:0e:3b:08:65:85:7f:c4:68:99:f2:82:a7:6d:
                    c7:e2:c0:be:e2:ed:04:1a:72:31:f5:9c:65:fd:d6:
                    42:ac:88:9a:c6:01:e9:fb:c9:bb:30:db:a4:97:7c:
                    e5:b6:d0:cd:89:7c:5b:eb:42:6f:d9:9b:b9:43:cc:
                    e5:1c:52:91:9d:95:46:6c:41:96:aa:9e:9f:85:e9:
                    6c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:76:79:DD:86:57:D7:01:62:68:D6:8B:6C:D1:F0:81:92:F8:25:42
            X509v3 Authority Key Identifier:
                keyid:31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:37:76:0d:99:ca:53:78:3e:c8:5a:bf:04:44:58:ca:29:af:
         a6:c0:25:a1:5f:a5:74:0a:03:03:00:54:24:6a:4d:7f:f6:18:
         89:a3:69:90:11:3e:52:f4:22:0a:4b:52:b1:07:ef:50:22:e6:
         fb:7d:c7:63:79:a6:56:b6:41:81:bd:24:de:a1:9b:bf:78:2f:
         6c:3c:82:44:70:cb:79:78:dc:bc:7b:77:c0:70:b2:10:b4:7a:
         f7:c3:2d:70:0d:9e:de:f7:d3:79:cb:2b:44:4e:87:a0:40:86:
         ff:a5:c2:c3:14:e1:3c:d6:2e:33:4e:34:0c:48:91:e6:f4:84:
         26:dd:8e:8b:0e:02:91:cc:eb:68:5f:7f:ae:26:c4:52:32:1d:
         e1:c6:42:a0:98:c8:6e:48:fa:8f:87:bb:af:1e:dc:eb:1e:68:
         32:2c:7a:36:e5:f4:c0:ca:ae:c0:3e:3d:31:cd:e2:58:7f:4d:
         29:1c:21:03:dc:6f:e0:ee:71:55:c0:16:e6:2d:2e:ff:01:f1:
         ef:73:39:85:68:49:12:cd:73:72:9f:b5:9c:4b:12:66:6e:5d:
         64:05:47:d9:19:30:20:de:99:bf:20:47:9e:1e:61:3d:42:0c:
         9d:5e:84:e0:d0:22:03:57:4d:9a:46:7a:97:29:88:3a:05:35:
         46:18:d0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:23:50 2025 by rpki-client