Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
File:                     t060sgvFlKwro6pa7zDnTiXhVuE.mft (raw, json)
Hash identifier:          o/IAT1ePfaNQRfdWkYUf20h8YbPWwFyy56uj/IZZTPc=
Subject key identifier:   DB:64:F0:58:28:86:78:09:73:81:AB:6C:52:A6:E5:C5:BA:E7:C7:3A
Authority key identifier: B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
Certificate issuer:       /CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Certificate serial:       019649A12EF8C720193865DE84B107997BCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
Manifest number:          0998
Signing time:             Fri 18 Apr 2025 16:00:22 +0000
Manifest this update:     Fri 18 Apr 2025 16:00:22 +0000
Manifest next update:     Sat 19 Apr 2025 16:00:22 +0000
Files and hashes:         1: 96zfb_as6Uu1dQBioEPRjkMoH0A.roa (hash: ZbDgERbOZ82dnNJrpA+vEp4hFeMsEzejOuHoVOcv55k=)
                          2: t060sgvFlKwro6pa7zDnTiXhVuE.crl (hash: A2Wz/ABURT1X6D0eATy4n+0IRyZhG0QSc0hOphEHuY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:a1:2e:f8:c7:20:19:38:65:de:84:b1:07:99:7b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
        Validity
            Not Before: Apr 18 16:00:22 2025 GMT
            Not After : Apr 19 16:00:22 2025 GMT
        Subject: CN=db64f058288678097381ab6c52a6e5c5bae7c73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:98:ac:10:12:d4:ef:0c:2b:56:a0:a1:6c:dc:
                    28:5d:6f:d7:c9:b7:c6:66:c1:90:88:c4:0b:08:a4:
                    95:0c:35:1a:53:9c:cf:c5:7a:d0:87:ca:4d:64:d2:
                    fb:d8:7a:88:45:ff:0c:ec:8f:5e:23:75:b9:cb:1a:
                    46:92:0d:ad:e4:d0:8a:c5:e4:e4:bb:89:53:94:b2:
                    25:94:db:05:6b:a5:74:82:3c:75:ad:49:67:4e:cf:
                    56:b1:e6:fa:c5:a0:2f:c2:27:3b:82:cf:57:6d:bc:
                    14:04:0f:27:da:37:e7:4e:40:60:70:4c:c2:45:82:
                    28:11:48:46:77:d2:b2:0b:e5:78:64:55:d3:c1:a9:
                    a6:0c:c7:32:29:9a:e4:34:bb:4b:13:e8:e3:03:a1:
                    ca:3d:8e:4a:31:34:56:db:14:7d:e2:a2:09:47:f5:
                    7a:08:84:d9:5e:95:32:ca:12:c3:f6:33:29:92:6a:
                    fd:30:ad:bb:06:4f:33:cb:a5:29:64:a1:c1:cf:19:
                    c9:0c:c6:ba:9c:92:33:05:86:15:bf:e9:2d:20:a3:
                    92:de:a2:ef:5e:20:c4:fd:e8:fa:e1:7d:70:61:ac:
                    8a:13:0f:3d:7b:12:ec:3f:fe:fa:12:f8:6d:44:7e:
                    68:30:11:22:a2:57:a9:01:c4:42:dd:05:46:df:a5:
                    14:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:64:F0:58:28:86:78:09:73:81:AB:6C:52:A6:E5:C5:BA:E7:C7:3A
            X509v3 Authority Key Identifier:
                keyid:B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:d6:f6:24:d7:21:0e:d2:66:cc:55:41:75:05:bc:1c:4d:4a:
         2d:7f:f0:f4:76:f1:58:32:0f:c1:3a:51:c9:b2:07:d1:a2:95:
         d5:a9:18:02:c7:53:3b:83:f0:30:ca:40:b4:45:87:1e:63:d6:
         20:92:58:e3:b2:d6:b3:1c:ca:61:f1:00:b2:a7:8d:e9:15:ca:
         07:cd:86:e4:90:21:ef:65:13:e5:fd:1f:58:4f:51:a5:d1:c5:
         90:75:62:fe:55:af:4f:68:d9:fa:5c:64:a4:65:54:4e:10:0e:
         d4:e6:bc:d7:a7:15:03:d3:81:b9:49:a4:ee:c1:d9:dc:c3:7f:
         02:46:d7:50:ec:dd:37:39:63:ea:1e:89:5a:87:e0:39:ee:15:
         22:27:80:1c:d1:02:43:a4:02:ee:14:35:42:d1:f7:72:f0:50:
         13:b8:73:57:e6:da:8c:46:8c:44:06:e8:05:4d:89:d1:a8:90:
         ef:98:3e:8c:88:d6:67:7b:49:ba:f9:a7:c6:fc:59:cc:e2:27:
         50:e1:4f:dd:54:5d:23:fc:5a:45:87:a3:ff:ef:0a:4c:23:89:
         00:58:e4:90:db:16:9e:89:07:1b:fb:65:1c:81:45:66:d2:46:
         55:e9:77:15:ad:15:2c:2f:25:f6:92:0d:2f:fc:4c:8e:8b:86:
         06:d8:2d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:32:17 2025 by rpki-client