Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
File:                     MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft (raw, json)
Hash identifier:          faFnvYQQyBBmVRMlHf8x1GnchDXmfAduHYU7ejoc5Ts=
Subject key identifier:   B8:07:D5:53:3B:27:53:34:54:94:60:BC:98:DF:4D:A8:FF:CE:A4:1B
Authority key identifier: 30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
Certificate issuer:       /CN=30c45fc3147102824f9d2d547766a809aeaf245a
Certificate serial:       01964067E343FC622938B8F4DDC0144D4A88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
Manifest number:          069D
Signing time:             Wed 16 Apr 2025 21:01:12 +0000
Manifest this update:     Wed 16 Apr 2025 21:01:12 +0000
Manifest next update:     Thu 17 Apr 2025 21:01:12 +0000
Files and hashes:         1: 57B-StK2AQ9sl4U1coOqd8wTgag.roa (hash: n83L+DsDXWJdoYcHoR653OskwlFSlFS/GtJPH3Goy+M=)
                          2: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl (hash: Zpy3BjYbao3DKGYven+MWZwQyzHGDHtCRBe8PDUZgqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:40:67:e3:43:fc:62:29:38:b8:f4:dd:c0:14:4d:4a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c45fc3147102824f9d2d547766a809aeaf245a
        Validity
            Not Before: Apr 16 21:01:12 2025 GMT
            Not After : Apr 17 21:01:12 2025 GMT
        Subject: CN=b807d5533b275334549460bc98df4da8ffcea41b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:e5:9d:04:22:a1:16:d4:f9:c2:24:e4:07:
                    7f:62:f9:8b:b2:03:53:f6:c2:29:a3:b2:44:2f:f1:
                    7d:af:79:d7:f9:46:25:69:37:ab:90:f1:86:2f:38:
                    6c:11:35:07:3c:d2:b5:49:48:f4:12:06:94:07:31:
                    be:34:0e:47:ec:b1:2e:2d:7e:5e:b8:4e:bd:11:f9:
                    b6:9a:a4:1b:81:7d:cd:a9:bd:a0:6f:19:8c:50:ae:
                    7c:06:88:3a:e5:f4:27:98:b4:ad:64:5f:50:bf:63:
                    07:6f:53:d1:b9:02:26:52:9a:b4:57:2a:7c:b4:68:
                    fd:e3:b4:8b:9b:c2:b8:95:3e:82:db:1e:14:12:8e:
                    cf:7d:56:c4:f9:e1:18:1b:3d:2a:38:c0:de:56:46:
                    83:ed:b6:d4:1e:03:3b:a2:3c:33:1b:fd:9e:45:36:
                    e1:dd:89:99:77:cc:5a:56:0d:8b:b4:05:64:7e:02:
                    a2:38:36:4e:5c:fe:a7:70:31:7b:d8:7a:d6:9e:86:
                    1e:23:19:7f:a7:9c:54:bf:00:68:43:ea:ee:75:40:
                    61:ff:28:57:a7:63:c4:37:63:28:ca:c6:8f:25:f4:
                    ab:9c:c6:ff:29:7c:25:b1:e1:19:13:73:e5:67:41:
                    89:c1:3e:c2:6b:75:61:66:13:80:cd:5d:f0:4e:9b:
                    80:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:07:D5:53:3B:27:53:34:54:94:60:BC:98:DF:4D:A8:FF:CE:A4:1B
            X509v3 Authority Key Identifier:
                keyid:30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e0:cd:71:08:86:99:69:fd:8c:ad:30:bd:d8:70:cd:83:31:
         b5:7f:5a:6a:2f:69:cd:fb:82:23:35:f2:ae:20:e4:74:57:a5:
         48:b9:44:e1:3d:e2:40:85:cd:a6:e8:ea:d5:ab:25:a5:46:6e:
         f8:d8:be:de:f4:62:8a:84:5f:85:61:20:1c:93:18:1b:59:07:
         21:c7:8c:e9:aa:64:ab:4d:72:2e:94:4b:c4:90:46:64:34:39:
         df:4a:40:26:a5:be:b3:02:17:6a:65:e6:9c:10:54:ac:ca:2f:
         9d:b9:1c:1f:1c:83:a7:81:43:0c:c5:06:e5:35:3a:8b:38:d5:
         e6:fe:0f:74:4d:7c:50:4e:64:4e:ad:f3:ba:7b:bd:17:d6:dd:
         0e:41:15:5a:95:14:c8:12:a3:5a:b2:11:54:13:4e:d8:d0:b6:
         34:29:e1:33:64:e0:4d:22:2c:fd:3c:a9:c1:1f:85:2a:6a:d7:
         cd:31:85:01:f1:ec:a0:a6:2b:9c:c3:67:66:b7:60:70:66:7d:
         53:d4:aa:cd:a5:97:ef:d7:18:a5:bb:17:10:11:59:e2:cb:05:
         d4:4c:ef:52:a7:ae:4f:6e:4d:54:f9:90:6e:da:48:0f:39:d8:
         69:8e:5a:da:72:46:63:d1:4c:56:ec:09:80:43:f5:ea:85:60:
         73:92:49:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:13:34 2025 by rpki-client