Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
File:                     5jGwgNTqb9Bham5wHHyBXW_4fAA.mft (raw, json)
Hash identifier:          znF2OMrLn35ibFzR2rvcC9uYJ0eXp5SShvjxPTVYEU4=
Subject key identifier:   9D:2B:F1:05:3D:D6:57:9D:A3:C2:6B:68:F1:A1:46:0F:48:D4:61:74
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Certificate issuer:       /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial:       019657CB85DE705A078EDABF1B90CC7C8B07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
Manifest number:          06C9
Signing time:             Mon 21 Apr 2025 10:01:17 +0000
Manifest this update:     Mon 21 Apr 2025 10:01:17 +0000
Manifest next update:     Tue 22 Apr 2025 10:01:17 +0000
Files and hashes:         1: 1-ULqgodsKdgq0QGqHWFhgo5ogvQ.roa (hash: obLlzUthCY3UaVFlC6lirF19aJQ7EJCv/V0i0S1h9pU=)
                          2: 36JMsnCTZ3dwGq1Ka9Cuddl862c.roa (hash: rxGSLpm5OrdXLa8c65qMAKh6CEoXBb/8Ki3iPQlCtp4=)
                          3: 5jGwgNTqb9Bham5wHHyBXW_4fAA.crl (hash: ygEQs0LcZ4+BkalUkJi+Aq1pErp/CB5E6P927IrTlYE=)
                          4: 8rKYK-iYG1qg8KyjX_ZfdJFjUJo.roa (hash: 6c5KWPrXXMji3H6W3aAMo6TC6fKptrhCcp/hd4gp2T0=)
                          5: 9qt_AxGF-iefTgTj9gP8JXPuDuE.roa (hash: dzLOUtBgexrBsG0CJE0tpFxhbM0NWc5a6JMvh5ssT/c=)
                          6: Gx61TcX_jg_POohtFk3y578RK3s.roa (hash: cdRA7EEe8Z56qv2cSGc980wpIss1qxURTPJYCEyx71I=)
                          7: LzZkWrTJKB_nRLE2CHcTnYb72Ak.roa (hash: bDGvw/cq/31+ME9ha7pMFsDpy5ZNw/W2wJW0IhefjPs=)
                          8: RnK86UmIAp-Vf8TMZLM03XjM-aE.roa (hash: tadpJcfzMaehdbJngFohNz6vat40laG6LyK588h2pfQ=)
                          9: TH1GQt5phoccIVru2X6WLJ52OMs.roa (hash: lBAEWmb8yHalrh5kruZJueiLdM1gxTgfao1k6b840VY=)
                          10: dVeJBp__tKyi8xuuXGDrr7L9rpA.roa (hash: pavqcGgA7qNjgp+uyhIxt8IASt/7r1r3IBQvQqb7v/c=)
                          11: mJWGLM8T_1at8gmBKfytV80xCsY.roa (hash: nBO32lhSvSUXg7lebbqssrsekQToM8cKNZVTOaKe1bQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:57:cb:85:de:70:5a:07:8e:da:bf:1b:90:cc:7c:8b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
        Validity
            Not Before: Apr 21 10:01:17 2025 GMT
            Not After : Apr 22 10:01:17 2025 GMT
        Subject: CN=9d2bf1053dd6579da3c26b68f1a1460f48d46174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1c:c4:6d:2b:cf:46:03:fa:0d:69:2e:12:f5:
                    11:b5:8d:8a:54:23:91:88:e1:cb:ec:ca:11:5c:3f:
                    c1:a8:f6:05:98:2b:97:17:57:b5:08:33:8f:fd:3b:
                    58:a6:27:6a:6a:de:20:c0:fc:b7:97:9e:c4:81:b5:
                    8a:7b:c1:b0:d8:96:8f:35:68:9b:69:d5:92:b2:74:
                    87:5b:3a:dc:8b:23:55:b7:c4:d7:ea:86:27:83:d7:
                    0c:b1:db:8c:83:5f:cf:ae:9d:8f:4b:05:3c:b7:22:
                    a0:54:ff:7c:6e:b6:19:27:a4:3b:90:ed:fc:fe:9a:
                    fd:ed:aa:6c:ea:48:26:5e:d7:b7:29:6c:e9:b4:46:
                    80:1a:85:4b:f3:a3:65:17:2a:6b:15:32:a7:af:18:
                    36:fb:2b:62:ad:39:09:0d:63:02:a7:0a:58:22:5c:
                    d2:81:a8:29:1d:5f:d8:c2:a9:62:2e:8c:55:24:40:
                    97:a3:1d:30:07:fb:da:0d:3b:94:c7:85:b5:e7:64:
                    01:20:ef:b6:67:eb:52:7f:e4:c2:1e:6a:d3:26:23:
                    83:d3:1d:78:44:66:c4:1f:07:83:d0:5c:d7:16:06:
                    e2:44:53:ed:52:c4:63:e3:9c:13:62:3e:06:e2:b8:
                    d7:43:b5:d5:8c:ec:74:f4:8f:b3:56:ba:d6:12:65:
                    99:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2B:F1:05:3D:D6:57:9D:A3:C2:6B:68:F1:A1:46:0F:48:D4:61:74
            X509v3 Authority Key Identifier:
                keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:9c:30:03:38:5d:5f:71:e2:1d:6d:c3:1f:f2:39:d6:91:df:
         ee:9d:56:4f:61:38:cf:37:4a:72:24:c9:a6:e5:80:bc:b7:5e:
         07:00:06:e7:eb:9e:f9:bc:4d:e3:c4:54:b5:90:9b:6f:cc:55:
         7d:e2:e1:57:c6:db:9d:36:26:9d:a9:37:5c:30:22:5a:b2:0e:
         a0:4c:d3:db:7c:08:13:46:97:17:83:76:79:37:8a:f2:99:38:
         2b:d2:9d:29:6e:58:f0:c2:a5:37:b8:e9:8a:9c:e0:65:9e:24:
         9c:80:c0:57:be:a3:a3:9c:9d:1c:ff:3b:1d:5e:c2:eb:58:0d:
         91:ca:4d:21:42:81:dc:63:3e:5b:47:39:fa:85:fc:f9:41:c7:
         c1:80:b1:ab:5b:97:7a:68:71:85:06:36:65:e3:0b:9d:f2:dd:
         34:61:83:db:0a:69:18:fa:fa:0d:cc:47:32:dd:02:5d:d6:f3:
         b8:92:3d:9e:9b:83:dd:42:73:0f:9a:f3:f9:57:3d:19:ef:be:
         b1:83:02:e4:a2:a3:ba:c1:e5:21:ca:a1:7b:e1:d2:8a:ac:fe:
         50:55:14:1f:5b:f7:c9:cf:16:b3:e8:c3:c8:34:3f:b0:73:16:
         06:43:ce:19:2f:ba:6e:80:72:12:e1:b6:53:c5:ff:a3:71:f6:
         6c:78:70:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:35:36 2025 by rpki-client