Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
File:                     RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft (raw, json)
Hash identifier:          fZIpNGHAuBQQf98yc2tYSDjrgovGo0ku5MfjYuhnTik=
Subject key identifier:   5E:69:BB:5D:52:99:63:69:A6:4B:12:56:9B:C9:69:E5:16:FE:2D:39
Authority key identifier: 45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
Certificate issuer:       /CN=4568d0a7204560b6356d837bbf1510d9636df63a
Certificate serial:       019608D45F55F933506391C22CCA500649D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
Manifest number:          033B
Signing time:             Sun 06 Apr 2025 02:00:57 +0000
Manifest this update:     Sun 06 Apr 2025 02:00:57 +0000
Manifest next update:     Mon 07 Apr 2025 02:00:57 +0000
Files and hashes:         1: BMhhovXMuBpKJMmG-rBz-nuJzd4.roa (hash: sNEztFGkvH7v3y29OhQmoouHMsRsRH9HNC026mey6ck=)
                          2: MK26JBdAOQHbbLIoXza8gOwP2L0.roa (hash: bfaAHwdU8g3+OMyQR1jrgL3b4O52QKIOBn86eAMWqtg=)
                          3: RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl (hash: NkNrd2zuuzk6tuh1DlpGGUOH6b6OXhRl3nA8o/SYA7A=)
                          4: XhbfPxl0mTvKXWs6aYEV15Sf1Zw.roa (hash: Y9+T7Mn/gKGvDXGyHmLcv1HeCAXW8+WFBTkhydKojcU=)
                          5: ktaokuPl5jOXxjmENV6Nzr3jvRE.roa (hash: QCRewanHdBrJ4jBO5+8cVb/CCKaBft0aBHc179F+ba4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 22:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:08:d4:5f:55:f9:33:50:63:91:c2:2c:ca:50:06:49:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4568d0a7204560b6356d837bbf1510d9636df63a
        Validity
            Not Before: Apr  6 02:00:57 2025 GMT
            Not After : Apr  7 02:00:57 2025 GMT
        Subject: CN=5e69bb5d52996369a64b12569bc969e516fe2d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:f4:2a:63:4f:33:4c:26:50:55:bf:d5:49:
                    f4:b8:54:9a:db:36:44:6c:cb:11:b4:73:c9:83:8f:
                    d3:80:36:cb:f4:80:16:00:d4:19:14:aa:6e:1d:bd:
                    5d:7e:e2:32:7b:be:7a:df:77:34:c7:31:03:91:31:
                    28:df:91:1a:5f:7d:c5:58:a5:90:4c:24:fe:b5:0e:
                    2a:6d:38:80:d2:28:7b:8d:7b:b8:33:50:2b:31:05:
                    3e:e9:91:a8:2b:43:20:50:6e:1b:0d:e8:54:bc:fa:
                    c1:a2:ca:c4:21:8c:85:1b:6b:8c:58:93:39:39:b8:
                    e8:fa:6f:65:41:d1:2e:15:8b:f6:7c:41:fb:f6:c5:
                    8d:36:f3:40:29:82:0a:5a:85:70:47:b3:b8:5a:17:
                    19:1f:41:23:54:6a:ec:f7:ba:82:1d:ad:ec:e1:92:
                    7c:34:1c:a5:14:c1:98:fa:67:96:07:fb:71:a5:02:
                    d6:ee:5b:9b:6b:84:80:92:81:c0:3c:9b:5f:7e:93:
                    6c:1b:f1:22:85:91:81:f4:f8:2f:58:4b:95:06:ae:
                    62:2a:d3:9a:4f:15:0e:b1:6d:46:6e:80:b8:29:b4:
                    2e:83:63:72:63:58:7b:cd:53:6f:9c:82:84:0d:5e:
                    4a:43:b5:64:9e:6e:1d:34:7a:69:28:ea:5a:35:61:
                    b5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:69:BB:5D:52:99:63:69:A6:4B:12:56:9B:C9:69:E5:16:FE:2D:39
            X509v3 Authority Key Identifier:
                keyid:45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f2:f7:bc:21:1a:e9:90:9e:b3:7a:e0:a4:40:61:fb:47:06:
         ff:1b:54:e2:bd:aa:26:ba:bc:c4:37:40:40:25:59:bb:1d:7d:
         8f:f7:0e:52:39:99:80:5f:b3:5e:77:cb:67:18:7b:9b:bc:a1:
         5c:a0:03:d9:1d:11:fb:7e:ce:c6:7e:d6:46:74:25:df:c1:5d:
         7c:4d:39:f9:66:10:48:c4:7a:59:10:86:f9:97:d7:9c:d4:d0:
         6d:f4:3a:4d:52:76:87:ac:91:8b:4b:b7:56:17:71:42:85:82:
         ab:fd:8f:31:c5:f4:80:ca:eb:71:30:a2:70:b6:76:52:4e:19:
         90:67:c1:61:49:eb:24:18:1d:6c:7f:44:59:af:2e:0b:48:a7:
         22:34:6b:f8:ad:24:b6:61:11:29:be:c2:89:bc:7e:0c:7f:8d:
         f6:8a:43:8f:c6:1f:7e:a4:02:1a:2a:2b:1f:c7:16:2d:7f:0b:
         fb:58:7f:95:4f:ce:b6:07:dd:48:06:eb:62:a6:c1:95:f1:20:
         49:7a:e2:bc:09:86:3c:91:a7:9c:8c:be:40:72:26:84:64:f5:
         37:79:29:63:0d:3e:1f:bd:06:63:66:fc:a6:45:5c:a9:b9:b9:
         bd:1d:74:69:d8:24:29:a0:a2:c5:9f:04:a8:6b:2f:52:c1:06:
         b5:b5:8d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:07:33 2025 by rpki-client