Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
File:                     IMXuAtLgWGHdkG_gazhE8E03jHM.mft (raw, json)
Hash identifier:          zDmPm+MdeMypN3GFTvw2AxEAyNtAv/NPgaCnZepwVYg=
Subject key identifier:   51:EC:75:D7:DB:C2:DC:2C:B3:00:D6:10:1B:40:7A:4E:A6:92:8C:6D
Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
Certificate issuer:       /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Certificate serial:       019640306643BA5C4FCF81CD0E34F176D701
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
Manifest number:          03BC
Signing time:             Wed 16 Apr 2025 20:00:35 +0000
Manifest this update:     Wed 16 Apr 2025 20:00:35 +0000
Manifest next update:     Thu 17 Apr 2025 20:00:35 +0000
Files and hashes:         1: 7xOhUPHtrbr-aDnyk2sqIXaZxmE.roa (hash: kq8yM7VvfoH1+ATjkQ5zBAmoZIPQA7DySnzjc28AM7I=)
                          2: EO7_sAa5INTWdb0sB8KoIZTsSpE.roa (hash: SZljpS9Me6EqFyINGEQdOy6JlEANEGEhl0H6HmWV3fM=)
                          3: IMXuAtLgWGHdkG_gazhE8E03jHM.crl (hash: 4zlVQFX4Vt8FmEhCcq3H5yccWsRhxB7TkrkZZJnWrTs=)
                          4: Wr8EOmHckxzTGd0Aamj6K9DADdU.roa (hash: OPshObN2z5FsqJnygnFeWGUMJE0uYykW0pM3DUOjmQQ=)
                          5: YqXOQdzyJGKEIsRRKloxLXSE6Ms.roa (hash: oxg1KeTKZ090F7XaYRFBJpN4jEk7flH1GMsXEE67BF0=)
                          6: wS-ZYWnE9Zk6DJUs3sCV5yBn3ak.roa (hash: 4bRb80RRs/QoIhxBs4Ime6HGYShS2787nhwQD+lr7Xw=)
                          7: wnHzclbUTpmI2i25YXVP3hxML5Y.roa (hash: aE81auZ0/hL8t66uhuMDoL2Ds7gb0agCHWXH7RqZEB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:40:30:66:43:ba:5c:4f:cf:81:cd:0e:34:f1:76:d7:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
        Validity
            Not Before: Apr 16 20:00:35 2025 GMT
            Not After : Apr 17 20:00:35 2025 GMT
        Subject: CN=51ec75d7dbc2dc2cb300d6101b407a4ea6928c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b2:ed:05:41:81:b8:44:cf:f9:63:98:1f:2e:
                    0e:41:38:fb:be:65:76:cc:cb:05:c1:83:69:f5:d3:
                    8b:15:5c:5f:67:a6:98:36:19:53:a9:e2:af:23:20:
                    5e:b2:62:d2:0d:03:98:27:e3:10:08:ac:39:a9:7f:
                    fa:ba:41:17:53:12:41:f0:36:da:d2:f8:25:6e:66:
                    14:e6:25:1a:8a:46:46:2f:d9:84:e5:6e:74:d1:50:
                    c0:ff:a8:42:f8:93:1e:b1:b5:e5:7b:14:dd:2a:0e:
                    48:b4:ac:06:8f:87:31:7d:a7:e7:c2:fc:15:e7:aa:
                    98:93:3f:a3:a3:24:ec:6f:b4:ce:f6:45:c0:33:8b:
                    ac:5e:28:be:0f:9c:32:36:40:1e:21:15:40:ba:fc:
                    a5:f2:e0:1b:2a:7a:e0:b8:ee:2c:bc:04:93:a9:32:
                    b7:59:17:ac:7a:6c:2e:9b:90:b4:59:3a:ef:d1:98:
                    e6:ea:cc:ed:6d:85:52:a2:c2:aa:ff:11:b7:2c:a5:
                    53:11:c7:6b:ab:93:fc:71:77:5e:e1:69:05:7c:7d:
                    d0:ee:c6:12:4c:6b:17:03:78:36:9a:ed:33:48:4c:
                    2a:b1:0c:b6:70:fb:8a:dc:36:55:4d:9f:e8:8e:9a:
                    cd:ab:2a:14:24:47:30:be:21:d1:44:c6:13:87:61:
                    49:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EC:75:D7:DB:C2:DC:2C:B3:00:D6:10:1B:40:7A:4E:A6:92:8C:6D
            X509v3 Authority Key Identifier:
                keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ed:65:23:17:ab:44:5e:28:81:74:72:5d:b0:5c:da:62:dc:
         ea:41:26:8a:68:2b:96:23:a3:a2:fa:98:5d:fa:e4:4f:5b:af:
         c4:fc:3d:b1:3d:bf:66:48:66:ec:20:3e:bd:51:16:11:c4:c1:
         86:6b:4f:ee:02:2a:0a:91:02:48:1b:ab:19:cf:dc:30:75:f6:
         5c:ff:68:4c:3b:14:e2:c8:82:be:fd:48:01:36:3d:e0:17:4d:
         78:e6:bc:30:aa:0a:e3:e1:49:af:54:1c:d5:2e:06:94:6e:0b:
         d1:22:8e:ba:46:f2:87:f1:a8:57:53:f5:7e:1d:af:8a:18:6b:
         40:9e:77:ca:03:ea:0a:74:7c:09:cc:20:8a:70:9b:ef:0e:1c:
         78:52:f1:6a:88:de:95:ec:c5:95:5d:18:15:ba:60:63:12:10:
         61:34:37:4d:bc:86:a0:9a:3a:b2:de:b7:58:6f:b8:c6:b4:1e:
         38:f4:15:68:85:d2:fb:4a:56:8f:df:b2:59:2f:6a:9f:f2:2e:
         a2:f9:51:83:a1:6a:23:bf:77:8d:6b:9a:b6:97:7c:44:bc:58:
         31:54:fd:55:f5:30:f1:bb:99:b8:5a:9b:b0:63:f2:49:4a:dd:
         dd:47:38:cc:5e:f2:cf:a9:fc:04:49:c6:98:27:e9:9f:8a:c6:
         33:18:a5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:41:16 2025 by rpki-client