Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
File:                     kPwsEuoXAhuorOBiGJfwhW2sJVk.mft (raw, json)
Hash identifier:          v4+i8zMP5itjmfFzmmtprRJpdZyIG+x2HU3ASBET0tY=
Subject key identifier:   DC:3E:78:48:98:B0:0F:E9:BE:26:46:76:FA:4C:5E:DD:4E:E7:02:16
Authority key identifier: 90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
Certificate issuer:       /CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Certificate serial:       01964F6D757E2355CE093F74372543EA4E66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
Manifest number:          0475
Signing time:             Sat 19 Apr 2025 19:01:35 +0000
Manifest this update:     Sat 19 Apr 2025 19:01:35 +0000
Manifest next update:     Sun 20 Apr 2025 19:01:35 +0000
Files and hashes:         1: 1UaL0XGyomh-a1T0dddj6cyPZOw.roa (hash: rWkejV4n3vRWEBULaZLAottNh8bz5UFXPG009n2D40A=)
                          2: TJKRQbRuvDSDZyucPaqU760l18U.roa (hash: gKuY1GA/NcHekZckeHEZ/7H1szBu0AiOQJ9VIhFkajs=)
                          3: kPwsEuoXAhuorOBiGJfwhW2sJVk.crl (hash: MzT+Lakqbo/T/3JuUhwsWyOha+DRXx/mwvtzcfhcyig=)
                          4: mWYkGMEMrO_nHDH4dqasaNk-p_c.roa (hash: OCHhjAiwakmpsRoIjxkgKbh8p1tQzGvkxI9kPgktEoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6d:75:7e:23:55:ce:09:3f:74:37:25:43:ea:4e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90fc2c12ea17021ba8ace0621897f0856dac2559
        Validity
            Not Before: Apr 19 19:01:35 2025 GMT
            Not After : Apr 20 19:01:35 2025 GMT
        Subject: CN=dc3e784898b00fe9be264676fa4c5edd4ee70216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fd:17:fc:6d:67:e8:8e:c9:b2:07:cc:05:1f:
                    24:69:6a:31:8a:df:93:76:95:97:78:3d:a3:de:88:
                    d0:94:a5:63:a1:1c:aa:b0:1f:18:1f:bb:cb:34:8a:
                    cd:33:52:d2:5e:a7:d8:3a:64:9e:36:f7:8a:ab:4a:
                    5f:22:31:35:5b:0a:29:b4:c7:a9:65:88:d0:82:89:
                    05:b8:a3:26:25:be:ec:fd:5c:95:21:2b:9c:95:2d:
                    9c:67:05:20:69:83:a3:47:74:90:62:56:0c:b9:a6:
                    aa:3f:ad:f0:84:50:bd:fa:60:93:ef:66:f1:78:1a:
                    44:db:c0:1f:60:fd:ce:d0:26:b3:8c:b5:c7:b2:28:
                    0b:a4:ed:bd:fa:11:bf:1d:43:03:f1:1b:5e:50:9e:
                    1b:a5:ef:46:2a:eb:68:20:28:fa:9a:6c:20:4d:60:
                    a9:8a:b2:f7:e5:69:91:a4:ee:61:1b:84:d8:24:c3:
                    59:05:7f:ee:33:e2:07:93:38:b9:17:4b:0e:f3:4f:
                    37:80:8f:6e:8b:8d:36:60:e9:58:cf:78:b2:05:8b:
                    ba:9a:10:64:e3:d0:6a:c7:c9:00:6a:74:ce:ea:45:
                    91:29:55:46:ef:42:0b:00:d0:d3:6e:6f:8f:a7:3d:
                    03:00:16:5b:84:c5:db:cd:6e:7d:ca:79:8c:e1:d8:
                    da:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3E:78:48:98:B0:0F:E9:BE:26:46:76:FA:4C:5E:DD:4E:E7:02:16
            X509v3 Authority Key Identifier:
                keyid:90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:51:88:29:52:c5:dc:df:b7:52:86:d8:e3:51:80:ed:07:b8:
         6a:66:af:af:c3:2d:4b:60:58:e3:b5:bb:94:22:d8:38:02:9b:
         88:d3:72:51:2f:ae:b7:80:a8:e0:03:25:ca:ec:05:46:bf:55:
         eb:e5:4b:88:93:45:9a:28:cb:d1:98:0b:61:f6:a9:02:f6:0b:
         df:b5:cc:2c:c4:08:c9:c7:95:c1:1b:90:59:96:65:39:7d:90:
         a3:8a:f6:0b:e5:76:a9:02:f4:0d:f9:c7:4a:58:67:f3:15:ec:
         48:06:98:c4:02:1d:85:07:a9:f7:9c:29:43:ce:06:77:2d:15:
         51:ef:03:18:de:17:29:71:1e:90:ba:43:45:67:b8:b2:bf:01:
         77:f1:52:e9:f1:b7:80:de:d4:d5:29:95:b9:f2:02:bc:7f:28:
         36:5f:a9:a5:3a:91:92:6a:e7:97:00:dc:55:3d:6f:f8:ab:79:
         7a:00:68:37:3a:e7:d4:f4:69:53:c1:7a:2b:48:8f:39:d5:43:
         32:19:85:b8:9b:48:03:a7:24:44:96:d9:49:bf:21:f4:ca:70:
         16:90:fb:4a:ea:ae:b8:52:e2:4f:93:3a:c5:3e:71:68:82:f0:
         fa:66:0d:c6:70:d9:bb:ed:28:85:4c:e1:bc:3b:b4:2e:57:c0:
         30:a2:04:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:17 2025 by rpki-client