Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
File:                     MseO7vestFH8N1df65EU38zBzfs.mft (raw, json)
Hash identifier:          6T7witckMsSq6Gcunksfwh7H7QQysqOIHSGk4o3+kqI=
Subject key identifier:   CB:9A:F3:65:E1:BA:83:C2:BF:74:58:D6:18:07:0B:1E:84:66:07:0A
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Certificate issuer:       /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial:       01964D4715431C69BB05A072CFA2601935B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
Manifest number:          103B
Signing time:             Sat 19 Apr 2025 09:00:26 +0000
Manifest this update:     Sat 19 Apr 2025 09:00:26 +0000
Manifest next update:     Sun 20 Apr 2025 09:00:26 +0000
Files and hashes:         1: GbEyk8ZWl0vqgj_sPWLMTAGno6s.roa (hash: JzRbeYoWUwlRVaKgJmm7hD8H9CYTCwAivI+PSmgKwME=)
                          2: M6U6dkH9DSHzE2ElXf3ZUgv-gao.roa (hash: gyUWfn2VEKn6DTTZDCrSAEanNDrzsmaWPFOYycLgJ88=)
                          3: MseO7vestFH8N1df65EU38zBzfs.crl (hash: NkUnW0ffHhrHfhWi1AmcsV5waPYOQOEf003ZoX2JroY=)
                          4: qcE5lMt-ta8yQgK_A4TOf_qcnKk.roa (hash: mHbw87Bhgg5orJBSCEF9YhID6w2GXs/pHd+LaovXweg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:47:15:43:1c:69:bb:05:a0:72:cf:a2:60:19:35:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
        Validity
            Not Before: Apr 19 09:00:26 2025 GMT
            Not After : Apr 20 09:00:26 2025 GMT
        Subject: CN=cb9af365e1ba83c2bf7458d618070b1e8466070a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ec:ed:44:5d:7a:bc:6f:46:11:ae:96:6e:ec:
                    e0:45:34:e2:fd:1d:14:34:21:ca:16:a0:a1:6d:0a:
                    a8:05:ae:79:ed:bd:16:05:ea:74:e1:a6:79:e2:8e:
                    69:76:08:24:ac:1b:d8:0a:bf:65:aa:36:5b:b2:5a:
                    f7:74:55:95:c6:b3:5a:d7:97:10:19:db:2e:86:86:
                    24:12:18:7d:08:68:65:8e:f8:c3:2b:f7:01:81:12:
                    ee:ff:06:90:bd:42:29:7a:02:3e:5c:92:06:7c:4e:
                    2f:fc:b0:53:c1:92:c5:54:1d:fb:b7:9c:2f:f1:95:
                    cf:c1:7b:9f:9d:1e:35:3e:35:9f:76:f7:ed:ac:b7:
                    c1:29:5a:e6:27:f3:02:41:bc:e5:08:75:d5:4d:56:
                    27:4d:9c:33:6b:13:89:78:ed:8f:34:68:5e:d0:67:
                    11:30:6a:d2:05:e2:a3:c0:24:2a:79:d0:04:4b:15:
                    f6:4f:bb:04:6a:71:c9:5b:fc:db:27:cd:d7:17:7c:
                    e8:52:b5:d3:94:46:dc:ef:0d:b9:e9:56:37:fa:2a:
                    92:a3:92:27:7a:1c:db:ab:ec:d6:a8:c2:3e:9a:e6:
                    c0:50:30:1e:c5:88:c7:5a:9e:3b:ae:4b:23:e6:d0:
                    20:05:c4:6a:b1:38:44:86:78:87:bb:1b:9d:94:23:
                    a4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9A:F3:65:E1:BA:83:C2:BF:74:58:D6:18:07:0B:1E:84:66:07:0A
            X509v3 Authority Key Identifier:
                keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:86:3f:29:78:ea:a3:d0:83:88:99:85:6a:cd:a0:47:af:01:
         45:f3:2f:70:11:c9:25:4a:2c:5e:a9:75:9a:b2:14:a7:b8:2e:
         29:40:8e:91:67:15:b6:71:51:7a:e5:5c:27:dd:92:11:c0:54:
         92:1d:cb:95:18:d4:2e:f1:75:15:b3:8a:a1:38:4e:68:6d:cf:
         53:c8:66:dc:9a:e9:1a:1d:1c:ad:12:c7:46:7c:a3:f5:db:2f:
         53:df:c0:aa:ea:29:18:29:c2:86:9e:98:c0:85:50:21:67:d5:
         fb:9d:52:46:9c:35:c4:41:8b:a8:79:b8:1c:94:2b:66:aa:79:
         e8:79:b0:78:95:7e:a0:7c:b3:5f:8e:80:1a:09:00:29:5c:5c:
         1c:b7:fb:a7:0b:fd:0c:50:08:37:40:39:a2:0e:ba:d2:10:2e:
         d1:cd:ad:48:f2:58:62:1a:47:4e:02:b5:22:19:76:e2:0e:d1:
         dc:1b:6c:a7:93:94:be:3a:9a:b1:f8:c0:cd:b3:50:1a:fe:44:
         d1:22:ff:d7:b2:58:d5:0b:76:b6:99:3e:c5:d3:01:73:ce:87:
         a3:97:a0:1f:5d:fd:4a:c1:b5:b8:57:82:80:da:c2:a0:96:07:
         c4:d4:d2:73:aa:12:85:3e:43:da:73:5d:75:d3:9e:29:62:81:
         6a:d3:36:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:43:58 2025 by rpki-client