Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
File:                     kvfSE_oTcI4yABhP8bw5FXfMJS8.mft (raw, json)
Hash identifier:          Gr5tHQCTF47aGrdWiUqBHWRLc8YbsHdyo2oPDbD8REA=
Subject key identifier:   79:CC:E4:35:AA:89:32:54:84:FF:3B:9E:4A:CD:96:2D:62:9F:62:47
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Certificate issuer:       /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial:       01960C44323F6C00CF94821C8FDD283DA66C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
Manifest number:          0958
Signing time:             Sun 06 Apr 2025 18:01:57 +0000
Manifest this update:     Sun 06 Apr 2025 18:01:57 +0000
Manifest next update:     Mon 07 Apr 2025 18:01:57 +0000
Files and hashes:         1: 27IpBxR2D8_iRTp1ZebUJjNMQ7E.roa (hash: M2K4hgMgo9+z2THk8cplkT7mnkDeMqyV1xRhBWixRg4=)
                          2: F9JrVraLyMVnFa5WewWKqEk58Z8.roa (hash: HDM5tx94GGzJitG4z0EFA2VGBpL6vQ5NHJ5bG3Fv7N8=)
                          3: kvfSE_oTcI4yABhP8bw5FXfMJS8.crl (hash: j5ERUAMxo+VYB3UQ/vJ566z5cbOQicH4VJYyuO7Cg7I=)
                          4: mm_Nb9z81V6NkXEN_XliD4j7rHA.roa (hash: sOGwZzPqCMO2h8qKL02SJARBROyj852YXrPvjJD/tMY=)
                          5: rNpSWTnlV1SjNzY7gYc6fGpCUg0.roa (hash: ogw4H6tz270SkrKMzgOGbWp8o172su6jWT/mKGItQ1o=)
                          6: tgAHftofsUlrut1OVcO8hHTBTbc.roa (hash: tgkhROI0aApXAU3ooNKzzNjHjSmQxJBLSWJU0UDgdqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0c:44:32:3f:6c:00:cf:94:82:1c:8f:dd:28:3d:a6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
        Validity
            Not Before: Apr  6 18:01:57 2025 GMT
            Not After : Apr  7 18:01:57 2025 GMT
        Subject: CN=79cce435aa89325484ff3b9e4acd962d629f6247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:e9:53:82:e1:c9:4d:5c:47:59:ab:a3:38:
                    a6:1a:e2:70:7d:7c:32:0e:7e:f2:db:35:84:3b:f6:
                    1c:b9:0b:84:d2:95:69:64:9d:a6:dd:db:8f:29:0a:
                    ba:f4:33:48:7b:8f:a5:8d:75:e7:9c:0b:bb:51:e8:
                    0b:62:97:c1:ab:a3:c6:f0:7a:3f:f2:2b:07:d0:c7:
                    6d:96:3f:49:15:de:d2:3e:a3:3b:e9:e1:bd:8e:fe:
                    87:d3:84:9d:0e:8b:6b:de:15:95:43:2d:fb:76:ac:
                    5e:df:78:03:89:9d:a6:fb:0c:17:ae:a2:ae:1d:69:
                    67:aa:a3:e3:5a:27:72:68:50:96:56:80:b9:e9:4c:
                    ab:f3:bf:1a:f0:41:da:67:ab:06:27:8c:e2:ac:d0:
                    1c:57:19:57:d1:5d:9b:d8:b8:c7:3e:29:c7:13:26:
                    a8:fd:54:b0:b0:bd:b1:a4:c8:d7:07:c2:8b:8f:bf:
                    80:9a:e3:0d:fc:07:9e:bc:bd:6e:49:f7:a7:d4:16:
                    96:17:f0:0e:c4:39:9f:16:8a:db:ec:11:82:52:4d:
                    89:f7:37:c3:97:83:b9:e8:20:0f:d9:93:17:5a:de:
                    b3:6f:1f:2d:dc:f5:0e:43:8a:e4:18:56:71:00:24:
                    9b:a1:86:9f:b6:fc:f0:a7:5f:21:57:12:f3:8e:f6:
                    c8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CC:E4:35:AA:89:32:54:84:FF:3B:9E:4A:CD:96:2D:62:9F:62:47
            X509v3 Authority Key Identifier:
                keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:1f:c5:9e:ba:81:05:84:bc:2c:fb:34:d8:4d:82:3b:d0:98:
         ac:92:32:96:f6:8f:03:cd:2c:37:54:27:6b:59:38:b1:81:40:
         30:6c:af:b4:db:14:6f:7a:65:c2:82:51:54:8d:ec:41:93:f5:
         91:9b:6d:37:47:04:83:c4:f9:71:17:7f:5d:bd:63:50:71:b4:
         da:08:f3:d3:76:0c:46:c0:0a:14:19:4f:27:a0:28:36:a3:b8:
         f2:f5:db:5e:6a:0a:0c:57:65:78:18:e6:11:ca:a7:d9:02:a1:
         19:08:24:0b:59:3f:cb:4b:c5:2e:5a:3e:e5:4e:98:b0:e0:46:
         7d:fb:40:27:08:ab:15:42:29:06:29:d9:44:59:a7:48:50:8a:
         d9:de:72:64:b9:b3:94:fd:64:a3:31:f5:16:12:35:e6:12:2f:
         a5:41:c7:d5:62:9d:d8:89:52:c7:06:19:29:3e:bf:03:de:5d:
         6e:9c:f6:f7:03:9f:f4:c8:11:ab:46:87:66:4d:c2:e3:d1:3a:
         3d:55:43:cb:70:fa:f2:96:e1:50:3e:1d:2a:d6:72:20:73:33:
         7f:ac:5d:af:b4:aa:33:c1:2a:20:20:2f:f7:cd:27:c5:98:c5:
         ea:9c:32:54:69:c0:5d:cd:bf:94:86:c4:18:a2:8e:a9:3e:45:
         18:12:85:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:18:15 2025 by rpki-client