Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
File:                     MCaAamuNrGjCoytlhJIpUk_DPac.mft (raw, json)
Hash identifier:          qQf+Y9vZ44qjaSnXtpU1o5ZpTmg47r+ywJe+L23QRWs=
Subject key identifier:   C5:02:D8:D4:D9:89:E4:FC:DA:C8:2F:77:F5:A1:27:08:87:E2:B2:17
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Certificate issuer:       /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial:       01964AEB19259B1227718BD928668990B94A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
Manifest number:          0CBD
Signing time:             Fri 18 Apr 2025 22:00:43 +0000
Manifest this update:     Fri 18 Apr 2025 22:00:43 +0000
Manifest next update:     Sat 19 Apr 2025 22:00:43 +0000
Files and hashes:         1: HqEtipzQowxTqcDrA6YD2PAM22k.roa (hash: +TySDtYTZSAF4An5pdiKoQwn0LwGdYxQZAyZ18GrAFU=)
                          2: MCaAamuNrGjCoytlhJIpUk_DPac.crl (hash: m6DOWs3TbMIuXyGTVkR2ome+x/+d5Z3FgYAiZXDyjLg=)
                          3: N-IkqmIl8KlWw01vFtAZ-uos0pY.roa (hash: YeMMYzZTCS8ByuvcJi0c6d7AtfKEEZ2nt+xBnMZjmqQ=)
                          4: SXPqMjJIqIiiKMiICnz-R2huK7A.roa (hash: VBPweWvhbagfxdIj/U/h3DiF8G4gGJiOVx2OPYGVAl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:eb:19:25:9b:12:27:71:8b:d9:28:66:89:90:b9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
        Validity
            Not Before: Apr 18 22:00:43 2025 GMT
            Not After : Apr 19 22:00:43 2025 GMT
        Subject: CN=c502d8d4d989e4fcdac82f77f5a1270887e2b217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:86:9c:f0:93:99:33:40:c3:87:1c:45:a5:b3:
                    3f:e7:dd:c8:51:a5:96:bf:c8:50:01:66:0f:f9:d6:
                    eb:04:00:b6:cd:37:1a:bd:48:8f:c6:64:8a:49:49:
                    8a:20:21:c3:9b:4e:06:4e:42:e3:8d:b5:3e:67:7c:
                    85:72:cd:c9:7c:a8:02:78:50:97:80:87:07:eb:0f:
                    07:2b:50:37:de:59:09:f9:ad:1c:83:3c:1d:f6:43:
                    2e:a5:fd:f0:12:d4:07:9b:c6:f5:04:2d:90:ab:5c:
                    11:c5:84:1a:c6:5a:7c:37:4b:38:bc:fe:db:46:95:
                    ca:b4:45:00:af:27:f0:11:68:d3:22:5c:3f:55:1e:
                    86:21:3a:49:6c:6a:5d:56:6c:15:c7:aa:6b:6b:ce:
                    83:1b:26:80:07:7e:c9:65:01:f4:de:4c:a2:65:d9:
                    c0:f7:5a:1f:65:67:f8:a7:98:c1:09:90:24:52:36:
                    ec:0f:f0:e4:05:23:5d:bc:91:09:2c:46:b9:04:c3:
                    c0:67:34:a7:0a:9b:91:b4:05:39:a2:60:b7:10:e8:
                    8b:fb:dc:ba:79:8b:c9:bd:b5:e6:99:cb:ad:ba:aa:
                    35:7b:20:0e:5a:e0:c3:a0:a4:29:6d:ec:52:97:01:
                    09:60:f3:23:01:27:41:38:2a:74:d1:46:fa:e9:a4:
                    59:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:02:D8:D4:D9:89:E4:FC:DA:C8:2F:77:F5:A1:27:08:87:E2:B2:17
            X509v3 Authority Key Identifier:
                keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:14:42:c6:35:05:4d:17:f4:00:35:bf:cc:5a:28:83:67:8c:
         c1:c5:14:19:0f:90:21:69:fb:91:e2:1a:a5:0c:1c:df:30:3a:
         88:e8:1e:d7:b9:d4:20:fc:f5:5e:13:00:9b:e0:ee:d2:97:08:
         f3:6a:69:c9:76:d2:24:99:a6:20:57:09:4e:61:df:56:9f:ed:
         3f:65:0e:51:67:17:97:2b:bb:7e:26:27:fd:ad:41:16:f6:05:
         db:10:68:e7:05:05:80:99:77:be:20:10:a7:ff:34:c6:a5:7b:
         f0:7e:37:53:47:86:03:b5:e4:a1:37:3a:2f:4f:37:44:12:cb:
         ed:08:ba:13:ea:a8:e9:a2:36:25:de:86:bc:64:d3:4d:c6:76:
         80:76:88:0b:de:33:57:0b:9c:2f:21:d5:22:0c:c0:a0:7a:48:
         69:44:41:9c:74:e2:b4:32:83:b3:4b:40:ac:c1:3f:15:3d:b3:
         ef:5a:08:cf:ab:0a:2a:fe:a5:ab:de:86:4c:8a:02:e1:ee:bf:
         14:db:c8:89:66:59:70:bf:c4:8a:16:c0:7c:7c:a0:d9:37:20:
         07:81:48:1e:4b:0d:0f:56:aa:27:e1:36:ff:e4:8f:f4:7e:5a:
         eb:23:38:6d:3b:ef:8c:e2:10:a5:12:c0:07:12:c5:52:0d:10:
         1e:80:6e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:35:53 2025 by rpki-client