Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
File:                     k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft (raw, json)
Hash identifier:          DpJNNTsN/hh2UyeRvN6lCTXYRrq90ejFJ+aVbprtFDg=
Subject key identifier:   EF:56:0C:C0:B7:EE:CA:D1:BB:3E:66:80:2A:B3:D1:22:22:96:DE:ED
Authority key identifier: 93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0
Certificate issuer:       /CN=93ef2e433d00a253c99a45048507944385457cf0
Certificate serial:       019654933F7272F2EFC1533F0E4790751729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
Manifest number:          093B
Signing time:             Sun 20 Apr 2025 19:00:58 +0000
Manifest this update:     Sun 20 Apr 2025 19:00:58 +0000
Manifest next update:     Mon 21 Apr 2025 19:00:58 +0000
Files and hashes:         1: 1-s_qFSQKBRG1ihqBmhzdBKCiJNM.roa (hash: LshraZqBwrj50k+MVV5n8/UzMU3Sq3fCYs5NyUMMWNA=)
                          2: k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl (hash: xJkePK2odNiZNa61CS7FIDa2iyOlMFWkQnUOZcinfJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 19:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:93:3f:72:72:f2:ef:c1:53:3f:0e:47:90:75:17:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93ef2e433d00a253c99a45048507944385457cf0
        Validity
            Not Before: Apr 20 19:00:58 2025 GMT
            Not After : Apr 21 19:00:58 2025 GMT
        Subject: CN=ef560cc0b7eecad1bb3e66802ab3d1222296deed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c2:96:e2:25:55:ea:61:a1:12:b9:d9:1a:dc:
                    52:e0:85:56:66:17:d9:1b:e2:21:d4:1a:b0:a4:2e:
                    43:52:f7:4e:2e:90:c5:c2:35:3c:f4:5d:33:c1:41:
                    ff:8e:9e:ab:5a:5f:13:f4:4d:09:e6:0f:e0:df:2e:
                    94:d3:52:4a:bd:66:2d:29:a8:e9:02:84:4c:42:fc:
                    bf:15:62:2c:7b:32:e7:d4:2e:dd:14:84:65:3d:31:
                    a7:a8:0a:aa:32:a4:d6:f8:2f:38:72:2b:41:82:67:
                    9b:32:fe:5c:22:2e:97:f5:9a:0c:9c:7f:04:91:2a:
                    95:ae:01:b2:3f:d3:95:fb:09:d9:2c:21:00:d9:e9:
                    79:76:74:ea:73:7c:40:7e:88:65:60:cc:ee:74:c5:
                    d3:19:42:71:79:82:5d:6c:dc:01:63:ca:25:cf:6b:
                    11:c5:54:b6:65:ab:5f:89:2c:0c:bf:7b:f1:9e:37:
                    ff:d1:77:27:f0:50:df:32:b6:48:5e:1c:1e:09:19:
                    c4:e1:1c:4f:86:5c:8f:97:1a:3e:4c:e6:7b:30:28:
                    76:f0:68:bd:0c:a1:b8:46:b6:a4:16:4b:1b:20:25:
                    92:27:57:cc:e5:32:85:c8:fc:b6:8c:50:73:9a:b0:
                    ae:23:ea:2b:5a:5a:1b:a5:ab:65:d8:0a:67:9b:1f:
                    32:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:56:0C:C0:B7:EE:CA:D1:BB:3E:66:80:2A:B3:D1:22:22:96:DE:ED
            X509v3 Authority Key Identifier:
                keyid:93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:76:7e:7d:46:ea:37:d9:7c:6f:03:3c:28:11:ab:38:dd:79:
         44:45:68:99:e5:39:96:8c:ed:46:be:b2:f1:cc:9d:76:d4:83:
         19:3a:29:cf:3a:42:fd:86:b2:2a:ab:f1:5d:df:37:29:09:22:
         27:ec:d9:56:b8:84:17:cf:25:a0:a8:b9:6e:c9:ae:c4:51:8a:
         f7:7e:7b:6b:22:21:ba:a1:fe:81:46:bd:96:18:a2:a3:3f:3a:
         82:63:53:d5:0f:38:b5:04:3d:3d:3a:1c:fe:a8:8f:e0:ac:7c:
         7b:49:9b:48:cc:f9:3a:3f:e5:8a:50:c3:55:b5:41:f0:9d:c3:
         f4:94:3e:7f:a8:85:8a:63:fd:97:15:23:72:54:3a:76:b1:cc:
         70:9d:06:69:58:ca:f8:e6:13:c6:00:8d:1b:75:f4:cf:84:5f:
         c5:e9:a5:88:0a:ec:28:b5:ae:5b:e5:4a:45:6f:87:fd:ee:a2:
         50:67:ec:04:3b:45:50:e6:a6:ee:8d:2a:b0:89:22:0f:7d:aa:
         3a:5f:59:6f:5d:23:ea:8c:04:62:62:0b:ee:4f:07:d9:c5:b5:
         b4:48:94:27:8f:07:73:de:7d:b2:88:e8:75:72:b0:c8:8f:ff:
         6c:23:62:c7:54:96:0d:c4:ed:da:64:07:fd:12:cc:ca:1a:d7:
         60:4b:d1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:11:02 2025 by rpki-client