Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
File:                     mlJqc86Pn2LBShGi6pE-wnPVjEY.mft (raw, json)
Hash identifier:          /wBGKZh7HYZzSfT3CMVhucVlkVYh/UJQTYx8pF3xXBQ=
Subject key identifier:   81:13:C7:79:C0:3C:9D:84:4C:41:74:D5:1F:B0:7B:4C:4A:16:D5:C1
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Certificate issuer:       /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial:       019652368F916A28DA75FF36942DC23ECA0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
Manifest number:          1507
Signing time:             Sun 20 Apr 2025 08:00:29 +0000
Manifest this update:     Sun 20 Apr 2025 08:00:29 +0000
Manifest next update:     Mon 21 Apr 2025 08:00:29 +0000
Files and hashes:         1: 37xCCUhytigOkbo8skkNphl6CDo.roa (hash: EZZOllbO3rU0Aq71pT+LnxPWU1OR5RUdYC5xtbHlqV0=)
                          2: EzlaPz9ay6RZ4KUo_Zx1lcWyYyE.roa (hash: 8mVwmiELeQwOp0IzUJ7CNWnPRJxXboTOfv7waHdL35E=)
                          3: HmloYPhthfBI7_3S01XoeHMHM_0.roa (hash: zT7e2sKU35SC+6Uf05YzOC00VreFA+3zPNOd9kp3exg=)
                          4: aBb_QnqfCmFuIbPpQn9d7-oaQds.roa (hash: 9cT2/7QK1Jv3/LAJrIXNohZ9zwR8FjnbBcxZKBheYgE=)
                          5: bJE571Es9mWytmWy8Hm2hU0LvwQ.roa (hash: G4ykv8ElUqNocIC2Di9TU9f+tq6JYb2XSPQUlNwbQs8=)
                          6: jNEc9JKntfCRYR_UowBHCVGcgfU.roa (hash: wUVreTUUoleXZY0NQI3FxCnAa07OL9N5o1BFPoQRf+k=)
                          7: lPFksRdLJVDV0BeRSYCopl0nK1A.roa (hash: Z/l2sT/TM2PqTeCwRcYw3ZHE/PJvSKLQBMiM2PLHoBk=)
                          8: mlJqc86Pn2LBShGi6pE-wnPVjEY.crl (hash: czdH7bUC0VsxoetJxnEu2vC8XU5eWhQ4xNzPlgqSFxk=)
                          9: xovZOIhlPZ45N9oOxx7_NSJCrEw.roa (hash: JeeMpjw12qOmA0b+WEGyWZXkSEOnUNh26ITmvmBxXbk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:36:8f:91:6a:28:da:75:ff:36:94:2d:c2:3e:ca:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
        Validity
            Not Before: Apr 20 08:00:29 2025 GMT
            Not After : Apr 21 08:00:29 2025 GMT
        Subject: CN=8113c779c03c9d844c4174d51fb07b4c4a16d5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:33:ce:55:53:5d:4e:0a:75:fb:df:63:ac:45:
                    75:89:63:41:6e:52:2f:b7:52:38:fa:3f:39:6b:5a:
                    71:7f:51:73:24:44:95:50:cc:42:a4:22:57:da:12:
                    31:01:62:80:4b:8c:55:5e:f2:68:62:ff:72:45:d2:
                    b9:4d:0a:cf:be:0c:09:74:ed:a9:e4:4e:ae:3f:46:
                    bb:05:56:ac:a9:4a:2d:17:9e:41:4b:c7:88:0b:0c:
                    df:c6:77:8b:1e:8c:ed:59:54:37:34:3a:cb:26:91:
                    64:0b:1f:6e:ea:3c:07:21:ed:db:ea:c1:b4:2c:42:
                    e7:db:74:3c:8e:88:89:a4:49:d4:61:62:f7:e9:8a:
                    a6:29:55:f6:79:7b:e1:5e:b2:96:db:79:94:f2:4c:
                    60:4e:7e:1c:31:e9:a3:f4:d6:21:39:46:c7:9c:54:
                    6e:b6:25:50:74:52:65:00:55:48:83:05:de:ee:20:
                    6c:db:0a:db:42:ba:52:9e:2a:be:02:d7:56:ed:d9:
                    c1:c4:4d:ee:08:68:dd:5a:64:83:04:b6:34:97:24:
                    4d:32:ed:16:0d:8b:a0:71:6f:d9:3f:b9:00:06:f2:
                    61:8a:4b:45:94:9e:6f:b8:e0:b6:8f:ec:e5:9b:41:
                    13:b7:22:ca:62:d5:17:29:28:7b:23:d8:d7:98:3d:
                    db:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:13:C7:79:C0:3C:9D:84:4C:41:74:D5:1F:B0:7B:4C:4A:16:D5:C1
            X509v3 Authority Key Identifier:
                keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:88:93:e5:06:d8:0b:d4:5e:34:36:8d:04:19:bf:96:91:27:
         c8:54:48:c3:2a:86:a1:18:2d:5b:fe:f8:3f:0e:aa:92:eb:15:
         ac:37:35:b1:60:9d:5a:e5:20:4a:2a:7a:15:83:0e:ed:8c:d9:
         cd:39:c5:85:ac:f9:5d:c2:f1:da:72:52:9a:b4:3b:27:83:38:
         4f:2d:2e:fd:9d:f7:02:9e:0f:e4:23:db:2f:0b:94:e3:d7:55:
         89:34:36:e0:90:a1:f2:2b:92:ee:80:d6:e2:87:d5:92:bd:07:
         5f:94:2f:f2:ee:7f:1d:6f:b0:72:57:6e:3e:53:9c:33:39:5c:
         83:ce:9e:d3:25:3b:c5:21:c1:37:da:ca:d6:8d:d2:eb:24:1a:
         1e:fd:20:b5:45:53:31:f4:ce:81:44:d6:5e:3b:f7:c4:f9:68:
         58:50:2c:d2:0b:e3:b1:58:a1:7f:fc:be:50:90:32:a7:81:fa:
         3a:51:28:e4:8b:1b:ae:42:3e:cd:70:8c:3c:15:1a:16:8a:8d:
         26:77:f5:e9:39:ca:bd:44:ff:7f:2e:d6:8b:fa:8d:4e:3a:4f:
         6f:87:e5:58:25:fd:5f:0c:13:a5:39:2d:72:3d:31:ce:ae:0d:
         fe:cb:e4:00:e7:d5:6d:9c:99:24:38:db:21:e6:3a:7d:b9:ac:
         30:65:fd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:21 2025 by rpki-client