Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
File:                     ml52-SnSG1hvQuMPfZsAOZs9y_A.mft (raw, json)
Hash identifier:          gdBr3kIv9Q2GbJpKecAmIEmBsTZLncgnkTKlM9tCYXI=
Subject key identifier:   DB:5B:16:1C:5B:E8:1C:C4:72:3A:B8:DC:54:29:08:6C:D9:28:4E:AD
Authority key identifier: 9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0
Certificate issuer:       /CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
Certificate serial:       01964A46990A69418F1F203106AF41ABF36B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
Manifest number:          029D
Signing time:             Fri 18 Apr 2025 19:01:02 +0000
Manifest this update:     Fri 18 Apr 2025 19:01:02 +0000
Manifest next update:     Sat 19 Apr 2025 19:01:02 +0000
Files and hashes:         1: lNqtvqUZifhN9hUTQHsN8rzDv6s.roa (hash: noJIwI7/Q+WHXTBLIOr4/ymrWUykyqujMSct/kdt/UE=)
                          2: ml52-SnSG1hvQuMPfZsAOZs9y_A.crl (hash: hHJ5xYcuC5oond4dciam9CIebwzjvNQ8Ur5y3dWvoCg=)
                          3: sLN0Xk8eYZ3fOkEohN2U_OcDnBE.roa (hash: hLQ2+Hv/BslGw+2RJD0A2omXlm9351c5s36b6sRZHRM=)
                          4: tbYCEHCORQD2jU1FhjpVeyl7yzw.roa (hash: UJRgmyhwhn7tm70C5e/aIyFO87+Jd/xNlqZSp90NpM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:46:99:0a:69:41:8f:1f:20:31:06:af:41:ab:f3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
        Validity
            Not Before: Apr 18 19:01:02 2025 GMT
            Not After : Apr 19 19:01:02 2025 GMT
        Subject: CN=db5b161c5be81cc4723ab8dc5429086cd9284ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e8:ba:4c:10:0e:ff:10:58:9b:c3:ba:6a:e5:
                    c3:a8:d1:ce:36:29:5a:49:7b:2e:b2:ce:85:a9:f1:
                    1e:55:23:5e:01:f4:cb:a7:a5:73:ad:e8:75:d1:a4:
                    29:c7:4a:66:41:af:6d:e6:b0:ab:c6:4b:db:c8:07:
                    8a:04:dd:27:5b:71:bb:eb:25:59:1e:5e:e4:af:34:
                    82:5c:ba:0b:ce:33:72:d4:6c:dc:0f:02:d2:34:bf:
                    41:ad:be:ab:5e:c5:f5:aa:be:63:f2:09:7b:f9:63:
                    bc:64:85:53:49:0f:a1:1c:b0:2b:06:d3:49:57:df:
                    38:c2:15:8a:69:13:50:10:3d:b7:a8:7c:66:97:25:
                    58:66:3d:74:07:8e:37:3f:88:3b:56:31:38:e4:b9:
                    86:d1:c2:db:c3:b8:bc:c9:7d:3a:31:19:79:f2:30:
                    6e:8a:12:c8:b8:f8:80:fd:0a:3e:6c:66:f1:42:bd:
                    e2:8e:b8:1c:41:03:fd:f6:e9:4d:96:cb:51:0a:be:
                    65:d6:5d:35:b4:57:cb:b8:fe:46:6a:c2:07:8d:7b:
                    0d:ba:01:86:c7:79:92:18:65:1f:a4:79:fa:46:5f:
                    96:2a:e1:e2:ec:38:62:d3:f0:5f:73:e2:53:d7:88:
                    53:e2:e9:be:62:5b:84:0e:ae:30:2f:8c:2d:22:fe:
                    70:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5B:16:1C:5B:E8:1C:C4:72:3A:B8:DC:54:29:08:6C:D9:28:4E:AD
            X509v3 Authority Key Identifier:
                keyid:9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b2:51:fc:cd:55:27:24:85:f3:5c:f0:81:8e:90:c1:ce:45:
         eb:fe:f7:5a:4b:42:b9:3d:c3:aa:ee:7e:af:c1:f6:7b:bd:f3:
         04:6e:d0:17:6b:59:cb:71:1c:13:e6:3f:85:a8:62:73:67:dc:
         d3:05:d8:9f:59:b7:dd:6e:28:ba:c7:40:17:8d:bc:0d:bb:3e:
         30:07:83:62:7c:50:b2:e9:46:6e:9d:b8:5d:43:97:8b:96:39:
         6d:c0:ae:1f:97:fd:c2:1b:d4:8a:0c:79:9d:ad:46:d4:ba:5b:
         1b:ec:05:cc:63:b3:3e:dd:e6:11:92:c0:e9:08:ac:3e:23:37:
         88:c8:0b:30:31:fb:33:de:e0:ad:41:91:9d:ba:d3:4d:76:40:
         bb:ee:fc:bf:a3:84:c1:6f:e3:b4:87:d1:7c:a0:e4:c9:82:6a:
         8f:5f:60:17:67:10:ed:0a:de:63:08:01:f3:09:37:e3:81:b3:
         42:95:21:99:49:e4:83:01:f7:4a:18:5d:88:6b:b2:02:c1:25:
         fb:29:89:13:f2:62:c3:d1:08:62:a2:6e:19:6a:6a:51:33:7c:
         7a:3a:62:03:8a:87:95:1b:5b:e9:d5:5b:0a:08:3d:6a:3f:0e:
         a3:3d:0e:bd:df:34:13:64:5b:26:40:23:2f:50:29:e9:12:8d:
         60:7d:2c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:19:09 2025 by rpki-client