Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
File:                     KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json)
Hash identifier:          OMFZXDZvcru1NrFyqOt1RR5rcqa54vztCaTdXpf02bs=
Subject key identifier:   CF:61:41:8E:C7:AD:CC:39:D8:14:8C:C8:AB:92:3D:B3:8C:97:0E:76
Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
Certificate issuer:       /CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Certificate serial:       01950ED970FC752288AC5DF3612B4CB5F898
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
Manifest number:          10A6
Signing time:             Sun 16 Feb 2025 13:01:26 +0000
Manifest this update:     Sun 16 Feb 2025 13:01:26 +0000
Manifest next update:     Mon 17 Feb 2025 13:01:26 +0000
Files and hashes:         1: 1ovUioPSRpwIq2x5dlTtKSWuJt4.roa (hash: glwS98kItQ5aoRJZQt2/p+Tl6Vu2+KBQ6fnWyRCpxeE=)
                          2: 5ukXNC3ufs5Ifk5kp-hI7U2U8bk.roa (hash: 7ZgXZStDcuyKQtO7JFrlQRnqUqaRLXXlsW/IZ58nkBY=)
                          3: 6RkSnq1YobTmQ_SgAx2wlTkM2hY.roa (hash: Qt/KZiThTuHL2rOKsl4Ng5FOwbzizcKz0/dUQrpTSQc=)
                          4: B5wkeGWZjqgz1y_Wsk4MaKTCZiQ.roa (hash: ygucH/c6MgSrKR9IgUN2NMGsbIDgc3W5HpOJEaJUGPw=)
                          5: BXsWIMS27-emUbxg3N856ta0Zhs.roa (hash: VLEvZClMBOllgwcFIEd17EnHHY/+y56YDL+ioA9gy2o=)
                          6: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: QTVTaORuRyluif3WkdCXsJPnkdihdGKQgY0p8Wdn/fc=)
                          7: YCe-DX5vspCo53n_t9ku3ipwr0c.roa (hash: bsw052ayicKeBY1zBDEewyIk2nJP8d+tgqf/wW7oirc=)
                          8: i4f1t__SHD-QTSI70hcDe0-iLuE.roa (hash: x5mSq7hcGWnjVGsMlKR9T5XBSWXyZ8MGhLOD1IalJyI=)
                          9: nlwD__Rr_Kz3vDBdg3j2YS8w3UU.roa (hash: oYim5zXBclNnekk/jArnYzaiEFQpBbNaF9nzqE+fJWU=)
                          10: t_T_n2rHgRaUg9w286JLApHuPsY.roa (hash: Xw7YLCCdVoaSNcuVfBLtogrNakQDxTgFieuFH7n8sSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 13:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:0e:d9:70:fc:75:22:88:ac:5d:f3:61:2b:4c:b5:f8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce
        Validity
            Not Before: Feb 16 13:01:26 2025 GMT
            Not After : Feb 17 13:01:26 2025 GMT
        Subject: CN=cf61418ec7adcc39d8148cc8ab923db38c970e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:74:b4:fb:a7:03:0b:f7:8e:21:8f:9d:4e:87:
                    3a:3f:bb:99:f3:22:9a:3c:87:93:1f:b5:7a:4d:e9:
                    f5:c0:d6:5f:d5:0f:54:8b:5b:d7:24:ce:30:5f:6c:
                    cb:a6:e1:0e:e4:a5:29:44:31:b7:65:30:d7:1a:de:
                    ec:73:b4:8d:14:07:e3:94:e6:96:04:53:69:f1:36:
                    3f:76:50:af:19:12:36:95:65:a7:74:27:f4:bb:38:
                    be:e0:c0:dc:a5:ac:e5:74:28:23:5b:6c:11:af:16:
                    17:a6:3d:16:de:4b:7f:68:13:3b:df:af:14:60:13:
                    bf:7d:75:47:ee:b6:ed:15:da:35:a2:49:ff:8a:87:
                    8a:d8:0a:16:3c:e6:3e:ec:4f:0a:f1:b3:b8:67:83:
                    af:2b:15:5a:26:3f:38:8c:61:f0:29:93:3d:96:f0:
                    c4:35:fd:2c:f7:d5:aa:99:a8:bb:f4:5f:01:cb:87:
                    ea:cb:4d:03:bb:13:90:fd:08:97:d5:db:5d:8c:51:
                    2d:e7:69:c9:d4:a5:47:89:1f:75:a4:cb:c8:66:4c:
                    8b:58:8f:c6:97:3e:9a:1e:77:37:dc:f9:ed:47:83:
                    4e:18:9f:5c:ef:34:2f:6f:15:ad:02:33:94:43:e1:
                    e0:f8:f0:11:7e:e4:65:39:b6:2e:5e:b6:84:d9:6b:
                    f0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:61:41:8E:C7:AD:CC:39:D8:14:8C:C8:AB:92:3D:B3:8C:97:0E:76
            X509v3 Authority Key Identifier:
                keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:9a:07:71:35:44:ee:44:90:0c:37:95:51:5c:32:71:68:6d:
         23:3c:11:6e:a2:04:a0:5f:cb:fa:5a:44:d2:f1:35:1c:b1:65:
         b1:67:d7:b4:bf:46:30:de:99:e5:25:08:1b:5d:0b:e4:59:ac:
         e9:62:4d:f4:5f:29:9d:89:8a:5a:61:17:3b:2c:39:69:38:94:
         aa:8f:4b:cc:f1:0c:fc:c9:40:f5:76:22:9e:f0:0b:2b:ba:af:
         f4:a2:85:ec:cf:b3:e0:98:aa:2e:b5:29:98:95:26:cd:37:79:
         7e:64:39:61:aa:a3:9f:85:7e:e9:75:26:3e:5d:be:f3:8a:bb:
         d6:7d:34:2e:dc:b4:a1:fa:cb:96:83:d6:16:ad:09:bb:9d:19:
         c9:6e:24:c1:33:44:00:09:b3:46:ce:34:dc:6f:09:91:2d:38:
         b3:7e:c7:8d:2c:c3:b4:b2:06:b0:99:43:7a:24:76:b8:44:22:
         28:24:89:5f:44:26:7a:7b:d6:ce:39:20:22:f1:f7:99:d0:2b:
         31:3a:02:f2:fb:8d:48:05:ec:d4:66:11:8e:e4:61:7a:70:c8:
         f0:a8:67:af:50:b8:94:dd:2a:9c:e8:00:07:74:76:54:c2:2f:
         6d:5f:ae:97:fd:6c:77:13:22:18:46:8d:aa:14:b0:f4:b3:6e:
         e0:11:f7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:00 2025 by rpki-client