Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
File:                     70Ku0OkbI9DNy_skrIObDb5qoEs.mft (raw, json)
Hash identifier:          0BHxzpZanNbykJ8KUHqIrgS28B4IUkCoXSeyyBSaPrg=
Subject key identifier:   27:8C:F1:96:01:B7:A9:69:78:25:BA:8F:6C:04:8F:E9:76:96:88:94
Authority key identifier: EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
Certificate issuer:       /CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Certificate serial:       019684DA88A0AEF2C69CFD4FF7927BD0E647
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
Manifest number:          0A8C
Signing time:             Wed 30 Apr 2025 04:00:36 +0000
Manifest this update:     Wed 30 Apr 2025 04:00:36 +0000
Manifest next update:     Thu 01 May 2025 04:00:36 +0000
Files and hashes:         1: 70Ku0OkbI9DNy_skrIObDb5qoEs.crl (hash: FAcFvosBPHcdBbjS3XD8JYDGU+JsmWt+MTzF3AQVxdg=)
                          2: FiLJrOB6VSbXcUW10ayq5u0-45c.roa (hash: SVzm6u7ARr2O1cZhcAUWJuayXj1RRfV/z3YIwyKiXZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:da:88:a0:ae:f2:c6:9c:fd:4f:f7:92:7b:d0:e6:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
        Validity
            Not Before: Apr 30 04:00:36 2025 GMT
            Not After : May  1 04:00:36 2025 GMT
        Subject: CN=278cf19601b7a9697825ba8f6c048fe976968894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:da:39:9a:f2:0f:33:77:83:35:cb:01:af:66:
                    e6:2e:40:cc:cc:99:17:7f:f8:8c:0b:51:51:97:44:
                    ed:60:63:1a:9b:1c:72:74:d0:d0:39:cd:d9:d7:b8:
                    65:8f:cf:91:fb:c6:14:64:01:f2:1d:7d:bb:4d:7b:
                    2d:9d:4f:da:34:0d:0d:8c:e6:7b:dc:d5:0c:4e:34:
                    d9:d7:96:2b:16:6e:92:f8:23:e0:fa:14:24:25:19:
                    bc:0c:d1:ee:34:d6:e2:e3:cf:01:d6:91:4c:bb:41:
                    5b:96:9c:7e:03:63:42:85:31:09:40:9a:17:67:e8:
                    ce:47:15:f1:99:67:e4:b3:da:1a:45:d2:c3:d9:95:
                    ec:e7:9a:df:53:b3:39:81:54:e5:03:27:ca:e2:0f:
                    bf:a9:58:84:ac:f5:87:c4:76:f6:24:09:15:40:b7:
                    de:ea:d0:d1:45:57:fe:61:4b:89:b4:3b:23:60:24:
                    22:46:0c:d4:80:eb:d6:dd:ac:9b:cf:f7:10:38:dd:
                    87:c8:86:86:34:11:05:10:21:3f:00:de:bb:42:fa:
                    04:2f:5e:3c:66:ff:f5:39:85:16:1e:0d:bd:e4:1b:
                    6f:f6:b5:53:b8:30:b3:fd:d4:fe:74:36:27:43:bb:
                    03:6a:d3:62:36:73:6a:7d:3f:e5:88:c1:1d:91:dc:
                    49:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8C:F1:96:01:B7:A9:69:78:25:BA:8F:6C:04:8F:E9:76:96:88:94
            X509v3 Authority Key Identifier:
                keyid:EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:b9:af:11:a0:06:ab:e0:fe:19:04:6f:b5:aa:78:18:dd:92:
         ed:11:d4:a1:5b:36:5d:cf:72:53:a1:90:f5:e0:2d:2a:5c:25:
         e5:50:8e:51:1d:d1:e0:83:1a:30:f5:07:c0:ed:51:bf:7a:ac:
         e4:37:f4:eb:71:db:b8:33:e4:43:22:e3:ba:b7:0c:5b:b2:c2:
         cb:e5:1c:2d:a6:6f:9d:c3:05:31:9f:88:8f:5e:ba:8c:6e:66:
         fa:70:f6:b5:eb:15:18:ed:91:fc:c8:c4:a8:ad:a6:d6:92:a3:
         0d:0f:92:44:bd:8e:a4:4e:a9:30:50:9f:ee:e8:c0:25:bd:e2:
         11:ee:da:42:2b:3e:d6:7b:e6:61:90:f2:7a:b9:75:f2:69:40:
         a0:72:76:c2:9b:65:f0:dd:57:c2:ac:66:21:f7:66:50:77:dd:
         bb:6f:9c:3e:90:09:b7:d5:93:ee:94:da:9a:b0:03:c1:fc:9f:
         0f:e0:3e:8b:95:ec:e0:09:32:77:96:c9:d5:47:56:9e:87:2d:
         65:13:47:1a:55:35:20:a9:ef:5a:89:7f:ad:1c:93:c3:37:b4:
         5e:18:d2:ed:d6:ec:29:81:28:a1:ce:78:68:d1:63:5e:dc:63:
         e4:df:38:c1:9f:82:e4:65:f3:f0:e4:0c:ad:5f:c1:e4:d8:69:
         db:aa:08:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:36:23 2025 by rpki-client