Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
File:                     1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft (raw, json)
Hash identifier:          XULm16mRkrL7zUa7Fauqra2/+tUdZw7GX+0YBp3dx+c=
Subject key identifier:   0F:2D:DA:FB:E8:13:A8:15:9A:FE:35:72:C4:1D:BC:FF:60:1E:F1:92
Authority key identifier: F8:06:EC:9C:F1:DE:AB:F9:D6:CD:5F:88:91:BB:82:D5:6F:91:D6:78
Certificate issuer:       /CN=f806ec9cf1deabf9d6cd5f8891bb82d56f91d678
Certificate serial:       0196741DF0A23370A2D4FB3369661BFD01F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
Manifest number:          1251
Signing time:             Sat 26 Apr 2025 22:00:41 +0000
Manifest this update:     Sat 26 Apr 2025 22:00:41 +0000
Manifest next update:     Sun 27 Apr 2025 22:00:41 +0000
Files and hashes:         1: 1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl (hash: Fr11rE/XlMgviUP83PwinwOPhYv4iAT6bdltfOQ5X+w=)
                          2: 4WNYU3DPTpnOXIdy-DcRolCswoU.roa (hash: lJMeZdxIdcMT6oAlo0ZhGiaOSgJa2FyIZlyPkCXNXeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:1d:f0:a2:33:70:a2:d4:fb:33:69:66:1b:fd:01:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f806ec9cf1deabf9d6cd5f8891bb82d56f91d678
        Validity
            Not Before: Apr 26 22:00:41 2025 GMT
            Not After : Apr 27 22:00:41 2025 GMT
        Subject: CN=0f2ddafbe813a8159afe3572c41dbcff601ef192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:56:3e:fc:ab:0f:44:07:fa:f7:30:fc:1b:9e:
                    a6:7c:fd:ce:b1:72:4c:20:20:c8:31:32:83:1b:9a:
                    12:47:fb:4c:dd:e2:b8:ee:8a:9d:a1:b1:77:aa:51:
                    fe:db:ea:8b:b1:a8:f8:95:d9:c0:89:25:59:34:5c:
                    ed:52:03:d4:c0:65:23:db:f7:06:cd:68:2e:ac:15:
                    96:28:fd:18:1c:88:b0:35:92:07:15:3c:09:c5:b5:
                    cd:77:f3:da:12:a7:41:f6:1b:43:cb:bb:e8:00:f9:
                    db:61:2b:38:66:dc:e6:a1:70:29:78:7b:f4:62:a3:
                    86:9e:d4:a8:a0:fb:9e:d6:ca:fd:42:74:17:0c:c0:
                    63:37:34:ba:96:2b:14:ce:ef:48:94:63:91:d1:97:
                    05:45:ac:48:2f:3e:71:0b:7f:04:34:2b:22:5a:19:
                    30:04:d6:98:7c:29:2b:af:b2:3f:ca:0b:ea:94:4f:
                    16:2a:e1:c5:7c:7e:36:cd:a3:d8:78:45:53:70:02:
                    69:4c:d6:ab:82:20:18:0d:a9:89:0b:fb:43:cd:f6:
                    82:29:e9:97:f7:c2:ae:48:de:de:1f:23:e0:39:6c:
                    5e:6a:14:ad:43:e1:3e:89:31:de:1d:c3:e0:3b:b1:
                    c3:f4:42:7b:9d:45:05:53:ee:8f:8c:82:c5:cb:c2:
                    f8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2D:DA:FB:E8:13:A8:15:9A:FE:35:72:C4:1D:BC:FF:60:1E:F1:92
            X509v3 Authority Key Identifier:
                keyid:F8:06:EC:9C:F1:DE:AB:F9:D6:CD:5F:88:91:BB:82:D5:6F:91:D6:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:28:1c:27:ec:ff:13:82:60:90:b4:3b:61:99:e6:20:f8:ec:
         8d:75:58:e0:fe:03:8d:36:62:11:51:90:20:38:29:8d:6f:3e:
         2b:4e:b2:e9:78:5d:11:ff:db:3b:51:06:4b:41:39:70:52:1b:
         36:db:d3:0a:0c:03:94:b6:ec:d4:b7:96:59:0f:45:83:d6:73:
         11:a8:79:4c:5f:30:60:1b:38:b2:fb:f2:af:cc:b4:e0:fc:5a:
         e7:6a:90:f7:4c:5c:57:16:ba:eb:a2:b0:e9:73:21:40:3d:44:
         8e:0a:a0:91:6c:4c:8d:65:f7:31:38:a0:33:9e:23:9a:b8:27:
         a8:5b:df:fa:26:32:eb:9f:0b:66:11:6f:38:69:83:7e:5f:04:
         71:f2:28:b8:99:8f:0d:ca:2d:25:39:10:9e:9a:c0:27:db:b4:
         b7:3e:ca:93:b0:61:57:1c:ef:24:af:8a:4a:c0:ea:aa:cb:d5:
         e4:89:50:1a:3c:81:d3:81:bf:7e:d9:ce:f5:53:a1:47:a8:9e:
         25:09:e0:b1:94:55:a1:db:54:e2:0b:cf:ce:61:1c:51:b4:a9:
         0d:65:9d:4d:5f:a0:05:49:6a:c6:97:2d:1f:e7:23:ff:25:bc:
         7d:d5:2e:f2:be:e0:f7:a3:ca:9d:aa:74:e5:c3:cd:2c:98:48:
         28:a0:12:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:32 2025 by rpki-client