Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
File:                     4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft (raw, json)
Hash identifier:          o/h434dkebJeAPFAhNRXHJ23K7bFtJ+G49VdUQkfogk=
Subject key identifier:   2E:97:F9:17:19:C0:2B:0E:74:17:8B:4A:58:84:A6:8F:C8:69:92:83
Authority key identifier: E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
Certificate issuer:       /CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Certificate serial:       0196789F155045C5E3020FA9A7AB794E14A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
Manifest number:          04F2
Signing time:             Sun 27 Apr 2025 19:00:13 +0000
Manifest this update:     Sun 27 Apr 2025 19:00:13 +0000
Manifest next update:     Mon 28 Apr 2025 19:00:13 +0000
Files and hashes:         1: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl (hash: MB7xUuThDtKUK41qJLiuRT3gfJQOJ/w9BhQ3vZmiYT4=)
                          2: L4hlYKajNqyPnVVv7AIxEY7dFGs.roa (hash: dC2HFDiddhP1IjnshflG9aATVdgRr01kQzAT+rfJKcU=)
                          3: Xse_q1SIOApT0uJ4kO_NUiDFU1A.roa (hash: OR/vMeRN3fqz9meXU3XlPM8D3UPTvqtP1NKBnNpirBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:9f:15:50:45:c5:e3:02:0f:a9:a7:ab:79:4e:14:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
        Validity
            Not Before: Apr 27 19:00:13 2025 GMT
            Not After : Apr 28 19:00:13 2025 GMT
        Subject: CN=2e97f91719c02b0e74178b4a5884a68fc8699283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a2:05:80:dc:62:a8:44:96:14:cc:71:a6:43:
                    86:d6:32:c1:e7:36:5f:cf:10:e2:48:a9:4a:fe:36:
                    7c:b1:1e:d3:c5:31:98:05:68:2b:83:55:23:e7:a4:
                    3f:f8:83:0c:93:b5:af:31:5f:fc:9a:39:c6:4f:1b:
                    cb:c3:a0:0f:10:60:08:81:f4:31:c3:72:06:60:ba:
                    f2:cc:e3:e7:b0:12:db:22:a8:f0:16:c0:13:72:65:
                    52:fa:8b:9b:9d:96:a2:73:9d:b4:93:39:a8:aa:3f:
                    f6:cd:0f:fc:7c:db:3c:a7:20:31:ce:ff:19:48:a6:
                    ac:09:99:bf:8c:1e:01:41:0b:54:02:33:e8:d1:19:
                    f1:ff:f5:c6:07:c1:b2:e8:ce:26:6d:c0:a5:ac:9c:
                    69:ef:f4:da:85:cc:59:8d:19:c4:3f:69:52:22:d9:
                    f1:55:52:2a:cf:53:98:df:a0:49:3d:2b:40:7b:04:
                    c6:46:2e:89:18:46:6f:ec:18:1f:c2:ae:5a:8c:8a:
                    59:f8:49:7f:d9:c3:2c:3f:c8:f2:4a:a4:8e:00:a6:
                    74:26:8c:84:89:1b:f7:92:76:37:e8:24:38:20:98:
                    19:2e:83:c1:3b:cf:d7:41:e2:83:2f:4a:38:71:83:
                    04:24:7a:3e:1e:6f:e0:6b:38:30:d1:df:5b:13:5b:
                    39:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:97:F9:17:19:C0:2B:0E:74:17:8B:4A:58:84:A6:8F:C8:69:92:83
            X509v3 Authority Key Identifier:
                keyid:E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:72:30:22:70:39:0a:7a:92:a3:98:0d:b0:e6:9d:3f:09:3d:
         82:7a:6b:fb:25:65:71:95:2b:d4:c3:8b:f1:ea:19:b2:03:6e:
         8c:d4:f7:98:0a:8f:5f:8d:57:c2:c3:da:13:88:2f:88:ea:38:
         15:3b:9d:7f:6c:51:ec:84:40:30:b7:43:02:73:ad:de:71:08:
         64:94:6b:60:45:9e:31:cb:44:d3:b0:3b:ac:61:11:9f:7f:16:
         55:04:6d:8b:c6:7c:82:31:87:b8:2e:e9:cb:25:79:fe:1b:05:
         69:2b:c9:11:83:66:21:35:b2:ff:53:3b:0e:41:84:51:d0:c9:
         82:36:84:77:63:bc:6f:da:6c:10:99:a5:7f:38:fc:44:03:99:
         49:60:ba:48:22:b7:9a:49:be:9f:90:ee:0f:bc:45:23:8c:a1:
         8c:7a:c5:04:14:ca:85:e7:a5:c7:49:6d:69:91:7d:ae:e6:12:
         cf:bb:76:6c:f3:82:f5:59:c8:7f:3e:17:32:c4:f8:09:38:4d:
         ab:d9:5e:df:43:d2:b0:11:11:85:83:36:c9:87:65:16:f2:89:
         3c:bd:e5:32:59:fa:e7:01:3a:9c:6b:66:00:b5:13:a5:c0:26:
         14:f7:87:30:b0:b4:c0:4d:6a:4c:20:50:b4:d0:43:65:6f:8e:
         4b:fb:1e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:09:23 2025 by rpki-client