Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
File:                     b027wGlmny5-iCL2OY9rNsRJNFw.mft (raw, json)
Hash identifier:          pM/GEDoJGTBIMkKLF+y5e/02c0Jz/DYbs+SsRw7xqXg=
Subject key identifier:   E2:2F:F8:1A:01:42:F3:B2:1E:A5:BF:36:33:DB:84:41:C6:70:69:23
Authority key identifier: 6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C
Certificate issuer:       /CN=6f4dbbc069669f2e7e8822f6398f6b36c449345c
Certificate serial:       019675673D4CA1881F01E39A086EEB735317
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
Manifest number:          131B
Signing time:             Sun 27 Apr 2025 04:00:22 +0000
Manifest this update:     Sun 27 Apr 2025 04:00:22 +0000
Manifest next update:     Mon 28 Apr 2025 04:00:22 +0000
Files and hashes:         1: b027wGlmny5-iCL2OY9rNsRJNFw.crl (hash: 0gM/AbJ0F/xBEBIArbJbYrkvhEjrDb3cZySkDaIC5Mg=)
                          2: iG5MloBb0rNBUXMwGnMdFUHFQBI.roa (hash: /505m7zfXiVDkYV7zSm4uW5ug6R08YZLzHTRAa/aV2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 04:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:67:3d:4c:a1:88:1f:01:e3:9a:08:6e:eb:73:53:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f4dbbc069669f2e7e8822f6398f6b36c449345c
        Validity
            Not Before: Apr 27 04:00:22 2025 GMT
            Not After : Apr 28 04:00:22 2025 GMT
        Subject: CN=e22ff81a0142f3b21ea5bf3633db8441c6706923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ae:93:5c:4f:5e:89:a6:e9:ba:b7:0d:3c:fb:
                    c8:1a:c7:38:8f:ee:d1:74:15:0c:8e:f5:a1:ef:d5:
                    06:76:cb:72:d2:b1:76:16:06:69:bd:1c:c6:cd:58:
                    de:5d:fc:b5:cf:53:97:1a:f3:d9:c6:30:a3:0c:89:
                    6d:88:3a:06:26:83:63:80:c5:5b:0e:fa:31:a7:17:
                    d9:49:7a:3f:11:fc:e5:af:ad:21:5e:9e:60:32:0a:
                    45:c8:8a:7f:05:09:49:f9:df:e3:46:41:51:20:8f:
                    f6:99:60:ec:8b:c4:92:aa:ab:8a:d2:97:46:dd:82:
                    48:f7:6c:c3:bb:33:06:46:a1:81:9d:6d:ee:7b:b7:
                    fd:a9:e5:ff:6d:a7:38:c9:da:f7:18:44:d8:fd:f6:
                    06:30:be:49:aa:0b:c6:c6:27:74:69:70:7b:72:ff:
                    ff:20:2c:93:17:a8:0f:ef:c3:3f:fb:78:46:4f:1e:
                    13:56:9f:00:e8:a9:5c:99:c1:35:e8:36:74:f9:99:
                    08:75:48:89:8b:ec:ca:82:04:41:0f:f0:fc:78:78:
                    20:68:0a:1b:22:93:93:7d:7e:45:05:f2:6b:1d:c4:
                    8c:8f:b5:ef:02:d0:25:de:95:02:e4:a1:7a:23:b0:
                    63:f7:2a:88:99:d6:3c:eb:9f:61:5c:f2:71:c2:52:
                    c0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2F:F8:1A:01:42:F3:B2:1E:A5:BF:36:33:DB:84:41:C6:70:69:23
            X509v3 Authority Key Identifier:
                keyid:6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:dc:28:b5:bb:6b:37:73:91:7c:e6:a7:06:d3:3b:b3:91:9e:
         89:5f:73:1c:0f:96:da:79:2f:4e:cc:c5:55:2f:96:05:c8:8c:
         9f:f6:9f:a4:e6:85:6a:13:11:b2:eb:24:f8:f4:44:7f:39:27:
         5e:c6:71:73:cd:7f:8d:83:14:12:2d:02:da:f1:26:67:fa:c0:
         d2:db:fc:b6:21:a2:b8:6d:1a:b4:fd:ef:2c:88:1c:9d:e4:2b:
         64:63:4e:13:f8:bc:62:7d:63:93:1f:9f:d0:52:87:c4:a3:69:
         fb:d4:91:33:51:44:dc:ad:fa:49:47:0b:14:e7:22:45:3e:e7:
         a7:e6:94:b0:2f:17:17:28:52:0e:3a:eb:36:0f:68:f9:a6:c6:
         8d:17:a2:b8:81:fa:56:44:d5:e8:a3:6b:73:4c:4b:da:ca:a6:
         5f:97:82:00:3d:ad:e1:46:59:92:bb:a7:cf:5f:01:34:4e:36:
         56:2f:29:6f:7b:dd:f0:59:cd:6b:fd:04:1b:8a:df:62:c4:d0:
         0f:b9:61:d6:f5:dd:a2:65:cd:9c:f8:ab:c5:63:65:92:1d:2e:
         16:85:93:0a:cc:01:f2:8c:0b:3a:dc:c9:e2:70:b7:71:12:1e:
         6f:42:1a:25:70:29:67:33:f0:2a:f7:fc:1e:40:46:3a:12:75:
         c4:27:1e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:08:17 2025 by rpki-client