Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
File:                     386WGuDhYY50mciKIlWbsgJQIq0.mft (raw, json)
Hash identifier:          svXRNB2d7PMn4Be3n1VtwSYOMnXqQ5hopnxIMbW6wIA=
Subject key identifier:   06:99:8F:FF:54:48:4C:99:A1:7E:69:FD:84:97:B4:4C:DD:86:0B:86
Authority key identifier: DF:CE:96:1A:E0:E1:61:8E:74:99:C8:8A:22:55:9B:B2:02:50:22:AD
Certificate issuer:       /CN=dfce961ae0e1618e7499c88a22559bb2025022ad
Certificate serial:       01967BD79E034DED633DC82FB92820C08ACA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
Manifest number:          044B
Signing time:             Mon 28 Apr 2025 10:00:50 +0000
Manifest this update:     Mon 28 Apr 2025 10:00:50 +0000
Manifest next update:     Tue 29 Apr 2025 10:00:50 +0000
Files and hashes:         1: 386WGuDhYY50mciKIlWbsgJQIq0.crl (hash: z2OwIPvMHU9ncTVHLtZXFr1UkIsoO2iPxiCI7BCINpU=)
                          2: cW1dQczT5TIbX2h9QMnQvvvgst0.roa (hash: LoF7bKHNx/b/rqvPxychY/FV7Mf6p5uxTp1lxzEa+Sg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7b:d7:9e:03:4d:ed:63:3d:c8:2f:b9:28:20:c0:8a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfce961ae0e1618e7499c88a22559bb2025022ad
        Validity
            Not Before: Apr 28 10:00:50 2025 GMT
            Not After : Apr 29 10:00:50 2025 GMT
        Subject: CN=06998fff54484c99a17e69fd8497b44cdd860b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:76:19:78:fa:02:86:4b:bf:9f:c1:4d:d5:
                    20:b4:d2:ac:d8:7d:a6:9c:10:70:84:3a:9e:37:3d:
                    1c:59:28:f4:70:1a:97:21:d8:e5:6e:f2:38:7c:7e:
                    c7:32:f7:2a:56:13:c5:d8:2c:c5:1f:07:fa:8a:07:
                    69:5e:75:15:ac:10:e5:58:1a:dc:91:89:63:ed:7d:
                    96:e1:c7:d0:df:0d:f6:90:27:69:e6:d3:7b:24:7b:
                    99:19:7a:22:84:4a:7d:79:a7:c3:a5:1e:63:64:1c:
                    c6:0a:df:38:68:cb:c0:20:20:eb:fe:e2:72:70:06:
                    af:3b:21:e1:bd:61:65:36:ee:cd:7a:03:3b:af:d2:
                    98:34:75:5a:ad:f6:d0:80:7f:41:c8:15:a1:bf:e4:
                    ce:ce:16:d5:41:49:73:7b:b0:22:26:57:75:60:4d:
                    d9:f0:5e:de:34:0f:84:7f:c3:fc:ef:fc:a3:cf:ec:
                    1b:e8:11:d2:6f:a9:31:32:f7:a9:3d:45:72:b2:3a:
                    81:16:1f:32:e7:0d:e4:16:36:90:09:cf:0f:43:72:
                    e8:f4:72:90:87:ee:b6:3d:05:6f:e8:5e:7d:21:fa:
                    97:09:c1:e1:81:2a:ac:7c:e7:78:d6:31:a6:59:49:
                    ce:b6:6b:fa:81:93:b9:5d:d0:3b:47:05:43:94:25:
                    6b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:99:8F:FF:54:48:4C:99:A1:7E:69:FD:84:97:B4:4C:DD:86:0B:86
            X509v3 Authority Key Identifier:
                keyid:DF:CE:96:1A:E0:E1:61:8E:74:99:C8:8A:22:55:9B:B2:02:50:22:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:8c:e8:28:ee:d3:d2:81:95:8c:d7:a3:6e:16:5a:ad:d4:73:
         3a:d5:bd:ef:a7:98:94:9a:47:40:d2:5b:06:5e:8e:fc:11:0f:
         68:8d:ac:01:3d:a8:03:1f:6f:8a:d4:04:0e:3c:43:a0:10:9d:
         ea:d7:55:b4:2f:be:ea:8d:52:79:84:ee:44:5f:7c:62:6b:a0:
         5e:21:ca:8a:ec:e8:51:de:d3:9b:bd:47:d2:24:5b:14:02:6d:
         19:0d:dc:99:8d:b6:5c:42:5f:bb:62:66:1c:6a:81:c7:f7:a4:
         f5:da:08:81:84:3f:c1:3a:d1:04:e0:a1:45:66:14:53:29:ad:
         53:6b:1f:14:c2:20:f4:a3:41:c3:4b:b1:9a:b1:c6:0f:d6:06:
         9a:30:b2:c7:bb:0b:1c:48:e3:cf:69:67:d7:26:9d:5e:44:c1:
         9d:ee:c7:9e:55:63:62:fb:d7:09:e4:be:c5:e7:fa:95:e3:e7:
         ce:53:05:b7:1d:30:c3:f9:dc:67:f6:99:ef:ef:af:4e:1f:ed:
         f1:77:97:68:3a:85:2c:b3:26:c9:09:34:62:72:90:37:d3:4d:
         24:af:39:7e:7a:9e:17:de:21:0c:49:6d:d2:23:cd:2b:67:b3:
         f8:51:54:5d:3e:00:43:cd:0d:61:1a:a8:f3:f0:3d:8b:69:c3:
         a1:4b:22:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:28:28 2025 by rpki-client