Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
File:                     r26u_xI8pnRG0OSUAeSVBXB44XQ.mft (raw, json)
Hash identifier:          Sm7H1zQpASEsWTQ98uJCLPsBQk3LjmykrAYfVPH8/V0=
Subject key identifier:   83:52:2E:D5:EE:3C:E9:16:FD:B2:8F:A0:34:D9:BB:3B:C7:05:FD:4A
Authority key identifier: AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74
Certificate issuer:       /CN=af6eaeff123ca67446d0e49401e495057078e174
Certificate serial:       019678683EE43CD9E77DB10959AA3905148B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
Manifest number:          0538
Signing time:             Sun 27 Apr 2025 18:00:19 +0000
Manifest this update:     Sun 27 Apr 2025 18:00:19 +0000
Manifest next update:     Mon 28 Apr 2025 18:00:19 +0000
Files and hashes:         1: 4FPxHmFFi8FhwJTxhTVfGxLgeb0.roa (hash: DAkyKbIc/vzHYQCVTOxWR8OPdTTpNjZGMzs7QrhE8O8=)
                          2: Xje5uU3T9TbH4JJyT4gZJ5Wfu20.roa (hash: GIEcr4GCOYUurd6bJwNhKNeysjD37nKkx50Iee+P/nk=)
                          3: r26u_xI8pnRG0OSUAeSVBXB44XQ.crl (hash: 1f23rCJsMTAB2MRbLG0fNdRuHi3njA1OcWx6adjIPEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:68:3e:e4:3c:d9:e7:7d:b1:09:59:aa:39:05:14:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af6eaeff123ca67446d0e49401e495057078e174
        Validity
            Not Before: Apr 27 18:00:19 2025 GMT
            Not After : Apr 28 18:00:19 2025 GMT
        Subject: CN=83522ed5ee3ce916fdb28fa034d9bb3bc705fd4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:60:8a:53:d6:59:69:b5:1b:a2:9f:40:17:1d:
                    eb:42:24:52:db:77:f1:c4:f3:9f:62:6d:74:e2:b4:
                    1a:7e:2d:b6:3f:43:e0:c3:11:c7:51:90:4f:6a:7e:
                    e6:21:8c:b3:21:4d:e5:92:92:d2:32:ce:65:5e:0e:
                    ea:ea:3b:22:33:ba:f7:49:e4:be:ca:47:b9:89:e6:
                    e1:3a:d9:ef:51:28:7d:73:f2:8f:e0:44:20:af:7c:
                    9c:01:92:7a:92:95:46:e5:9b:dc:16:06:cc:75:67:
                    50:47:7a:57:0e:c8:a9:a6:0c:b3:e8:e1:8f:68:3b:
                    2d:a1:53:03:41:dd:75:2b:26:b8:21:92:8a:2e:ce:
                    51:90:ef:ea:ad:8c:f5:c8:8a:bd:a7:53:34:f3:2d:
                    2c:56:7c:92:0d:a4:51:4d:00:6c:cd:4a:1c:54:bf:
                    47:77:2e:ac:2a:27:63:5f:16:d8:a9:cd:37:ce:09:
                    1a:fa:f5:c2:2e:0d:cc:c9:04:7f:7f:20:53:10:55:
                    47:86:be:46:07:f0:4c:98:d2:76:b7:12:50:c2:fe:
                    d0:69:bf:df:28:23:4c:8d:96:0a:6f:1f:0a:1d:91:
                    1d:d5:27:8a:2b:92:37:6e:34:f2:cf:f5:a8:f8:58:
                    a7:cf:c6:d5:5e:a8:24:e2:46:1c:0d:bb:e3:e8:05:
                    14:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:52:2E:D5:EE:3C:E9:16:FD:B2:8F:A0:34:D9:BB:3B:C7:05:FD:4A
            X509v3 Authority Key Identifier:
                keyid:AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ac:12:42:f7:0e:4e:2d:ad:88:36:a4:02:72:0c:d6:2b:e9:
         30:0b:45:f6:93:ab:e2:cd:ee:69:8b:63:6d:23:9c:2b:10:57:
         26:78:c3:ef:c4:14:da:bc:01:2f:7b:6b:52:34:dc:1a:a0:6b:
         c3:b4:74:e6:94:91:30:c1:53:43:ba:6a:9d:1d:56:ed:f5:23:
         35:fd:f5:68:f3:89:1e:b8:53:3a:d8:5b:92:59:1b:72:b8:de:
         cb:a2:90:fe:bd:45:25:30:d9:a9:80:1d:24:2d:5f:25:fe:ab:
         4c:2a:34:5b:7c:7c:4d:d8:b7:a1:87:17:c5:5f:ce:36:60:4b:
         7b:91:e7:68:34:1e:5e:43:24:a1:19:51:f7:f6:d2:0b:6b:bd:
         7b:5d:00:4e:e2:35:e0:35:11:25:92:95:34:1f:47:3f:c5:1b:
         98:32:6d:68:6e:07:0b:69:ae:72:a4:01:75:1c:7d:73:8f:b2:
         cb:bc:c9:e3:f6:c8:d2:ba:29:73:39:29:27:8d:e8:f6:91:39:
         de:ce:3a:0a:27:9e:11:70:0a:48:f5:85:ab:a2:bd:2f:9f:ff:
         14:ed:1f:74:75:a5:0e:3d:b3:42:ae:47:64:ba:8e:85:e9:4e:
         6e:a6:fb:7f:61:e7:9f:55:83:85:f2:3e:81:ff:dc:e8:0a:5c:
         a8:28:ce:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:16:34 2025 by rpki-client