Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
File:                     Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft (raw, json)
Hash identifier:          C+I1B1fCWj981Q6alYR/Adum9mh0dKGWF2BoYLVv6g8=
Subject key identifier:   2D:A9:C4:7B:A6:BE:AE:DD:DD:D8:4A:B9:04:18:DA:0F:8F:B9:D0:98
Authority key identifier: 16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98
Certificate issuer:       /CN=1627b80681f5b48e126898295983e0df29971b98
Certificate serial:       0196760C454F345BD8C7EC25657E9869A7DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
Manifest number:          0F09
Signing time:             Sun 27 Apr 2025 07:00:37 +0000
Manifest this update:     Sun 27 Apr 2025 07:00:37 +0000
Manifest next update:     Mon 28 Apr 2025 07:00:37 +0000
Files and hashes:         1: Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl (hash: eZIp5QQNL4rwBSzCInzRIYlR7fEb6lE+s5z4M2knOwQ=)
                          2: _AGKWozlzWCnt0EVUV_nIRjWGDc.roa (hash: u4jnpeyvwfIgkyOL/DVIQbqgyc9sUOLPqmAM+WUWM1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:45:4f:34:5b:d8:c7:ec:25:65:7e:98:69:a7:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1627b80681f5b48e126898295983e0df29971b98
        Validity
            Not Before: Apr 27 07:00:37 2025 GMT
            Not After : Apr 28 07:00:37 2025 GMT
        Subject: CN=2da9c47ba6beaeddddd84ab90418da0f8fb9d098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e4:26:ab:c1:a2:d3:99:c8:55:e0:76:49:e3:
                    71:95:61:dd:a4:11:1b:68:07:2b:35:6a:17:2c:5c:
                    ab:fb:f7:aa:19:53:c3:e8:bd:cb:3b:e1:df:fd:89:
                    46:7f:aa:c1:e6:62:b2:d0:68:f1:9a:07:ea:d3:1f:
                    b5:16:08:bc:ab:58:11:54:59:5c:db:1f:eb:81:b2:
                    50:c9:40:40:6f:ed:d2:34:b4:16:5d:e3:6a:af:c5:
                    b5:9d:47:35:fa:8a:9e:81:ce:eb:a2:71:96:91:34:
                    ae:68:8b:be:1a:fe:e4:28:6e:8d:09:a6:21:6e:6d:
                    9c:b5:ed:19:70:3b:76:78:a2:39:53:1b:71:94:50:
                    ab:1c:fb:b9:1c:65:4f:11:eb:ab:00:af:fd:1a:01:
                    cf:f5:3c:80:ed:b6:c1:3a:3d:e9:48:14:52:66:e8:
                    8b:69:03:0e:9c:3d:4c:09:57:a2:ae:8d:2f:84:40:
                    3a:53:d3:da:cd:94:4b:5c:88:09:17:d0:bd:cf:d5:
                    a8:84:a6:2d:0c:96:4c:39:32:bc:94:d6:b3:2a:42:
                    a1:29:9a:d2:88:76:c5:c8:96:b8:be:81:ef:3f:7b:
                    9f:aa:2d:d7:18:10:dc:4b:4d:70:3d:8f:12:0f:ba:
                    ac:81:61:59:e4:a7:23:87:c9:0f:9b:a5:b7:bf:5f:
                    ad:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A9:C4:7B:A6:BE:AE:DD:DD:D8:4A:B9:04:18:DA:0F:8F:B9:D0:98
            X509v3 Authority Key Identifier:
                keyid:16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:18:21:19:f9:f8:e3:38:6e:86:3b:bd:e6:15:4d:d7:d8:ad:
         65:48:40:6f:37:a4:85:23:cb:83:50:aa:c9:ee:1a:05:0d:30:
         32:70:75:c0:e1:21:ee:fe:70:f1:82:60:2e:61:3d:77:5b:fd:
         54:d2:a0:64:aa:5e:7e:9d:b9:b2:44:9c:98:bd:e7:ba:00:0b:
         71:c4:f3:a4:3c:d8:64:75:fe:c4:87:91:8b:c4:e9:d1:a0:2f:
         69:ec:80:7f:60:2f:fa:ae:7d:be:b1:96:72:32:37:0a:8e:40:
         a3:7f:be:35:ef:cb:d3:f6:bf:76:55:1f:0c:5a:fa:ba:12:a3:
         82:94:0c:e1:5d:26:a8:f2:ef:e6:5e:10:f5:f1:aa:ca:2e:54:
         2c:58:45:b6:c4:7e:47:6b:3a:2c:87:fc:85:74:e7:f3:c0:81:
         64:31:30:55:b5:7f:54:b1:92:cf:f3:a6:db:6c:b0:79:06:be:
         f1:f8:84:16:e8:a1:51:e7:ad:7d:fa:6e:2f:91:92:34:83:07:
         a6:98:90:c1:a9:e9:d6:f4:81:63:90:31:3d:72:6e:60:a8:eb:
         ed:72:25:e9:79:56:a9:47:d7:5e:6a:37:00:65:ad:40:51:91:
         4b:ec:94:78:5a:d8:5f:64:e6:03:a2:eb:cc:25:59:b8:6f:d9:
         41:2e:04:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:56 2025 by rpki-client