Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
File:                     1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft (raw, json)
Hash identifier:          4vJMSB06ncyv0S7+OvFnLxOdyYpQ6iDKdG5DuqF+ZGg=
Subject key identifier:   95:CD:46:C5:78:F9:9E:09:53:3A:DA:A7:75:6D:68:EA:5D:68:87:CF
Authority key identifier: FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51
Certificate issuer:       /CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
Certificate serial:       01967755A5D553E7F656A5687657D07342E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
Manifest number:          1167
Signing time:             Sun 27 Apr 2025 13:00:23 +0000
Manifest this update:     Sun 27 Apr 2025 13:00:23 +0000
Manifest next update:     Mon 28 Apr 2025 13:00:23 +0000
Files and hashes:         1: 1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl (hash: gOrApYosZ7r394X+3K06JWmLTebU4VjqxZqbz/EbF8k=)
                          2: igBGcaK6I-04bslxB8dvdsYLHhw.roa (hash: FBSMg/oDiupeLPZD+Uq2Nknq3gqPFPRMj+3j0Pt7jOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 13:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:55:a5:d5:53:e7:f6:56:a5:68:76:57:d0:73:42:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
        Validity
            Not Before: Apr 27 13:00:23 2025 GMT
            Not After : Apr 28 13:00:23 2025 GMT
        Subject: CN=95cd46c578f99e09533adaa7756d68ea5d6887cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:65:43:04:c7:b5:8d:6c:8b:0c:98:f2:b3:50:
                    c0:76:a9:fd:c6:1e:6d:84:97:2c:0c:14:ad:78:55:
                    98:b8:56:76:6c:8b:6d:49:ce:e0:5b:24:27:5f:9f:
                    b0:6d:99:2d:5c:17:8a:75:7a:f8:1b:b9:2a:54:bd:
                    eb:16:06:d8:d9:f8:3e:36:13:81:d6:ff:ec:d1:96:
                    96:07:3a:38:ad:ec:29:47:fa:a1:b2:5a:b6:cb:f1:
                    5c:22:3b:fc:e5:59:c7:7c:52:93:08:47:82:fc:27:
                    aa:63:f2:e0:4b:fa:2f:f5:24:46:a9:22:be:37:c0:
                    2f:24:95:c8:2e:66:d7:ba:65:ee:e3:6b:32:36:ca:
                    ad:79:50:c3:55:87:3b:74:98:12:1c:b1:31:9b:dd:
                    6a:b2:2f:5a:4f:02:f9:b1:7a:a2:15:69:f4:d1:60:
                    64:31:40:13:5e:af:46:5c:ff:57:35:1c:c3:6a:50:
                    76:b0:44:32:6a:c6:38:a4:43:16:ea:f0:d5:58:35:
                    8f:3d:9a:20:e1:26:60:2b:eb:25:a5:39:5d:45:5d:
                    86:c3:88:23:80:25:13:cd:0f:3a:16:f9:bf:9b:0e:
                    93:55:da:68:a2:b6:ce:5a:2e:62:86:1c:d6:ca:3f:
                    7d:e5:ee:79:87:93:6f:0a:d5:85:dd:1b:65:3f:42:
                    32:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CD:46:C5:78:F9:9E:09:53:3A:DA:A7:75:6D:68:EA:5D:68:87:CF
            X509v3 Authority Key Identifier:
                keyid:FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:3c:4c:6a:57:0c:ce:76:49:00:e9:88:48:15:09:65:72:7c:
         07:69:1a:6b:03:55:ff:ef:54:31:eb:fd:e2:dd:f1:fb:ed:e7:
         b2:67:9c:ee:0d:2f:d5:c5:b7:0f:11:b0:d0:f4:fd:40:d8:a2:
         5e:76:84:89:a6:48:78:5c:89:3c:c8:fc:eb:f6:ad:00:05:04:
         60:e1:dd:9e:f4:4f:97:77:18:8b:29:27:cf:cf:e1:35:87:0b:
         0b:b9:ba:ab:2c:fb:43:ae:1f:4f:89:64:ca:4d:5a:a9:f5:38:
         34:12:35:38:7a:de:c3:5c:93:11:09:d7:d4:a3:7d:51:8e:e9:
         c4:6c:71:a9:f9:23:a4:bb:c6:c8:44:83:09:bc:61:1e:34:66:
         54:34:f0:8d:22:c9:77:eb:88:6d:cc:ad:75:67:01:27:88:c8:
         47:a0:b8:b5:75:37:a3:53:db:6e:b1:31:e8:5e:f9:de:c7:68:
         30:6c:05:06:66:f5:36:28:9f:a4:df:19:61:2c:ec:97:67:76:
         e1:17:70:f5:bb:d1:8d:78:37:ee:a8:62:d3:7b:8d:0a:c1:1d:
         1c:72:74:82:de:9d:1d:ac:89:3d:5a:3e:1a:9d:70:43:de:49:
         91:16:52:24:1b:cc:07:62:71:09:b3:6e:89:dc:bc:7c:8b:9d:
         e4:72:f1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:09 2025 by rpki-client