Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft
File:                     K4HHU7d2Zeeln45QgxTxWTVsIo4.mft (raw, json)
Hash identifier:          IKo8g6V7mv5Q0TtVg29l3EQsNWD8+pw8PXZjDe52NuM=
Subject key identifier:   84:A3:1F:57:D9:CD:40:FC:2F:92:1F:5B:88:02:03:22:82:B2:D6:5D
Authority key identifier: 2B:81:C7:53:B7:76:65:E7:A5:9F:8E:50:83:14:F1:59:35:6C:22:8E
Certificate issuer:       /CN=2b81c753b77665e7a59f8e508314f159356c228e
Certificate serial:       0196789F7F364E5005222C6F1E2DED6B8BB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft
Manifest number:          0F1E
Signing time:             Sun 27 Apr 2025 19:00:40 +0000
Manifest this update:     Sun 27 Apr 2025 19:00:40 +0000
Manifest next update:     Mon 28 Apr 2025 19:00:40 +0000
Files and hashes:         1: K4HHU7d2Zeeln45QgxTxWTVsIo4.crl (hash: 0xuL/O7jN+Oxjq6P6ZY10EJVb+6OuN8DgxHV8q17rWc=)
                          2: aK_WMtrzKAXs0LTqbVOCa8ChzP8.roa (hash: f1Um7efAs/j5iF2wB08cWIqaipZskvxt+HmOXtWDHMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:9f:7f:36:4e:50:05:22:2c:6f:1e:2d:ed:6b:8b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b81c753b77665e7a59f8e508314f159356c228e
        Validity
            Not Before: Apr 27 19:00:40 2025 GMT
            Not After : Apr 28 19:00:40 2025 GMT
        Subject: CN=84a31f57d9cd40fc2f921f5b8802032282b2d65d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e0:cc:45:4e:34:35:9a:c2:e8:73:d4:1e:4f:
                    da:69:8f:e4:af:ad:b2:94:f8:07:03:8e:64:e3:b1:
                    7f:d0:0d:dc:56:86:af:b9:61:9a:3a:95:04:d1:52:
                    57:ee:c4:4f:35:91:d2:86:15:7d:50:fd:6f:7e:88:
                    86:1e:b6:3c:e5:e3:2a:1b:b1:49:1f:22:de:aa:01:
                    ca:28:bd:e9:26:07:46:1d:4a:8e:53:b6:31:b3:6e:
                    85:8e:c9:69:1a:80:15:1d:21:b1:51:d9:9d:fd:e7:
                    4a:61:17:77:63:05:c2:38:d4:25:51:2e:e2:43:56:
                    e5:91:fb:b4:a3:7d:6f:9e:38:25:4c:23:a5:b6:1e:
                    e8:eb:1a:c3:15:2c:28:5e:5d:bb:2e:69:48:71:f7:
                    86:f0:88:86:fd:6b:a2:ac:c5:a5:ea:07:dd:ed:ad:
                    f2:4c:de:2d:e2:c8:69:36:7c:41:d4:35:f3:ae:dc:
                    31:43:cb:cd:b8:bf:56:df:03:68:5b:b2:a7:8e:c3:
                    38:11:b0:9f:ca:3e:40:30:c9:f8:e4:2a:a0:aa:84:
                    19:60:c7:f7:7f:5d:10:1a:0f:bd:e3:74:bb:b9:eb:
                    f3:5f:8c:4d:0b:ef:ca:d5:f6:d9:e0:3b:03:95:ef:
                    50:bb:6c:9b:e9:4f:c9:e8:21:31:a0:58:08:9b:45:
                    31:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A3:1F:57:D9:CD:40:FC:2F:92:1F:5B:88:02:03:22:82:B2:D6:5D
            X509v3 Authority Key Identifier:
                keyid:2B:81:C7:53:B7:76:65:E7:A5:9F:8E:50:83:14:F1:59:35:6C:22:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:70:ea:a5:df:a9:e3:b1:be:4d:42:00:10:c8:06:24:77:37:
         5e:90:4e:14:e9:69:8a:03:8a:a0:0f:9c:b5:0b:65:40:dc:60:
         46:e5:05:b9:30:09:bb:40:08:75:7f:42:5a:d6:67:a4:f0:a8:
         21:38:2d:26:21:60:fa:52:0c:95:55:a0:3f:c1:43:25:88:4c:
         06:85:5d:94:90:66:fa:28:9d:09:5d:71:00:8f:a9:7c:8c:74:
         5c:58:de:58:6b:a1:d7:4d:bf:97:6f:45:ca:a0:43:80:58:86:
         93:c0:89:e5:8e:0e:11:90:61:ba:84:39:5d:fc:7a:d0:ba:0d:
         13:f8:75:70:0e:9b:c1:27:be:c0:d2:0f:b1:d1:00:5f:62:f6:
         1d:0e:4e:67:51:09:b3:cf:5c:06:2b:55:16:d9:60:97:62:1b:
         fe:59:31:f7:ad:d7:15:c3:60:09:f6:30:77:73:4e:18:0f:dc:
         d8:8c:13:89:06:50:27:dd:67:e7:71:36:23:65:12:63:67:47:
         cb:f4:c2:67:30:c7:93:d0:70:7a:b7:8b:1f:47:fd:b0:28:7d:
         e8:86:a5:41:2f:f0:cb:61:04:88:c0:da:6f:c2:5b:aa:da:8a:
         f1:a8:4c:7a:47:0e:b0:32:81:45:2b:4e:46:11:7e:f5:c8:64:
         23:c2:6d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:57:57 2025 by rpki-client