Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
File:                     e4f2uRGfqdzT4S5-a_twbf-XiCU.mft (raw, json)
Hash identifier:          +/7t86JfP1ybGrwfiU7ZyfrmhQxnv9ok+U8WA6HRAkE=
Subject key identifier:   9D:67:5C:A3:36:E4:7C:A7:84:8F:11:8C:58:80:33:A4:DE:24:C5:0B
Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
Certificate issuer:       /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Certificate serial:       019678D6767C87C301F5FC2D60A65F92CC2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
Manifest number:          0A73
Signing time:             Sun 27 Apr 2025 20:00:42 +0000
Manifest this update:     Sun 27 Apr 2025 20:00:42 +0000
Manifest next update:     Mon 28 Apr 2025 20:00:42 +0000
Files and hashes:         1: e4f2uRGfqdzT4S5-a_twbf-XiCU.crl (hash: 66hkAmBocAMuAunnkBhBLHBVXsmrqb5hEAGZB4nWx/Q=)
                          2: v_CowcE5Ck3oJvuqy3X8AsMCrpA.roa (hash: R72iTRb1FtOGatFwyC/tAu8uMgwI2562hZtdzD4n6xY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:d6:76:7c:87:c3:01:f5:fc:2d:60:a6:5f:92:cc:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
        Validity
            Not Before: Apr 27 20:00:42 2025 GMT
            Not After : Apr 28 20:00:42 2025 GMT
        Subject: CN=9d675ca336e47ca7848f118c588033a4de24c50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5f:df:06:5e:b2:42:97:d3:b2:bf:2e:8c:1c:
                    20:6a:08:1e:ea:8b:e6:57:2a:86:f4:b3:29:fc:23:
                    28:55:b5:f3:51:2f:96:16:87:5b:b3:1c:84:87:cb:
                    c5:46:93:c0:eb:f7:33:36:0c:31:d3:ad:df:76:a8:
                    92:b0:f0:66:e6:5f:88:bc:e1:64:59:f1:7d:0f:2e:
                    91:6d:0b:ce:b7:90:8f:fa:b6:00:20:47:1a:cc:30:
                    03:51:0f:00:c5:38:e0:83:f9:59:8a:10:7b:18:3e:
                    33:1c:e9:59:b4:d3:21:e5:30:b3:d5:b7:03:43:75:
                    85:71:b6:58:08:a3:dc:24:ad:5d:b3:cc:88:af:f3:
                    de:fe:67:67:da:d0:70:8b:c7:32:b7:6e:51:64:17:
                    79:f9:5e:92:bf:95:ec:f7:20:12:02:6f:2e:cd:ad:
                    48:ce:cf:0b:e3:47:7a:ee:39:0c:a7:c5:8a:fc:9a:
                    01:0b:45:2e:19:8b:60:8e:8c:ea:e0:ba:e0:ef:74:
                    f7:76:36:5b:06:9a:b7:10:79:4e:a7:49:34:5d:32:
                    be:b0:9d:6e:68:13:f3:df:d0:a0:37:68:ca:3e:a0:
                    82:72:ac:7d:55:c9:dc:5a:73:24:ff:72:c5:f5:88:
                    76:1c:f3:81:a4:2d:65:42:81:02:46:34:d6:bf:39:
                    f4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:67:5C:A3:36:E4:7C:A7:84:8F:11:8C:58:80:33:A4:DE:24:C5:0B
            X509v3 Authority Key Identifier:
                keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c4:3a:4d:3f:97:33:de:99:90:3f:d6:dc:37:41:ba:e9:4c:
         56:10:b2:2f:4d:17:e7:1f:b8:b7:da:7f:f4:b8:0f:fd:d5:54:
         e4:ad:63:9f:fa:12:35:6a:13:ec:f4:1f:11:47:b7:1b:ff:41:
         6c:67:ff:45:5f:5c:53:31:c7:86:8c:58:a2:c2:d8:3b:e7:96:
         6e:88:95:89:74:3a:cf:f8:1c:67:25:a3:38:86:6b:46:2b:83:
         c0:f9:eb:db:37:d5:1c:7b:39:b3:2d:a6:d7:f4:0d:37:72:18:
         9e:2d:33:65:a9:77:cf:f2:6f:7b:c8:6e:32:a4:08:2a:7d:8a:
         26:a2:5e:8f:03:95:86:da:a6:a5:71:08:a7:92:df:9e:79:88:
         8b:3b:2e:83:83:6d:8a:5a:43:7c:af:f1:e2:68:81:9f:be:06:
         56:0e:9a:bc:9a:26:2c:68:db:14:47:01:4a:9f:1e:96:38:5a:
         14:81:50:4b:3b:ac:48:55:95:d0:36:68:f4:7b:f7:94:4e:7d:
         ec:06:41:37:b0:f5:ca:72:4c:5b:b2:23:eb:32:02:81:06:b0:
         5a:6c:0d:52:ed:2b:7c:7d:20:fe:3d:d4:32:2e:1f:9e:62:f1:
         53:61:6d:3d:6c:e8:56:4c:fa:69:13:89:49:ac:7f:e9:33:72:
         b7:4b:b2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:20:24 2025 by rpki-client