Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
File:                     9WQDvByHTu8JuKE0QVWrw_BXWxU.mft (raw, json)
Hash identifier:          dEN82eYt1erAyHmVr3xfRdJCJFQ9whqP+EFWGbk9sjI=
Subject key identifier:   3D:80:E8:4D:4D:08:C8:7B:50:1D:D4:F4:38:D3:52:05:36:8F:FB:36
Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
Certificate issuer:       /CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Certificate serial:       01968C93EEC22EF22AFE1BD294A221EA5089
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
Manifest number:          0E8F
Signing time:             Thu 01 May 2025 16:00:27 +0000
Manifest this update:     Thu 01 May 2025 16:00:27 +0000
Manifest next update:     Fri 02 May 2025 16:00:27 +0000
Files and hashes:         1: 9WQDvByHTu8JuKE0QVWrw_BXWxU.crl (hash: I7iY8tKRjVfD6XJbBPXYj9ZCSrSB/nfNPJwckcIqAqc=)
                          2: UpxBSWugieKNTh9apeAkjKNDuVI.roa (hash: bk8A6HGGurxjqbD4+xEVgCvr+MLGdlWXb+9IzJcqkAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8c:93:ee:c2:2e:f2:2a:fe:1b:d2:94:a2:21:ea:50:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15
        Validity
            Not Before: May  1 16:00:27 2025 GMT
            Not After : May  2 16:00:27 2025 GMT
        Subject: CN=3d80e84d4d08c87b501dd4f438d35205368ffb36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:02:be:e2:f6:db:f7:e5:0b:ab:ff:c8:55:fb:
                    bb:ec:c2:92:92:ea:de:48:d3:cd:fb:ad:02:c7:fa:
                    55:79:80:81:f9:44:63:19:04:bd:54:b7:a0:53:7a:
                    51:34:7a:40:81:dc:31:d0:0d:95:2c:e0:2b:70:59:
                    87:5e:98:64:64:b8:ea:9f:5e:fe:16:a3:dc:28:e5:
                    c1:57:5a:c5:d8:a2:40:1c:ba:5c:5a:c9:b4:6f:65:
                    96:6f:21:5b:10:ac:95:91:6f:b3:68:3f:8f:71:64:
                    98:36:e8:b1:42:50:3b:e4:bf:8d:0c:49:28:2d:0a:
                    8c:8e:da:28:db:55:ab:41:30:96:f8:25:f6:5c:be:
                    bb:2c:21:c5:0e:c2:2f:e1:89:91:07:36:ea:3a:ae:
                    00:05:66:18:51:86:c4:85:3b:b2:d6:cb:6b:fa:ca:
                    2b:2e:a9:94:e8:af:00:83:b5:62:46:ba:a0:a4:b8:
                    96:c8:8a:c9:a1:3d:2c:53:fa:07:b7:42:86:b2:e4:
                    29:90:1f:8f:dc:0e:61:4c:64:9a:fb:62:6d:e8:64:
                    a8:42:09:32:68:06:6c:cb:49:0c:03:7c:b5:47:90:
                    c6:5c:02:57:d9:d4:d9:6f:1f:ec:1f:d0:9c:1a:b4:
                    af:e9:1b:ce:c3:ff:46:2c:61:a3:4d:c6:c3:5e:24:
                    b3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:80:E8:4D:4D:08:C8:7B:50:1D:D4:F4:38:D3:52:05:36:8F:FB:36
            X509v3 Authority Key Identifier:
                keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ec:69:fb:54:e8:38:5d:2b:c0:cc:51:e9:f6:b4:d0:e7:c7:
         33:b1:a5:f2:91:35:19:86:6c:ef:53:89:dd:1f:fe:47:0c:34:
         4f:61:be:ec:74:ec:d2:f4:24:82:0f:c1:9e:07:6c:ae:28:93:
         40:be:30:d4:23:02:f7:18:20:98:ee:d5:36:75:16:a1:b0:39:
         af:af:d2:ff:15:25:43:e0:85:d3:07:99:2c:f6:69:8b:1d:f9:
         02:02:92:13:51:6e:ca:2f:cd:62:f4:db:86:30:37:a2:00:8b:
         69:c3:54:11:1f:68:c5:a7:de:b7:62:78:5c:8e:4b:8b:39:96:
         a2:67:05:e6:7a:76:81:8f:26:2a:4e:7e:7b:d5:58:d3:75:5a:
         10:1d:3e:7b:24:f6:b1:96:26:f9:c9:70:25:5a:b1:3c:df:8d:
         96:ec:06:50:31:a9:5c:68:38:1e:ab:61:9a:63:9f:dd:0e:f1:
         98:00:e6:2d:1f:ce:c6:83:7f:8f:bc:06:ff:6d:d7:71:52:ae:
         2d:af:b6:09:8f:84:71:67:14:df:9e:40:7f:65:81:f2:c2:5c:
         53:e9:55:ee:e2:a1:8a:96:2d:9b:71:11:33:55:b3:31:c8:b2:
         78:9b:12:7e:59:36:ae:d4:f9:aa:9e:4e:48:01:ec:5b:0b:85:
         42:9a:27:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:33:30 2025 by rpki-client