Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
File:                     RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft (raw, json)
Hash identifier:          4YJA1oZJSVrGsSPOwRIJ0j4RORrWEhOG5pVEQmk/aZA=
Subject key identifier:   C8:35:FA:EC:21:14:C2:98:4C:83:EE:E4:DD:93:78:59:00:A2:C6:66
Authority key identifier: 45:8B:67:59:C1:A0:CF:5A:D8:2D:A5:C3:93:BC:D0:FF:F7:C7:E2:F0
Certificate issuer:       /CN=458b6759c1a0cf5ad82da5c393bcd0fff7c7e2f0
Certificate serial:       01969183E41CEBAAD495137ED556646541B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
Manifest number:          0C4F
Signing time:             Fri 02 May 2025 15:01:01 +0000
Manifest this update:     Fri 02 May 2025 15:01:01 +0000
Manifest next update:     Sat 03 May 2025 15:01:01 +0000
Files and hashes:         1: RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl (hash: Jmz8yyMxkiGqsnkw8DTIYSE32zeFa+V3LAAefa2pCHo=)
                          2: UQFRRC8sXbk0r4Q6fEr2IYKv7N4.roa (hash: 7PfHdaN/WSlX46HPIjWpG4hQQPCzHjIU2IYqvwhWpeo=)
                          3: mycUbYI1PYCeJUOytd7OByddKj4.roa (hash: PDtk9wU6hfm72jtlMfw1RCeJrC6rGpFRRw/nfzu+rDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:91:83:e4:1c:eb:aa:d4:95:13:7e:d5:56:64:65:41:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458b6759c1a0cf5ad82da5c393bcd0fff7c7e2f0
        Validity
            Not Before: May  2 15:01:01 2025 GMT
            Not After : May  3 15:01:01 2025 GMT
        Subject: CN=c835faec2114c2984c83eee4dd93785900a2c666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6c:99:df:55:8b:f3:ed:b6:be:8e:37:1c:d7:
                    f4:db:c5:bb:9b:bc:9c:b7:16:f1:06:cc:ad:94:4f:
                    95:35:a8:88:be:f4:a3:0e:1c:ed:3d:5b:b9:f2:48:
                    05:e7:54:93:ca:14:3a:5f:c5:f9:d5:02:dd:47:f5:
                    4b:9f:27:e2:c6:8a:82:18:2e:00:4e:1b:73:c8:10:
                    0a:13:bc:f9:01:6b:41:bc:93:a3:82:28:7a:51:98:
                    61:79:2f:7f:39:7b:4a:75:88:aa:8d:bf:e1:8b:2f:
                    0e:d6:91:c6:be:a6:4a:a3:f6:98:96:e5:3a:f5:4c:
                    54:cf:5b:2f:1a:48:6f:09:21:71:4f:b9:f4:c3:52:
                    c0:89:17:2f:e3:24:26:3c:6c:c3:2c:07:bc:2d:3a:
                    cb:25:8a:50:8a:3d:b0:24:ac:01:57:bf:8b:de:df:
                    a8:48:81:30:3e:ed:9e:53:1b:c0:a6:74:66:24:8c:
                    79:9c:29:10:b1:5f:ff:27:27:de:95:e1:fd:9c:45:
                    7b:0e:85:cc:9c:89:01:ae:ba:70:ef:50:d4:2c:8e:
                    e4:78:dd:d5:98:2e:96:51:63:8c:10:12:fc:b1:32:
                    f0:de:0d:45:62:6d:88:a7:dd:ce:16:35:14:b6:43:
                    a6:e0:d2:87:a0:ef:41:df:16:b3:bf:30:08:3b:3d:
                    c1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:35:FA:EC:21:14:C2:98:4C:83:EE:E4:DD:93:78:59:00:A2:C6:66
            X509v3 Authority Key Identifier:
                keyid:45:8B:67:59:C1:A0:CF:5A:D8:2D:A5:C3:93:BC:D0:FF:F7:C7:E2:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:17:a2:a5:36:fd:10:1a:b2:8b:04:22:48:ac:a4:81:e8:7b:
         b6:cc:98:9f:d9:7e:51:f2:74:16:fb:37:92:92:19:c6:6a:f0:
         a1:30:0c:30:af:0f:8f:03:12:1b:26:3f:33:75:23:22:cb:69:
         fe:29:71:c4:6e:d5:66:cf:22:19:35:96:1a:9e:14:2a:8e:fd:
         a6:76:88:65:e3:9d:21:3b:02:0f:fc:2e:70:ec:ed:54:55:56:
         93:4c:6b:ed:18:74:a8:6c:30:dd:15:ad:9a:72:28:62:dc:f7:
         0e:5c:21:37:9e:dc:84:c4:4b:ab:3b:c9:37:56:e4:e4:d1:cf:
         ee:88:43:aa:f0:99:50:3a:8d:9e:fa:ff:03:ef:e3:6d:f5:9e:
         9c:e0:15:0f:73:fe:55:59:60:39:cb:49:8d:00:5c:ee:a9:7b:
         26:83:13:06:00:6b:48:b0:60:1a:52:26:e5:a0:20:67:ff:00:
         12:53:80:1a:2c:3f:0c:43:e7:50:a0:8a:27:82:cb:5d:c2:41:
         5b:05:3a:f6:58:e3:87:c4:e9:67:02:1b:51:d2:53:30:9e:f1:
         a0:6c:de:da:a1:8c:39:89:a7:ec:e1:4a:08:3d:f4:cf:44:c6:
         aa:33:db:bd:2d:f2:9a:86:2a:1e:8a:39:11:8f:47:4c:41:db:
         82:70:df:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:17:48 2025 by rpki-client