Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
File:                     D1T54Kep6u6svFsQMQI1t_0O7QM.mft (raw, json)
Hash identifier:          T+1zvmEKXQrAlVN+m0s05+qSl1skY9/YO3XbvCtwot4=
Subject key identifier:   D0:14:BE:08:49:4D:06:25:D6:D2:30:B3:AC:EF:E5:09:77:15:18:65
Authority key identifier: 0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
Certificate issuer:       /CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Certificate serial:       0196797B145E0A4EAA09FBC450A27CE7899E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
Manifest number:          110D
Signing time:             Sun 27 Apr 2025 23:00:31 +0000
Manifest this update:     Sun 27 Apr 2025 23:00:31 +0000
Manifest next update:     Mon 28 Apr 2025 23:00:31 +0000
Files and hashes:         1: D1T54Kep6u6svFsQMQI1t_0O7QM.crl (hash: Vgt1IdIvtgjkuFSAO65M+8jLmVtk1ChALto1/8ZF13I=)
                          2: n_c4PLsmjJy0yCliC8En4sc8wCw.roa (hash: cMBCvEWECFAcwZYZaTXi+y0wWCPFximX6N1nRpp3vNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:7b:14:5e:0a:4e:aa:09:fb:c4:50:a2:7c:e7:89:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
        Validity
            Not Before: Apr 27 23:00:31 2025 GMT
            Not After : Apr 28 23:00:31 2025 GMT
        Subject: CN=d014be08494d0625d6d230b3acefe50977151865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3d:4d:cb:8b:fa:90:63:28:19:75:82:4b:4f:
                    f2:07:7f:70:c8:4e:ae:3c:0f:16:61:9e:8f:32:63:
                    9b:be:16:8a:ef:05:3a:d3:d2:28:6e:c0:12:cf:73:
                    2f:7d:b7:37:81:a2:a9:e1:43:6c:2b:4c:32:be:1b:
                    86:2f:cc:a1:1f:a4:8d:38:ce:6c:51:3d:4a:43:09:
                    16:1f:1c:f1:75:de:fb:25:88:2c:86:32:9b:66:d6:
                    73:29:6f:30:54:a4:81:e8:25:70:13:e3:60:6f:45:
                    b0:02:20:72:a2:c6:f0:f2:6b:e2:aa:bd:39:d7:c6:
                    cd:fd:8c:00:c7:bb:f4:8b:86:4b:b8:ac:e8:78:8e:
                    7e:6c:6e:94:a2:e9:94:2b:02:21:d6:4f:d3:27:3a:
                    f3:c3:4d:ca:a5:1c:ab:59:c4:20:56:eb:46:c4:da:
                    6a:90:6b:57:73:26:4c:74:b4:51:f3:14:ce:95:24:
                    b2:0b:61:c6:45:fc:e1:0d:9e:c3:e4:45:78:5b:53:
                    0d:a3:c9:e2:31:db:e3:2b:8a:e4:c8:f9:b5:73:26:
                    73:5d:ec:5d:ba:11:db:94:cd:d3:8c:80:f0:b5:9e:
                    0b:45:1d:2e:e5:3a:f4:28:5a:88:a0:3c:ec:6d:6b:
                    c1:75:e2:de:c2:fc:47:3b:fe:21:66:47:55:25:bb:
                    a9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:14:BE:08:49:4D:06:25:D6:D2:30:B3:AC:EF:E5:09:77:15:18:65
            X509v3 Authority Key Identifier:
                keyid:0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:a3:0a:5f:a0:b9:4c:5a:5c:ca:39:b6:94:1c:35:af:e7:5b:
         26:ed:af:9b:1a:6d:fb:b2:c1:47:de:91:9f:c0:79:5c:9b:a8:
         33:d4:61:8c:6b:89:0c:3c:fe:6d:0a:a7:ad:a9:33:b2:53:22:
         fc:3a:34:bf:a0:0c:f8:5b:1e:39:37:af:0e:82:2e:6f:b1:ed:
         d4:c2:44:5d:e6:79:34:01:ad:3e:ac:7c:07:cd:a1:60:0c:28:
         b5:d8:1e:c4:08:68:9b:5e:9c:90:3c:55:ac:ef:79:a6:be:31:
         6a:d4:01:d0:4d:b3:a0:8b:79:fd:5a:7f:83:1b:66:b1:9d:1b:
         95:7d:43:8f:75:55:4b:af:87:b2:2f:a9:a8:19:f6:40:4f:cc:
         9f:1c:ca:a4:27:24:91:54:ab:21:01:0f:b9:0d:36:16:ef:04:
         42:4d:b8:94:c7:62:07:8f:e4:08:52:65:4d:c5:66:bf:e5:b4:
         99:68:64:5a:84:f8:45:6e:0c:e4:f9:7c:2d:ae:dc:f2:d1:8c:
         1e:98:7e:a5:f0:97:a6:98:a0:19:ca:bd:97:37:08:0d:bc:56:
         57:0c:ef:19:8a:76:a7:be:4e:de:b8:11:58:7f:10:40:1d:c1:
         d3:86:9f:c5:3f:3d:0c:59:eb:1f:a0:33:5b:d9:a2:22:f4:c4:
         1f:8f:c1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:30:30 2025 by rpki-client