Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
File:                     sk6li1pTLiisxhEf9VAnGuG83-g.mft (raw, json)
Hash identifier:          r9kE8lR38a5k/R6ue6fXNM0wRy2qONhUu721ub1mPIM=
Subject key identifier:   77:65:A5:A5:C2:CC:58:12:06:A6:F8:BD:A7:61:1B:61:4E:B4:C6:78
Authority key identifier: B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8
Certificate issuer:       /CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
Certificate serial:       019676B11876417548A870E51A91A5465950
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
Manifest number:          0D0E
Signing time:             Sun 27 Apr 2025 10:00:39 +0000
Manifest this update:     Sun 27 Apr 2025 10:00:39 +0000
Manifest next update:     Mon 28 Apr 2025 10:00:39 +0000
Files and hashes:         1: sk6li1pTLiisxhEf9VAnGuG83-g.crl (hash: wk9tlVn7LpQVGLDDC/9j9LvvuNKFFabdVtzMvPTXX3k=)
                          2: xNgMrW-QUWWY2eV_ScgSVrNm_7s.roa (hash: 5O/vB7qrsjL5gK9LO002w1dwYAOuKeR0/RqP64nnVao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:b1:18:76:41:75:48:a8:70:e5:1a:91:a5:46:59:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
        Validity
            Not Before: Apr 27 10:00:39 2025 GMT
            Not After : Apr 28 10:00:39 2025 GMT
        Subject: CN=7765a5a5c2cc581206a6f8bda7611b614eb4c678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:da:6a:8b:f2:ea:0d:7b:ae:7d:17:9c:80:02:
                    f7:fd:32:3c:cb:f8:ac:22:96:04:af:f8:b8:75:7f:
                    7a:92:ab:3c:ce:c0:3d:71:b7:32:69:05:28:73:fb:
                    af:7a:c9:59:20:68:f1:69:1e:f5:84:90:8e:26:3a:
                    45:d7:5f:6d:54:1e:76:ce:9a:8c:00:cf:06:b1:e8:
                    18:12:58:5f:af:1d:1b:e9:a4:6a:66:95:61:a0:6c:
                    26:13:cc:99:46:b5:28:c2:93:96:96:a2:85:43:b6:
                    c9:26:00:a2:5f:89:b8:26:24:4e:f2:9d:b4:63:7c:
                    a7:99:56:00:53:cb:65:c5:ab:e1:3a:8a:eb:3a:c2:
                    40:c6:35:44:57:ec:28:98:b2:ea:d0:69:8a:2b:25:
                    9b:bb:f4:8a:74:39:b5:85:b8:e6:94:8a:cb:be:a4:
                    94:6b:95:49:25:44:6e:09:38:c4:ea:43:e4:7f:39:
                    f3:2f:f7:ce:8c:ef:3a:d9:af:99:c0:5d:be:12:ba:
                    c0:eb:81:1c:95:dd:4f:d5:40:9a:bc:b6:50:28:eb:
                    73:30:c7:ac:e6:b1:79:37:8f:b0:a9:e8:53:8b:25:
                    7b:10:fa:76:c1:ac:a1:6a:b6:18:07:e6:ff:bd:fd:
                    2c:50:95:c6:da:07:10:21:cf:92:87:ff:2f:e1:29:
                    87:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:65:A5:A5:C2:CC:58:12:06:A6:F8:BD:A7:61:1B:61:4E:B4:C6:78
            X509v3 Authority Key Identifier:
                keyid:B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:25:96:06:9c:53:e2:ef:9a:4d:1c:94:8d:e6:cb:63:d1:bc:
         d9:36:9e:ef:15:5e:ec:e5:4d:2f:98:89:f5:1c:e0:bd:3e:37:
         a2:11:a7:a6:72:c9:18:af:fe:50:65:0a:0b:12:e9:c1:0d:f7:
         7c:aa:43:25:d8:ad:19:4e:ff:e0:e9:df:bf:01:30:50:a2:30:
         b2:0d:ad:d0:b7:07:ed:85:5f:39:ec:25:ec:3c:d2:0b:65:09:
         11:d1:f6:3a:01:74:bd:7f:c0:c6:d9:5a:f8:02:9e:26:3b:8e:
         09:42:6e:16:88:59:b4:69:bd:4b:e1:20:b0:9f:7a:53:88:79:
         08:8f:be:b6:49:0a:e2:8e:50:8c:8e:06:77:30:72:10:c1:44:
         a8:0f:f8:58:37:28:7d:f9:cb:c7:cc:12:9f:90:c5:6f:35:99:
         bf:77:90:93:89:e1:f4:d2:71:7e:28:85:d2:b4:e8:04:09:4e:
         56:87:eb:8c:95:e9:b3:4f:88:c2:f4:70:aa:32:af:09:68:cd:
         12:e3:ab:aa:ca:44:9f:3f:29:ef:6c:03:21:53:81:20:ca:6f:
         d9:a9:2b:2d:4a:6a:6c:db:3a:13:df:55:62:4d:a1:8d:c0:69:
         3d:d7:94:d7:9d:7a:62:20:98:85:90:2a:b3:ca:11:ea:0e:9d:
         59:4e:7c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:32:57 2025 by rpki-client