Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
File:                     Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft (raw, json)
Hash identifier:          NdSi213QQDFacSuCdCjKvsdiEEhj+kj0mcdzghtNy2Q=
Subject key identifier:   31:02:F0:2D:2D:08:26:AF:7E:FD:A7:9C:DC:1F:7F:FF:BD:E5:01:EF
Authority key identifier: 45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3
Certificate issuer:       /CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3
Certificate serial:       019680FDBDF469CAFB99ED7E1095A73988BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
Manifest number:          0F98
Signing time:             Tue 29 Apr 2025 10:00:34 +0000
Manifest this update:     Tue 29 Apr 2025 10:00:34 +0000
Manifest next update:     Wed 30 Apr 2025 10:00:34 +0000
Files and hashes:         1: Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl (hash: +prBlvE7zFoHuO7kndedRaiM7mrjK0uy0XOThkaqGvk=)
                          2: o6lJ-qfhS9C09IpxbbRvCOiFoHM.roa (hash: s9YF0YMackzUIop5+kUK7Z2zh1o4IPsYyQyvrXKhSCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:fd:bd:f4:69:ca:fb:99:ed:7e:10:95:a7:39:88:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3
        Validity
            Not Before: Apr 29 10:00:34 2025 GMT
            Not After : Apr 30 10:00:34 2025 GMT
        Subject: CN=3102f02d2d0826af7efda79cdc1f7fffbde501ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f3:2b:08:33:77:f3:f0:5b:48:d9:9d:14:9a:
                    15:df:db:df:44:b7:8e:be:71:ce:c0:82:52:1b:3e:
                    2d:84:9e:f2:e2:15:64:3d:7b:50:65:07:f0:78:af:
                    07:5e:60:c1:1f:46:fd:12:39:fd:35:2a:39:f8:d7:
                    0e:44:0f:51:91:b4:2c:0d:28:41:ea:71:26:3d:20:
                    f7:5b:19:ba:5a:12:9b:ae:de:37:48:ee:35:63:70:
                    84:c5:81:0b:df:ab:2f:59:03:f6:82:b1:b3:d9:c3:
                    f0:31:1c:4c:03:ee:96:32:15:b3:1a:8d:2a:25:6a:
                    d1:6a:fb:65:19:18:72:3c:7f:d9:bd:69:ca:8b:29:
                    05:2f:03:1b:54:6d:ba:ba:4f:7d:7d:0f:4f:1f:b5:
                    ab:11:8b:c6:a3:a5:d1:46:5a:1c:9a:74:b2:0d:5f:
                    42:cd:48:1d:f0:9e:dc:19:48:9d:f4:39:ba:c4:54:
                    59:b9:09:2e:df:11:2e:46:62:f3:3f:d2:63:da:b0:
                    71:4e:c9:a4:64:87:97:79:46:61:0a:17:58:47:66:
                    73:b0:38:73:88:fa:5f:4b:58:e8:62:d8:46:b8:fb:
                    b8:9e:2a:b0:6f:da:44:a5:df:fd:7a:a8:c8:a6:b6:
                    fc:82:9a:c7:48:b9:8f:ab:fd:d3:76:d7:1f:2a:66:
                    3d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:02:F0:2D:2D:08:26:AF:7E:FD:A7:9C:DC:1F:7F:FF:BD:E5:01:EF
            X509v3 Authority Key Identifier:
                keyid:45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:9b:50:9f:bb:0a:02:77:f8:1e:8b:1a:6b:4e:fb:48:9b:d2:
         88:e0:7b:e9:15:a6:d2:21:b0:fb:d0:6d:de:45:23:1b:fa:b0:
         be:82:b7:56:af:be:aa:7d:20:cd:43:33:a8:75:26:1d:a0:34:
         75:64:d7:1e:ee:51:40:a5:77:e2:71:dc:69:70:74:56:49:d2:
         4b:d6:37:77:ff:8a:62:cf:58:b5:8a:72:0a:b8:e1:b1:b5:65:
         ae:02:5c:f4:bb:b5:a1:90:bf:56:d5:b8:f9:1d:35:01:5d:5d:
         9a:fa:12:0d:a7:d5:66:0d:49:85:fe:9a:c0:61:1c:2d:15:7e:
         bd:ff:9e:cd:f0:03:fb:44:86:9b:64:ee:d6:99:6c:5d:47:20:
         5d:4e:d7:68:20:ef:bb:c3:d9:98:6b:0f:42:c8:48:95:52:85:
         ea:18:b1:59:15:c5:f2:71:d0:ad:f2:b0:ac:e4:f6:76:76:f1:
         c6:2a:7c:12:91:8d:03:7b:9f:4c:a8:d1:27:ab:89:bc:87:38:
         85:f9:9d:fa:f7:6b:ac:fc:b1:33:b0:5e:c2:d3:05:da:70:96:
         af:bb:cb:9a:8b:ca:b5:79:91:67:c1:82:d3:fb:ce:25:74:2c:
         45:e8:ae:19:77:c2:af:38:a9:4c:6c:ca:15:64:77:a0:2c:cc:
         68:8d:64:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:36:41 2025 by rpki-client