Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
File:                     sL_SyF5redRg5mDPlmTe5V3MyMw.mft (raw, json)
Hash identifier:          +alsbHUkUABWsAfeAG0BeI6uRro7o1tGXQ+T6DARSlE=
Subject key identifier:   AF:DB:B4:A8:88:18:21:E8:0F:E8:C6:5A:5D:CB:A9:01:34:0F:42:DF
Authority key identifier: B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
Certificate issuer:       /CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Certificate serial:       01967266208BB21DBBFBDF57C2DF1FCA7152
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
Manifest number:          0DE4
Signing time:             Sat 26 Apr 2025 14:00:17 +0000
Manifest this update:     Sat 26 Apr 2025 14:00:17 +0000
Manifest next update:     Sun 27 Apr 2025 14:00:17 +0000
Files and hashes:         1: eFmnxR7CyMxvye5-XXcMbfaAVOw.roa (hash: pZJwNCYo3S0mBXNLEIKEUXn/lY7t5TEifbuRPldd2yI=)
                          2: oJDEzXr7gr-7eZ1rexTjd4c8Ul8.roa (hash: xZTw5KYNf4Du9zIJjL5q6os9uQVggXiruo8qaJQJCvQ=)
                          3: pGZsGJVmFoYhAv5VAkXf67JcN-w.roa (hash: /j9DfbiG7O3qG1GtbIDXzJ4rJWqS+jSuNHHJIbaeKpc=)
                          4: sL_SyF5redRg5mDPlmTe5V3MyMw.crl (hash: iRd/LYSaXRPm0DlnszU6eWgA2KHv0PHIyh3Oiw96DmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:66:20:8b:b2:1d:bb:fb:df:57:c2:df:1f:ca:71:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
        Validity
            Not Before: Apr 26 14:00:17 2025 GMT
            Not After : Apr 27 14:00:17 2025 GMT
        Subject: CN=afdbb4a8881821e80fe8c65a5dcba901340f42df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a4:81:49:46:a8:03:9b:a8:3c:d0:75:9f:d6:
                    fd:b5:c9:ea:7a:8c:8b:f9:01:ef:60:f2:bb:ba:85:
                    15:ec:e0:1d:28:d3:d4:e6:e4:26:2b:1b:d6:e0:3a:
                    51:1c:b6:62:2a:46:85:71:b5:8b:cc:da:33:12:81:
                    40:a3:7b:74:2b:41:8f:45:37:55:99:61:9e:06:63:
                    b5:d3:da:fc:7d:34:95:27:9c:0d:dc:e3:15:39:8b:
                    53:fa:b3:84:ca:16:36:17:f1:c6:a9:0c:9f:4c:fc:
                    09:67:fb:60:fe:62:32:0f:11:2c:f0:c2:12:80:66:
                    78:2f:05:00:27:cd:34:16:4d:08:57:5f:de:e3:4f:
                    da:7b:ac:51:49:18:0e:08:ae:46:1d:f9:0b:61:d2:
                    5e:e6:26:83:43:6c:44:28:c4:f9:bb:48:00:79:9b:
                    d5:e9:25:2a:e8:c2:a4:e9:05:df:0f:60:77:b5:4a:
                    6e:bf:57:61:2d:de:6c:a1:9e:47:32:13:56:48:04:
                    bb:25:cf:f0:cd:54:36:af:bc:88:64:bf:51:fc:dc:
                    2e:3b:e1:c5:0c:c9:12:7e:56:2d:93:41:62:9d:3d:
                    c8:55:6b:0f:65:f7:4e:8e:c3:7b:27:67:16:38:fd:
                    fa:52:0c:c0:52:e2:73:1c:91:f2:02:19:39:f3:8d:
                    60:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DB:B4:A8:88:18:21:E8:0F:E8:C6:5A:5D:CB:A9:01:34:0F:42:DF
            X509v3 Authority Key Identifier:
                keyid:B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:94:c8:e6:fa:4b:40:44:ac:c5:21:a9:32:22:f0:d4:8c:97:
         52:e7:06:de:4d:45:81:51:16:ff:c9:4f:38:22:8d:f6:31:40:
         c9:0f:ea:37:ab:a1:15:61:56:38:49:97:be:6e:04:66:0f:61:
         a6:81:5e:10:3c:f9:5d:e0:d3:2d:34:89:8f:11:4b:97:7e:1a:
         29:0d:4b:4f:67:97:92:44:bc:c7:e0:7f:ba:49:3c:b9:84:af:
         9c:7c:02:f8:9c:d7:df:db:df:d7:de:81:c4:9f:0f:76:eb:91:
         27:c4:03:61:08:d6:d1:26:27:08:17:20:c2:9a:95:b0:a2:1d:
         83:11:3a:a7:2c:e3:d5:c4:ab:f4:22:81:0e:88:f8:cf:17:4c:
         2a:69:42:01:99:28:d2:96:39:f5:62:d2:9e:d5:99:a3:98:5a:
         3b:14:4b:53:e1:56:35:16:9d:9a:5a:8b:1f:21:38:c1:9d:6a:
         54:57:0f:41:05:9b:b1:9d:0a:7c:c0:59:f6:a5:6f:37:40:e1:
         3e:27:6f:bc:b7:da:e2:f7:a6:ba:e6:da:a8:1b:29:2b:7c:44:
         ad:f8:e9:f2:3b:61:ab:fa:36:4e:64:fd:2f:72:7b:d2:07:c0:
         c0:ef:22:5d:c1:c2:5e:bb:5f:53:8e:17:ff:93:e2:4d:93:20:
         05:c5:16:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:03:41 2025 by rpki-client