Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
File:                     u4K408Gw94w6GfYWTrKCHiMM_k4.mft (raw, json)
Hash identifier:          scFG2Jbx8Cfg/Yl94p1ssZD+TWAx1iLa3fTf19KNNW0=
Subject key identifier:   72:8E:DF:92:FC:33:ED:A9:02:F9:20:88:DC:EC:57:FF:4D:87:9A:08
Authority key identifier: BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
Certificate issuer:       /CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Certificate serial:       0196790D3675B51FAD230FF8CDA8DADDC95B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
Manifest number:          0F0A
Signing time:             Sun 27 Apr 2025 21:00:31 +0000
Manifest this update:     Sun 27 Apr 2025 21:00:31 +0000
Manifest next update:     Mon 28 Apr 2025 21:00:31 +0000
Files and hashes:         1: sZvwZMkTNt-iUTiQmQ2RW61JCrY.roa (hash: ILtUTNlj+OmXDu1giFXN+JTJafdCM0FAh4hCT6vGfZc=)
                          2: u4K408Gw94w6GfYWTrKCHiMM_k4.crl (hash: vcXGI+O72mO0ic18POCKXDmHesuuGYxmVowWklsOCTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 21:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:0d:36:75:b5:1f:ad:23:0f:f8:cd:a8:da:dd:c9:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
        Validity
            Not Before: Apr 27 21:00:31 2025 GMT
            Not After : Apr 28 21:00:31 2025 GMT
        Subject: CN=728edf92fc33eda902f92088dcec57ff4d879a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1a:56:3c:36:97:9b:de:e5:41:5d:04:6f:24:
                    05:60:6e:23:ca:10:a8:d2:02:0e:bb:3a:29:25:85:
                    b2:91:85:6f:a0:06:a4:7a:f8:2a:6f:db:2f:38:7a:
                    5d:15:ba:cc:44:c2:44:76:a1:15:c6:a9:2c:96:3f:
                    37:0b:6f:36:31:33:07:b6:bb:14:63:ec:5b:c4:b7:
                    d0:1f:c9:bb:55:59:31:15:c8:fc:7d:90:5c:1e:80:
                    2d:7f:7b:51:c9:ab:b2:c9:92:37:09:63:b4:d2:ff:
                    3c:e6:0d:76:8e:23:21:df:1e:0f:97:a5:01:81:bc:
                    3a:59:2e:9e:c1:a2:97:69:f2:93:15:5e:c3:61:3c:
                    5c:ca:a1:d0:68:81:13:3b:35:3c:9e:11:ad:ed:21:
                    39:6b:db:e0:ae:83:cb:74:93:d3:d6:ae:4c:a7:25:
                    bf:f9:17:84:91:01:e5:05:36:30:f2:5e:5f:51:99:
                    96:ef:2b:4a:b9:5f:da:12:bd:4f:12:b7:7e:7f:25:
                    8b:02:43:93:9e:94:0f:01:9e:84:3a:d8:87:a5:6c:
                    69:93:b4:0e:88:63:b8:43:a1:0e:5c:97:3a:af:54:
                    61:6d:f6:56:65:f5:52:7c:7f:79:64:8f:10:95:a9:
                    28:92:56:a1:ec:e3:6e:37:50:30:c3:6f:58:c1:5d:
                    ee:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8E:DF:92:FC:33:ED:A9:02:F9:20:88:DC:EC:57:FF:4D:87:9A:08
            X509v3 Authority Key Identifier:
                keyid:BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ea:b0:1e:87:95:4f:32:ce:14:a5:65:40:6f:06:12:bc:c0:
         9d:79:88:af:77:8a:43:8e:c8:bd:12:28:4a:ab:2c:79:60:ca:
         ba:19:7b:47:63:e5:1b:37:05:d6:7a:0f:d6:08:41:71:7e:18:
         a3:0d:e1:1b:b9:22:b7:b5:9c:1d:80:88:bd:ea:c4:1a:8b:18:
         e5:25:f8:d5:c1:45:e6:1a:d3:b8:ec:0d:67:e0:07:a7:af:be:
         cd:21:bf:fb:fc:07:54:e6:df:8e:99:ab:86:b0:eb:f3:76:41:
         84:8d:61:66:60:a7:b0:f7:fd:ba:68:e4:1b:4d:4a:31:6e:49:
         3c:e0:18:4b:1a:a9:fa:12:4b:66:bb:a1:b7:30:5d:78:ab:4b:
         68:7c:0d:f9:63:97:ed:6c:b6:7e:b5:53:46:32:d9:aa:07:2a:
         4f:d6:dd:dc:76:71:c3:99:63:31:d5:98:9f:58:5e:34:91:20:
         9f:ba:fa:72:7e:4a:d2:8e:01:6d:e5:3f:45:e9:44:90:43:98:
         4d:fc:3f:9f:c9:e0:6b:21:c8:b8:40:7b:d8:5f:48:5c:6c:38:
         5e:0a:64:08:95:13:3b:6d:53:1d:92:d0:21:ef:6d:22:be:4c:
         20:2c:66:29:a6:a4:be:63:40:61:6a:a1:25:cb:02:3d:82:2e:
         34:30:2f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:27:20 2025 by rpki-client