Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
File:                     4YVsMIKrL8jdGzWaezmRNoU4tNA.mft (raw, json)
Hash identifier:          8csS1HoP8SVaZI2f0yXNe+dwit9oV6g8OIqjywSgS0w=
Subject key identifier:   8D:3C:EC:16:BD:F3:4A:1F:FA:EF:98:49:77:4D:C6:9B:FE:79:A0:B6
Authority key identifier: E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0
Certificate issuer:       /CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
Certificate serial:       0196797B94B9AB037B51566E482A5D06C137
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
Manifest number:          09A5
Signing time:             Sun 27 Apr 2025 23:01:04 +0000
Manifest this update:     Sun 27 Apr 2025 23:01:04 +0000
Manifest next update:     Mon 28 Apr 2025 23:01:04 +0000
Files and hashes:         1: 4YVsMIKrL8jdGzWaezmRNoU4tNA.crl (hash: T0kmOiX8AVjpaah3vMwz8yCEoOMCDj0Bt5hGkLmOM0o=)
                          2: DubK0ajew1E_RURQjQNCAhLGbkc.roa (hash: o2iba58UUQFPb0v5v5MuvKEyUlVzhsgsqL1rMivQOXg=)
                          3: Kq9oy1uLDEVjPK7uo7CtOBtF3Fs.roa (hash: +hOcbW8T2Du+uljugS3IXJD+qzn/X9C29PD+zWkfcl4=)
                          4: hn2vtXI_FxI2fK5snrvER2liYkI.roa (hash: h1TFBwFQDb6c/MRMsjXSVpwRX890l+6Op+4syOnaFGY=)
                          5: hzE5LvcG1hl--6wBh1ojQ7tfIYE.roa (hash: 87OEa14cIeRPup2IlbeWtF8BT8tzrS9k5/ocOLGWxJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:7b:94:b9:ab:03:7b:51:56:6e:48:2a:5d:06:c1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
        Validity
            Not Before: Apr 27 23:01:04 2025 GMT
            Not After : Apr 28 23:01:04 2025 GMT
        Subject: CN=8d3cec16bdf34a1ffaef9849774dc69bfe79a0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f7:e0:60:10:75:d9:93:d7:a9:c0:72:48:49:
                    04:01:ef:7e:45:49:c0:0a:52:cb:ac:b3:c5:d3:e8:
                    50:66:23:a6:9c:c4:c2:84:cd:fa:3e:10:d9:34:12:
                    cc:0c:b0:f3:f1:c5:53:6e:07:55:18:3b:9d:c3:45:
                    a5:d7:f8:c4:0f:3a:a5:a8:d8:48:5f:1b:f8:ff:a9:
                    41:06:ad:c8:f1:34:18:de:fa:23:e8:10:f1:c8:b4:
                    ab:e6:66:a5:64:e1:d5:09:3d:62:35:cf:9d:3e:8a:
                    5b:a7:4a:1c:52:cd:8a:7d:5f:03:46:02:60:f3:79:
                    4b:9f:0d:1b:07:32:0d:50:47:11:8e:26:6f:76:58:
                    a2:f6:53:8c:2f:04:f9:09:2d:ab:28:0e:48:cb:78:
                    c9:5d:78:b7:da:60:ee:11:ef:3a:9d:6a:12:11:8d:
                    1a:4f:d5:3e:b3:d9:98:31:cc:85:50:65:96:f7:f0:
                    e3:ee:02:04:f7:ed:d0:4d:52:8d:95:87:42:09:4b:
                    9d:bb:93:79:06:26:3a:9f:66:1a:62:06:7b:dd:62:
                    1e:43:46:9c:b0:1b:2a:3b:ca:05:c2:d0:fb:b2:31:
                    c6:63:4f:52:11:e9:fe:a4:d3:f7:76:0a:80:a6:5b:
                    fa:87:41:1e:cc:50:8d:d5:d9:31:56:2c:61:78:d0:
                    5b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3C:EC:16:BD:F3:4A:1F:FA:EF:98:49:77:4D:C6:9B:FE:79:A0:B6
            X509v3 Authority Key Identifier:
                keyid:E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:62:44:bd:44:b2:1e:eb:bc:86:e5:23:51:b9:5f:b9:70:fd:
         28:5e:c3:91:1f:43:23:93:e4:53:c5:be:62:32:57:df:52:f1:
         1d:13:3c:8a:b0:6e:dc:e4:0b:f7:e5:68:33:9e:a4:70:d3:9e:
         1d:20:c5:c7:ce:12:fa:cb:3f:6c:c5:10:2c:f1:91:a4:3c:ac:
         6f:df:ed:19:aa:b3:0e:4d:0d:95:2d:83:ed:d6:ff:b0:ad:93:
         46:f5:c6:11:01:12:3d:f3:55:8d:81:ea:55:3f:f1:ef:f5:d4:
         66:e1:72:88:e5:4a:7d:9d:7d:78:50:c0:25:f1:d7:7f:f3:56:
         fb:60:86:5c:66:b6:e0:74:45:d4:c3:a8:61:be:e3:3c:23:1d:
         bb:ae:01:4a:93:b0:45:66:29:a7:cc:62:67:a2:1f:99:e1:20:
         bf:c5:f9:c7:1a:a5:8a:b1:6a:bf:03:f6:fc:32:6c:0a:3c:7f:
         00:60:fd:b8:58:1b:0a:78:dd:47:f1:7a:02:41:8d:91:9e:fd:
         d0:bd:01:b1:b9:bf:df:34:3e:31:0c:2d:95:f8:d8:7b:2b:64:
         05:83:cf:d3:b8:7d:14:f5:bf:33:30:a4:92:6b:58:a2:40:25:
         b1:6f:0e:6a:3d:df:29:fa:d9:3d:bf:43:46:1a:67:5a:2f:a6:
         73:fe:97:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:22:56 2025 by rpki-client