Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
File:                     4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft (raw, json)
Hash identifier:          OvSUL0avl+kuzOYAqxXd2geSEbDzr7hq8JZZbQkv/vk=
Subject key identifier:   8E:9A:E6:BB:4D:D1:09:DC:26:D8:A3:70:09:A2:7F:D6:0C:15:0E:F4
Authority key identifier: E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6
Certificate issuer:       /CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
Certificate serial:       01967679D94E2E271A8202276B5A661F48D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
Manifest number:          0BCB
Signing time:             Sun 27 Apr 2025 09:00:18 +0000
Manifest this update:     Sun 27 Apr 2025 09:00:18 +0000
Manifest next update:     Mon 28 Apr 2025 09:00:18 +0000
Files and hashes:         1: 4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl (hash: blKWW73T5EPigllTRlBvl9cp/i4zRLdKxe2o98/B9d0=)
                          2: Q8-T8rHgFoT7CVxsMFqUQCc8JdY.roa (hash: RshmXbtDnZ3rOqJWlQSI0/TW/t+laA0v6rWUW/sLLhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:79:d9:4e:2e:27:1a:82:02:27:6b:5a:66:1f:48:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
        Validity
            Not Before: Apr 27 09:00:18 2025 GMT
            Not After : Apr 28 09:00:18 2025 GMT
        Subject: CN=8e9ae6bb4dd109dc26d8a37009a27fd60c150ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:36:c5:80:23:d3:1e:c2:f1:13:cf:ec:69:94:
                    16:b6:2c:e7:82:42:ac:91:98:19:84:ea:9c:c9:49:
                    1f:76:0d:19:fe:94:f4:da:33:a9:57:83:d8:41:c4:
                    8b:5e:df:df:da:74:73:76:be:2f:8a:67:be:d2:6f:
                    fa:b1:23:f5:c9:73:42:80:7b:47:1f:a5:c8:5b:dc:
                    ef:75:c4:67:c3:87:02:48:7f:98:07:5d:9e:41:d4:
                    98:7b:c5:9d:de:d3:5e:0d:35:c6:90:33:f6:12:89:
                    04:49:99:c6:60:31:ee:b5:a3:6c:2c:f0:d0:6e:19:
                    6b:14:3c:43:94:a5:7c:36:00:28:45:57:ee:62:12:
                    bd:93:c2:98:12:46:b3:09:03:6b:75:47:70:5c:fc:
                    18:06:af:af:71:2c:ba:4d:42:ef:58:92:c9:cd:42:
                    ab:f0:51:71:36:8e:65:8f:fe:c0:31:cf:37:fc:7d:
                    ae:f9:73:08:5a:42:f7:72:dc:7d:19:8e:f3:42:c1:
                    66:06:94:2b:dd:66:9e:64:b8:4d:97:8b:53:d0:40:
                    ed:1a:70:f3:ff:9b:0c:44:a9:1c:2e:9d:2b:f4:34:
                    d6:c5:3f:d2:b8:47:57:59:cb:10:5a:a6:dc:2c:4b:
                    b0:a7:59:2c:80:d4:e0:a3:ea:eb:6f:23:9c:23:bf:
                    79:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9A:E6:BB:4D:D1:09:DC:26:D8:A3:70:09:A2:7F:D6:0C:15:0E:F4
            X509v3 Authority Key Identifier:
                keyid:E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:5d:5d:9d:a6:cc:f2:28:81:61:b5:27:c3:d8:16:98:a7:ba:
         ba:42:01:72:02:82:09:56:e3:8c:ba:64:76:6f:67:57:28:bd:
         e9:dd:60:d8:56:b1:fe:cc:92:7b:19:84:5f:f8:48:a2:61:65:
         9a:af:f8:2a:f1:06:36:0a:72:fe:d4:d3:b5:6f:3f:19:d6:28:
         18:ef:61:27:b3:28:1d:ce:2a:06:97:e4:6b:4d:70:11:66:ba:
         ae:a5:9e:4a:5b:95:9b:40:28:34:73:fd:79:86:5a:d3:43:5b:
         f6:28:7e:a0:0e:8b:db:54:68:54:08:cc:00:3b:22:0f:b7:c9:
         bc:31:85:43:91:82:33:39:04:bd:5f:17:52:31:ed:7f:c3:00:
         6a:6a:49:87:52:0a:2b:c9:34:65:39:54:e7:50:f7:47:d7:cb:
         b5:f3:7a:76:c2:a7:9e:60:6e:36:4d:9e:56:69:93:ef:ca:fa:
         85:74:16:18:9c:b3:e0:c8:c8:94:55:74:12:01:6a:ac:1c:13:
         ba:c2:b4:46:fd:a9:88:79:e7:64:44:9c:bf:e4:87:26:6b:54:
         a4:2e:af:b4:fc:f9:69:23:d8:e9:3d:2c:c4:47:30:10:fd:cd:
         32:b3:af:17:34:dc:85:bb:3d:3f:26:41:99:af:e3:9c:ef:f9:
         4f:85:29:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:39:03 2025 by rpki-client