Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
File:                     E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft (raw, json)
Hash identifier:          mW79ZDNUkyjm/DJwqqoprb4ncyt8sj6+iIMcQvK+fnc=
Subject key identifier:   C2:8B:57:EA:B3:5C:25:CE:41:A1:0A:87:D2:A0:56:76:06:2E:F4:8C
Authority key identifier: 13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
Certificate issuer:       /CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Certificate serial:       0196767A19A404DECC87B1256B4713DBA6D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
Manifest number:          0799
Signing time:             Sun 27 Apr 2025 09:00:35 +0000
Manifest this update:     Sun 27 Apr 2025 09:00:35 +0000
Manifest next update:     Mon 28 Apr 2025 09:00:35 +0000
Files and hashes:         1: E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl (hash: 7jB6ced/Zt8WB2JTD+bhy42J/Je7KAyonhFNiTEiAvU=)
                          2: JwyhTY3gBjH_DHx6X1gPB4EC1Hw.roa (hash: Y38jvMStrd7/OGI8zyUcvfpz5v5z/NCYXMUYLkJSmbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 09:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:7a:19:a4:04:de:cc:87:b1:25:6b:47:13:db:a6:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
        Validity
            Not Before: Apr 27 09:00:35 2025 GMT
            Not After : Apr 28 09:00:35 2025 GMT
        Subject: CN=c28b57eab35c25ce41a10a87d2a05676062ef48c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6e:34:b3:fc:f2:33:96:d7:57:3e:92:db:97:
                    4d:a4:77:3b:3a:11:f3:68:96:7c:e9:5e:25:2f:6f:
                    e2:65:2d:4f:37:0f:aa:7d:5d:39:05:37:4f:91:dc:
                    e6:a8:6b:d6:a2:45:d1:b2:48:9f:ea:74:24:9d:df:
                    06:fb:7f:ef:f3:d6:5d:17:26:f1:81:77:ae:97:84:
                    07:18:85:e1:3f:74:00:31:d1:0c:55:3d:4a:f0:9e:
                    0e:11:43:9d:3d:96:ff:0f:b8:c8:54:d7:c3:c0:91:
                    57:87:eb:b3:57:9e:cb:96:bd:fe:d7:8f:ae:97:d4:
                    71:e3:23:78:d7:93:2b:97:d3:f5:ba:e0:43:b8:a9:
                    8d:e1:f5:a3:44:2a:57:3b:2b:32:10:19:a5:4e:91:
                    6f:e8:30:ba:fa:11:65:89:2f:5d:ca:03:b0:ac:fe:
                    8f:bc:c6:f8:6a:ae:b4:78:16:4e:c9:0b:b0:fc:2c:
                    8d:df:c8:0b:6a:d4:38:92:af:41:9e:62:3e:9e:b2:
                    a2:88:83:28:a4:41:02:7b:b7:75:80:14:16:f1:0a:
                    eb:b4:ed:df:b9:af:79:eb:14:63:52:55:cb:e5:6c:
                    9b:9f:3b:28:59:34:cf:d9:5c:f5:b4:80:c7:02:56:
                    ab:e4:9b:1a:89:b5:68:f2:32:d3:5f:48:8a:90:35:
                    df:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8B:57:EA:B3:5C:25:CE:41:A1:0A:87:D2:A0:56:76:06:2E:F4:8C
            X509v3 Authority Key Identifier:
                keyid:13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:5e:9f:a5:9b:5d:d9:ec:0b:6e:57:8d:8a:7b:bc:ba:cb:e8:
         42:9f:93:c4:b6:39:e3:06:bb:63:8d:15:3e:c6:c7:24:a5:73:
         87:32:66:b9:fb:e4:73:10:66:2f:c6:41:27:f2:71:81:41:0e:
         c9:4a:b7:ce:de:f4:99:a0:99:b9:61:ba:91:16:13:76:f2:74:
         78:f2:01:24:5e:62:a9:a5:ae:81:8a:6e:bb:59:71:7f:59:e2:
         12:5d:a1:a7:76:39:4b:bd:61:57:77:0d:26:4a:08:78:4c:64:
         67:d5:27:79:32:b3:6f:6a:2d:62:7a:b8:30:7a:b7:84:59:8d:
         78:fe:c6:3b:33:f5:33:57:e9:71:d1:bf:50:d1:89:1f:9f:a4:
         09:93:76:2b:fa:48:39:7c:aa:f5:ea:f9:c6:46:09:05:7e:51:
         bb:3d:11:16:ba:2a:0e:14:87:7b:3f:77:57:7f:8c:5d:56:48:
         48:04:90:96:78:6b:88:e1:f2:24:85:78:4d:8f:bf:3d:1a:ed:
         b8:be:46:a6:e0:b3:c3:e1:b6:b1:60:90:ba:62:81:de:9e:b7:
         fd:9e:95:04:19:f9:c0:be:d1:3a:9d:56:41:2b:4c:6d:a3:6f:
         01:ff:f8:95:16:ef:b1:d3:3e:da:f4:74:a4:01:7b:7b:16:0c:
         b3:42:fa:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:31:50 2025 by rpki-client