Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
File:                     sVS0YRuM6ChydbxHppr6N4tBQL8.mft (raw, json)
Hash identifier:          pofS7wStgBnmEYfJvlIoPFQtMcH5NSHstKQqhHdxITc=
Subject key identifier:   18:A3:96:FD:2B:AC:75:37:F5:01:03:15:02:EF:C6:2E:22:4A:6B:64
Authority key identifier: B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF
Certificate issuer:       /CN=b154b4611b8ce8287275bc47a69afa378b4140bf
Certificate serial:       019676433E9291E1C26DE6E2C5406AC5460C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
Manifest number:          0191
Signing time:             Sun 27 Apr 2025 08:00:40 +0000
Manifest this update:     Sun 27 Apr 2025 08:00:40 +0000
Manifest next update:     Mon 28 Apr 2025 08:00:40 +0000
Files and hashes:         1: _cD4yVpG6lnwIeREBiUBwAEeAKA.roa (hash: jnUyAI5YI7WapRKSFkmTN6SUzj6iHT0vp3PMP0QrWlQ=)
                          2: sVS0YRuM6ChydbxHppr6N4tBQL8.crl (hash: 2JT4abV/Cy9JIBG8NGshyTpYh7N3enuIuqz1EwJMPxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:43:3e:92:91:e1:c2:6d:e6:e2:c5:40:6a:c5:46:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b154b4611b8ce8287275bc47a69afa378b4140bf
        Validity
            Not Before: Apr 27 08:00:40 2025 GMT
            Not After : Apr 28 08:00:40 2025 GMT
        Subject: CN=18a396fd2bac7537f501031502efc62e224a6b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dc:fa:3e:16:78:83:5b:e3:89:75:71:05:5f:
                    2b:60:63:4e:1e:d8:c3:3a:8c:95:1d:48:59:5f:5c:
                    1c:15:25:5a:16:b4:f1:ee:09:bb:97:8e:d1:08:1b:
                    54:f0:8d:df:1c:18:43:96:29:89:14:c6:d6:24:9f:
                    df:3d:11:b8:6b:6a:e9:f2:84:26:cb:9e:e6:d7:ab:
                    b2:0d:68:ee:52:e0:f5:1f:f4:ca:ea:c8:ce:76:ad:
                    af:0e:83:16:66:67:a1:36:2c:12:4d:86:4e:7a:d4:
                    45:07:1c:ef:f8:d3:1b:ea:c0:3d:69:18:c9:9e:12:
                    52:db:8b:1d:d2:c0:17:6d:0a:d1:02:74:93:81:b3:
                    62:e5:51:ce:5c:03:76:be:ae:a3:12:e9:4b:fd:4e:
                    29:58:42:73:35:ed:a1:13:7b:51:e8:da:46:44:36:
                    0d:df:c3:41:c6:15:39:0f:b0:36:f5:ff:89:86:06:
                    68:ce:81:a1:dc:5f:f1:93:f1:41:0d:0f:bc:7b:b8:
                    fc:a9:53:43:4b:5b:d7:92:01:e3:b5:6c:0b:7f:f8:
                    2b:bc:b9:84:cc:a1:0c:e6:c3:53:39:5b:22:32:af:
                    66:7b:11:33:5e:c0:fd:b4:b2:1c:86:e0:01:18:89:
                    74:6a:bd:20:04:d5:d4:3f:b3:13:ff:8c:be:66:da:
                    4e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A3:96:FD:2B:AC:75:37:F5:01:03:15:02:EF:C6:2E:22:4A:6B:64
            X509v3 Authority Key Identifier:
                keyid:B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:88:87:31:f9:c2:73:f7:f2:17:0f:dc:eb:ca:31:77:5d:ce:
         fe:0d:59:a0:ec:7d:7b:39:79:c5:e9:3c:d3:9b:84:c6:f3:a0:
         19:be:4f:a8:30:b4:87:d2:83:e7:51:1e:8c:bb:07:0a:71:f8:
         3d:13:db:6b:ee:d6:2d:d1:ed:fd:b2:97:b4:c5:3a:3f:4d:6f:
         d7:6e:c3:6a:bd:2a:40:e0:2e:d5:d7:64:35:03:e6:d9:3e:ed:
         ed:ec:2b:32:ca:c4:31:0b:fb:61:c7:c4:c2:09:d4:a0:51:28:
         41:9e:c4:58:13:f3:30:13:f9:4b:26:1a:09:c4:e4:2e:65:2d:
         35:2d:13:37:d7:3e:86:30:40:99:ca:40:ae:77:78:0c:3e:dc:
         4a:80:a2:c2:77:2a:da:bc:1f:91:26:d9:de:3c:79:ad:15:80:
         04:7a:f2:84:a7:12:52:00:49:e2:7a:05:17:9d:2c:01:8a:2d:
         09:48:96:aa:9d:7f:1e:ab:26:ed:64:03:17:4e:df:83:1c:bb:
         6d:c0:b7:d4:6a:66:eb:e8:d2:ae:cd:63:72:60:df:49:34:09:
         b4:d1:ce:1a:42:56:23:11:bd:c4:35:a1:5c:14:4a:1e:57:f7:
         c2:8b:de:be:ab:b9:11:93:ec:ac:cf:08:9e:39:2e:78:1d:01:
         f1:ef:ae:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:36:36 2025 by rpki-client