Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
File:                     818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft (raw, json)
Hash identifier:          jYj7fKzfKUBO9NWJiDBciOX7txIwaAMz6JlmauqWm5M=
Subject key identifier:   59:99:2D:31:C6:DD:74:EC:DE:E9:62:EB:E0:98:AF:82:B7:BE:36:CF
Authority key identifier: F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35
Certificate issuer:       /CN=f35f3f2ebf80c77669250a759be1e5c91e388435
Certificate serial:       01967B32EBDD691D05F2C3DF053B5D3DF646
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
Manifest number:          150F
Signing time:             Mon 28 Apr 2025 07:00:56 +0000
Manifest this update:     Mon 28 Apr 2025 07:00:56 +0000
Manifest next update:     Tue 29 Apr 2025 07:00:56 +0000
Files and hashes:         1: 818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl (hash: QPrQNfrPi8bdZu2DUZ6zwdKsTse3ggLHsImBscDgUis=)
                          2: POD0rcdBSvDIH2xQjNK7FTsBiSU.roa (hash: qqDcVkaCep5jyj7VmzlXWQJNTWjPppQG+dngjp5gRWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 07:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7b:32:eb:dd:69:1d:05:f2:c3:df:05:3b:5d:3d:f6:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f35f3f2ebf80c77669250a759be1e5c91e388435
        Validity
            Not Before: Apr 28 07:00:56 2025 GMT
            Not After : Apr 29 07:00:56 2025 GMT
        Subject: CN=59992d31c6dd74ecdee962ebe098af82b7be36cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7a:c0:06:bb:c3:ce:e6:08:54:4c:9c:31:73:
                    7b:3b:b9:aa:73:1a:21:ce:62:5e:7d:42:6f:ba:8e:
                    46:0b:15:8c:33:0c:72:9b:ea:ff:92:54:19:00:53:
                    a0:0c:8b:ba:8c:69:2f:5a:68:58:b5:59:b6:70:21:
                    7c:da:ab:c0:be:96:96:a1:2c:dc:ff:81:2a:e3:52:
                    05:e0:a5:61:85:e5:f4:07:32:19:e5:dc:c1:04:e7:
                    04:4e:34:f4:53:2c:64:88:63:92:d9:95:9a:0c:ee:
                    39:55:83:61:2c:a0:46:11:14:98:d8:52:7d:cc:b6:
                    83:41:0a:12:70:88:5b:ab:d7:58:b0:7e:87:88:0d:
                    9a:e0:1d:ce:1a:67:b9:4e:2f:de:e2:ac:60:1a:38:
                    9a:4e:02:a5:f9:9e:d1:35:00:49:5a:51:34:d9:c5:
                    92:34:54:b8:42:97:f8:05:0f:5b:55:85:83:a9:16:
                    1d:b7:08:5d:91:01:ce:f8:d3:b2:e4:7d:d2:46:06:
                    a6:38:bf:ea:8c:1e:11:62:0f:2a:6e:b2:2f:2b:02:
                    0d:e4:28:5c:ce:5c:4e:1d:5c:9b:d5:02:e3:47:c3:
                    fe:be:37:49:cf:aa:0a:2e:f1:14:b2:58:93:ec:37:
                    ce:72:f3:f2:09:01:1a:07:92:c4:a2:af:58:3c:03:
                    fe:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:99:2D:31:C6:DD:74:EC:DE:E9:62:EB:E0:98:AF:82:B7:BE:36:CF
            X509v3 Authority Key Identifier:
                keyid:F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b4:3a:39:4e:cc:7d:9d:5e:1d:0d:af:1a:93:73:00:fa:70:
         d0:52:2d:ed:bd:ef:ee:bd:64:42:cf:9b:77:35:ea:2d:c5:03:
         06:bf:78:ab:57:bf:b8:9f:5c:70:87:53:d3:e0:b0:76:7e:36:
         2c:16:55:0b:7b:ad:f0:32:c8:48:c0:92:3e:73:c5:d2:62:8f:
         3d:32:e5:ba:80:f0:5a:80:d7:07:1d:b7:02:a4:98:44:40:43:
         c4:18:2f:6b:72:14:75:c3:52:00:c2:da:54:21:29:e0:e0:aa:
         91:a5:3c:32:ca:e5:a3:2b:a5:8f:00:7c:6f:28:eb:c6:95:88:
         49:b2:16:b3:1c:87:63:94:ea:9b:64:be:16:f0:0b:db:a8:2d:
         e2:fb:af:e4:8d:3d:22:37:79:c3:78:3a:bb:c2:fc:cc:03:32:
         c1:bf:82:2b:a0:1d:07:14:77:12:25:bf:54:ae:3b:6e:11:40:
         7d:b7:a1:16:16:b7:aa:a3:bd:67:72:44:70:e1:ab:b3:23:e3:
         46:69:d3:0f:a0:fc:ed:80:d1:d7:45:e0:ba:17:75:75:9c:6d:
         fd:80:07:85:73:49:c7:74:d0:8a:4d:5b:54:65:2e:d9:1e:12:
         6b:3c:50:a5:5e:7a:44:32:52:a5:fe:9c:6b:de:9b:47:ff:b0:
         a1:9e:a9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:03:40 2025 by rpki-client