Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
File:                     eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft (raw, json)
Hash identifier:          AVvoe8hyUvD6sGDs54nVTAQMMgjd0d087Pm9qRcAwAc=
Subject key identifier:   AF:EB:8A:68:48:C0:74:99:AA:82:66:9D:7D:C6:94:AD:31:D7:2C:F9
Authority key identifier: 78:13:66:3C:64:A5:DA:8D:CA:F5:B3:AC:FD:3E:EA:F8:35:B4:1A:53
Certificate issuer:       /CN=7813663c64a5da8dcaf5b3acfd3eeaf835b41a53
Certificate serial:       019675674D1EAB691397F7C3DACDD5AA37FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
Manifest number:          0958
Signing time:             Sun 27 Apr 2025 04:00:25 +0000
Manifest this update:     Sun 27 Apr 2025 04:00:25 +0000
Manifest next update:     Mon 28 Apr 2025 04:00:25 +0000
Files and hashes:         1: 0U0iwiffVettO-vogpqMch7csq4.roa (hash: uPiED/FamX8UNur9ecAQaLp7MXQZVhIJRf73CMOjMOY=)
                          2: eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl (hash: zjwR5PENY9ArvKPzgs2tDTvdAkh6bAN6gQJnK2KwlZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:67:4d:1e:ab:69:13:97:f7:c3:da:cd:d5:aa:37:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7813663c64a5da8dcaf5b3acfd3eeaf835b41a53
        Validity
            Not Before: Apr 27 04:00:25 2025 GMT
            Not After : Apr 28 04:00:25 2025 GMT
        Subject: CN=afeb8a6848c07499aa82669d7dc694ad31d72cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:88:ef:90:7e:0a:db:a0:65:c0:a9:77:14:
                    a8:d4:0b:76:57:61:38:92:61:0b:28:e3:e4:87:48:
                    87:72:70:8a:64:0a:e8:c1:4b:4b:8f:92:4a:d4:7b:
                    f7:20:93:40:8f:ce:8d:91:95:a2:2d:68:20:0e:de:
                    32:47:71:fc:60:db:72:e3:4c:d2:89:13:8e:ee:5c:
                    fb:de:67:9b:16:20:37:85:86:8a:de:f9:40:6c:ec:
                    0a:88:ab:18:b5:1d:ea:12:62:27:af:29:27:62:1d:
                    68:5f:07:89:bc:5f:23:47:ba:1d:e5:fb:d7:19:33:
                    0a:f4:35:bd:5f:5c:ae:4f:90:22:a7:87:a3:b2:9c:
                    70:46:00:50:1c:14:01:a5:53:4e:c5:04:09:b1:b9:
                    b1:3d:8d:4f:a8:fc:65:17:96:a5:fc:57:3c:7a:84:
                    98:18:d9:15:3d:c3:14:c0:a7:b5:82:6d:04:c3:53:
                    e0:57:9b:3c:46:e3:d9:ba:9a:84:8e:02:7a:0c:11:
                    66:07:7e:ae:a2:9e:e8:a4:a9:66:f5:b0:9b:57:c9:
                    51:56:5f:87:c2:84:44:ec:61:bf:15:40:df:ad:68:
                    59:de:3f:31:84:70:69:36:15:83:67:68:9f:72:b1:
                    36:25:0a:6c:1e:cb:ba:36:8f:dd:9e:06:17:1f:46:
                    1c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EB:8A:68:48:C0:74:99:AA:82:66:9D:7D:C6:94:AD:31:D7:2C:F9
            X509v3 Authority Key Identifier:
                keyid:78:13:66:3C:64:A5:DA:8D:CA:F5:B3:AC:FD:3E:EA:F8:35:B4:1A:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:09:3f:11:9d:cb:3e:9f:56:78:fd:86:38:c7:1c:04:28:18:
         da:4e:34:f3:b5:2a:c6:05:11:fa:09:f2:5a:7f:76:58:06:58:
         15:df:6c:6c:ac:58:8f:07:15:72:47:8f:e8:49:8c:94:a3:8f:
         80:49:d7:b5:53:1d:57:f3:a0:87:37:4f:fd:95:fd:30:83:95:
         72:ec:c4:22:49:41:27:3f:82:19:5d:ee:b9:45:a9:41:23:7e:
         43:cb:ef:01:57:1a:de:ed:79:18:14:fa:a1:af:94:b9:fb:2c:
         be:bd:d4:e2:8e:68:0e:43:de:99:23:42:bc:9d:d6:b4:77:be:
         35:bb:d0:ae:42:ed:e6:c9:dd:9f:66:88:c0:b7:d4:00:5e:56:
         87:9b:43:61:dc:e6:19:d1:a1:f1:a7:2c:30:4a:74:e7:52:1f:
         ab:41:08:1e:38:bd:47:56:cd:67:b6:a8:c8:b0:6a:ce:06:b4:
         05:67:19:be:75:85:e8:d0:b4:13:41:a9:21:c2:7a:84:d9:08:
         a8:14:25:85:70:ba:49:a9:3f:ac:d9:58:14:a7:fd:fc:c2:2b:
         ad:41:8f:b8:57:08:4d:a9:3b:56:a5:11:e5:44:d6:ee:1c:ac:
         8f:be:6e:89:3c:a0:02:0e:59:f8:6d:b0:31:2b:7f:f0:10:76:
         ac:ce:15:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:44:24 2025 by rpki-client