Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
File:                     2Jf66pSBXgUgtG8YXD6-wps3bvA.mft (raw, json)
Hash identifier:          xhhoJqP/N6n+uTzYuPOmy3KXxAhTWe/G+9157GBL2o8=
Subject key identifier:   D2:E1:16:73:FF:5E:53:DE:54:1D:60:AB:9A:2C:BD:3A:7F:D8:23:59
Authority key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
Certificate issuer:       /CN=d897faea94815e0520b46f185c3ebec29b376ef0
Certificate serial:       019671F861563D7570522653AD775CDD8778
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
Manifest number:          0BB4
Signing time:             Sat 26 Apr 2025 12:00:25 +0000
Manifest this update:     Sat 26 Apr 2025 12:00:25 +0000
Manifest next update:     Sun 27 Apr 2025 12:00:25 +0000
Files and hashes:         1: 2Jf66pSBXgUgtG8YXD6-wps3bvA.crl (hash: Al1OQ4alq7SoNLF+OEQS1eVBeQn+4E9e9UETGRxlTQw=)
                          2: he-9O0rw1scVnV8QKLbFYmxFilo.roa (hash: 5u76H6F4zhHuyIDIEsIVg7UrT9YlgKHZ6fwd0Bucupw=)
                          3: mCWf1F1Mm7OBpM7kBt_V6FcBzcM.roa (hash: crtUvkvttnNAHW4vnAucfsvmuPjcxyYp2LzbydDGgAI=)
                          4: pRIAJQlSrUkvuKhnZASC9fivsrg.roa (hash: yBBsHGNSjeIXP9/D0Jjl9E4Wj2zoir6qR7xsd4RwM4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:f8:61:56:3d:75:70:52:26:53:ad:77:5c:dd:87:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d897faea94815e0520b46f185c3ebec29b376ef0
        Validity
            Not Before: Apr 26 12:00:25 2025 GMT
            Not After : Apr 27 12:00:25 2025 GMT
        Subject: CN=d2e11673ff5e53de541d60ab9a2cbd3a7fd82359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:9a:5b:9d:4a:a8:a2:10:ca:2f:1f:73:fa:
                    ac:e1:71:9c:56:75:c2:53:4f:a3:91:ac:0c:2e:c9:
                    a3:14:23:62:c4:41:27:80:ad:41:22:2a:73:4b:e3:
                    9c:2a:f8:34:8b:da:07:e8:94:cb:c4:c7:0f:aa:18:
                    e7:f6:98:fb:de:d7:21:84:d3:4c:d5:34:c6:89:ba:
                    e5:d7:3f:08:7c:78:e8:1e:3a:58:5e:f3:a0:8e:84:
                    f1:4a:ad:b4:76:f3:97:26:e0:20:a0:98:2e:55:ec:
                    c3:0c:25:15:dd:7c:4f:47:73:00:3d:90:6b:ff:77:
                    e4:af:9f:87:08:db:40:ef:39:4a:5e:32:ac:80:c2:
                    19:41:5f:f3:ab:6c:c8:5e:e3:46:b4:6e:df:56:af:
                    da:c6:45:3d:fd:c8:1f:55:1a:73:69:92:9a:31:68:
                    23:b8:60:75:56:95:bc:d5:c0:63:19:19:b2:25:0c:
                    be:ff:65:60:6b:75:d8:93:f3:c4:bf:06:c9:58:d1:
                    19:84:8e:e7:25:76:b6:cc:33:05:da:3d:41:82:f1:
                    46:8e:68:81:7c:ea:0c:f7:b6:82:35:a0:4d:2d:c5:
                    82:03:46:5f:9d:bd:8e:55:33:29:74:7e:e3:50:80:
                    e2:c5:53:0c:3d:fd:6d:8a:96:9e:61:ed:95:5e:9a:
                    ee:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E1:16:73:FF:5E:53:DE:54:1D:60:AB:9A:2C:BD:3A:7F:D8:23:59
            X509v3 Authority Key Identifier:
                keyid:D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a0:ff:65:87:7b:a0:c7:8b:a1:8a:82:00:5e:ff:50:e6:e8:
         07:16:15:2d:52:be:d0:91:63:4c:d5:10:39:88:24:93:4e:45:
         b7:47:53:2b:00:fc:0c:f1:c0:2a:62:e7:05:cd:8b:84:19:c0:
         a1:3d:c6:90:09:77:62:3a:81:32:d1:a0:b0:bd:10:66:82:72:
         87:aa:7d:ea:9d:8f:1f:4f:b1:71:24:c6:8e:22:f2:d2:34:8e:
         00:06:0f:12:de:60:b4:d1:1e:02:ae:58:03:48:25:3a:4b:c0:
         b0:34:43:1d:9b:66:50:bf:ec:54:97:15:51:5d:0b:5d:78:b1:
         42:9c:a3:96:4d:9a:a9:25:5a:e9:01:07:d3:7a:7e:c6:64:cd:
         0a:52:00:cd:ee:57:b3:6f:76:26:a5:00:b7:24:27:36:0d:a2:
         7f:06:5a:48:e5:cf:27:97:16:95:a0:ff:5d:16:6d:31:d6:b5:
         ed:13:b0:41:ac:64:c8:88:55:1c:d3:d2:fe:05:ed:dd:22:11:
         42:c0:53:f6:52:0a:81:19:e1:f1:68:9b:a3:4d:38:bc:95:5a:
         19:f3:70:d6:16:05:5c:f3:07:8b:75:bf:87:75:07:77:23:9b:
         f5:d9:b8:bb:3b:3b:64:4e:2a:38:c0:67:48:af:6e:25:81:42:
         64:62:dc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:11:01 2025 by rpki-client