Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
File:                     MobhKf8m2K3BBxSpHKU9gAsG_iU.mft (raw, json)
Hash identifier:          miaON1Cq1AqYzDji/DiFdSn9whqpeNwSnNV/ief8QZ0=
Subject key identifier:   7E:3C:9E:13:FD:7E:DB:60:9F:AF:D2:68:DA:09:06:2D:4E:6D:1F:AA
Authority key identifier: 32:86:E1:29:FF:26:D8:AD:C1:07:14:A9:1C:A5:3D:80:0B:06:FE:25
Certificate issuer:       /CN=3286e129ff26d8adc10714a91ca53d800b06fe25
Certificate serial:       01969070C39B375F1623485C7D0D82B18535
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
Manifest number:          04F1
Signing time:             Fri 02 May 2025 10:00:31 +0000
Manifest this update:     Fri 02 May 2025 10:00:31 +0000
Manifest next update:     Sat 03 May 2025 10:00:31 +0000
Files and hashes:         1: MobhKf8m2K3BBxSpHKU9gAsG_iU.crl (hash: g62+GtPvrjwzS33wcVUrjw6IFhAv/teU/U7kS173b8E=)
                          2: ztFr_-g0BQXlSd44UjlTquqKHlw.roa (hash: ICOrnGo6DEP/QUKA6WPeJcvKMnXrNs1C20UGRkpbiEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 07:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:90:70:c3:9b:37:5f:16:23:48:5c:7d:0d:82:b1:85:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3286e129ff26d8adc10714a91ca53d800b06fe25
        Validity
            Not Before: May  2 10:00:31 2025 GMT
            Not After : May  3 10:00:31 2025 GMT
        Subject: CN=7e3c9e13fd7edb609fafd268da09062d4e6d1faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2f:4e:ed:a4:63:03:69:dc:29:45:e8:1f:59:
                    48:56:68:85:c6:49:5b:e9:f2:d1:0c:c0:8e:0f:67:
                    7a:2b:84:0f:67:92:e8:1c:4f:47:0f:39:78:56:50:
                    e4:ad:e9:01:f4:1c:4e:03:f5:da:4d:8e:23:6f:fa:
                    3f:a0:e9:41:d2:7f:f3:e7:e7:8e:c0:09:b3:cb:4e:
                    d7:4b:be:06:f1:24:6e:6b:d5:e9:05:8a:22:4b:f9:
                    70:87:c6:97:45:4a:14:9d:9f:57:3f:e1:d0:1f:ba:
                    e8:ca:22:ef:ae:de:67:79:37:5d:83:16:a1:88:20:
                    da:8c:8a:1a:00:5f:06:d0:75:1f:3a:2f:f9:19:1a:
                    f1:cc:9a:fa:c4:57:6b:da:79:34:8a:25:64:27:b1:
                    6d:6f:da:4a:ec:5d:b2:b6:be:ed:9b:73:8f:cc:61:
                    7e:73:34:f8:79:be:81:9c:17:2e:75:42:98:9b:48:
                    3f:97:cf:73:56:69:b4:59:84:60:18:ea:50:dc:5c:
                    39:b6:e1:6e:72:eb:8f:23:76:ac:cf:84:72:f0:10:
                    eb:dd:36:cd:1e:a1:6f:4f:25:b2:2e:a5:95:bb:c8:
                    cf:f8:e7:70:4e:26:7d:3e:69:36:27:97:b7:6a:1d:
                    0a:d5:2b:97:f2:fc:bc:04:b5:81:33:3a:86:2c:dc:
                    17:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3C:9E:13:FD:7E:DB:60:9F:AF:D2:68:DA:09:06:2D:4E:6D:1F:AA
            X509v3 Authority Key Identifier:
                keyid:32:86:E1:29:FF:26:D8:AD:C1:07:14:A9:1C:A5:3D:80:0B:06:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:2b:c8:32:7a:59:29:cc:88:42:05:e2:f1:6f:76:b2:32:81:
         2d:f8:b0:2c:de:22:a9:da:73:89:f9:fc:e8:e4:6a:dc:c9:26:
         59:88:87:1d:e0:f3:09:14:47:35:03:4e:f6:70:59:57:aa:38:
         6f:05:75:cc:78:97:7a:bc:e8:ce:e4:d9:f1:e0:c7:58:28:6e:
         0b:a2:36:70:f6:7e:7e:4e:22:3c:ee:9a:3e:bf:9c:32:17:cc:
         1b:77:16:68:f3:de:bf:e8:94:2b:67:67:76:bb:6e:dc:cc:96:
         aa:bc:07:61:4e:ba:1c:41:ad:92:7f:4e:4d:53:bf:1b:96:35:
         2f:bb:04:f7:1c:e6:32:b6:c5:c1:73:51:34:17:97:57:7a:ce:
         6c:ae:24:2d:b5:a5:9b:4b:73:89:3f:a0:93:92:b6:cb:c6:e4:
         f1:5b:51:04:3a:2d:a7:08:dd:5c:23:4b:67:ff:e3:59:2f:82:
         1a:3b:79:e9:fa:20:a5:53:42:4d:04:1a:c4:d8:c4:fb:42:97:
         7e:d1:81:94:0a:61:2c:ff:52:d5:a6:be:bf:b1:ca:1c:e8:d3:
         b3:1f:0e:44:cf:49:66:5d:db:b1:72:51:f3:7d:6c:f6:5a:9b:
         86:4e:a5:b2:0d:42:f6:f8:b1:6f:d4:87:c6:22:d0:67:3f:c6:
         a1:4f:6f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:13:04 2025 by rpki-client