Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
File:                     RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft (raw, json)
Hash identifier:          pBum7od9T5tYw4wyikypv0RxJyi1hdwYv/3Pim4maWk=
Subject key identifier:   93:CB:37:C1:12:68:B2:04:8A:AD:E0:0F:56:99:D0:1E:73:3E:8C:A8
Authority key identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
Certificate issuer:       /CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Certificate serial:       0196718ABD50D4CE3F6FFD6B250C6CB02166
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
Manifest number:          17
Signing time:             Sat 26 Apr 2025 10:00:39 +0000
Manifest this update:     Sat 26 Apr 2025 10:00:39 +0000
Manifest next update:     Sun 27 Apr 2025 10:00:39 +0000
Files and hashes:         1: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl (hash: XMhvIgjxTP6bL2WmCOkg+61l5Noh1JIka7TUVlwaAWU=)
                          2: UFEpRGmmgSxI-Cj4mUoULnogLh0.roa (hash: uynyMnukvUhaVDa9YBwkcCoinwLXAu+vAC1b07ExVN4=)
                          3: mIeWrCvH_vi6WIO4Abqw0wSZ9wE.roa (hash: UEuZfid3mOqO0N/4zAUnn5LYhUgHF25ZTPMwLRC0oAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 10:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:8a:bd:50:d4:ce:3f:6f:fd:6b:25:0c:6c:b0:21:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
        Validity
            Not Before: Apr 26 10:00:39 2025 GMT
            Not After : Apr 27 10:00:39 2025 GMT
        Subject: CN=93cb37c11268b2048aade00f5699d01e733e8ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7a:ad:48:33:50:22:37:8d:1e:e8:1d:13:d6:
                    f6:4c:fa:f1:23:a6:43:21:a6:8e:e6:23:22:22:86:
                    b2:5c:5a:cd:69:6e:9f:f0:67:b0:95:20:fc:bb:81:
                    62:b4:c7:fe:60:f5:67:0f:1e:8e:cc:c2:ae:8e:f3:
                    b3:99:2e:b2:8a:41:4c:41:a0:d4:bd:df:16:41:62:
                    e7:16:83:b7:ed:8a:0a:45:46:f3:e5:d5:b9:63:af:
                    c2:17:92:0d:e2:b5:be:27:eb:65:9f:f4:18:0f:40:
                    bf:24:3e:e2:eb:5d:99:40:a7:51:d2:de:e8:d2:ef:
                    58:47:15:b4:63:2e:3c:82:55:7d:e6:93:0b:11:87:
                    af:2a:05:3f:58:b6:46:7d:73:c0:26:54:bf:1b:cc:
                    b1:b6:36:96:d8:b8:09:65:dc:51:24:93:a3:98:fd:
                    fd:8b:d2:62:6c:48:f5:de:a2:56:1a:b2:55:80:0f:
                    a0:f8:8c:91:25:56:dd:c4:70:b5:1b:dc:a2:27:29:
                    f2:e3:1b:5a:59:30:99:8d:d2:3f:8b:e0:c8:ef:bb:
                    5a:ec:07:83:6b:24:51:4c:0e:dd:2c:ea:dc:9b:ae:
                    3c:48:7d:dd:05:af:ce:cf:38:ac:51:2a:d0:78:6d:
                    c6:53:9c:a7:8f:3c:d5:34:0e:aa:aa:3d:8a:a1:fe:
                    13:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CB:37:C1:12:68:B2:04:8A:AD:E0:0F:56:99:D0:1E:73:3E:8C:A8
            X509v3 Authority Key Identifier:
                keyid:45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:53:f0:9f:14:e7:2f:c3:e0:e3:68:80:e2:06:21:59:0b:62:
         7c:40:db:96:20:82:3c:56:97:59:18:34:20:c5:e8:ea:22:7b:
         b7:7a:60:12:29:be:1c:2d:9e:5e:98:57:49:bb:22:24:cf:74:
         3f:c9:d2:16:ab:9d:71:4c:82:20:46:5e:77:f6:bc:6c:e4:9c:
         fc:a0:38:f7:30:80:81:5b:9d:c2:22:82:98:20:9d:59:1e:b9:
         c7:de:7b:7d:b2:f2:3b:0c:a8:cc:16:1c:cf:02:3f:19:7c:59:
         cc:bd:30:e5:73:86:d3:b0:9e:4c:65:48:cb:57:3b:1f:e1:5d:
         fc:05:62:38:d8:69:03:38:e7:68:1e:3f:e6:f6:95:41:3e:e0:
         77:1d:97:d9:6a:e5:c7:f7:98:65:e5:f0:dc:ec:81:a9:ee:8f:
         e1:83:0c:b3:b3:18:b3:d5:d7:28:c2:51:5d:8f:93:bc:61:e3:
         6f:93:a7:5f:f6:c7:03:24:77:c1:5e:50:d3:9c:21:c2:5a:a5:
         da:a4:6a:ba:4d:d4:00:c3:2f:d0:37:8d:76:03:e3:cb:ea:0c:
         95:cb:ae:9c:25:7d:d1:8e:0a:8d:3a:fe:55:03:9d:2e:8c:d7:
         2f:84:4b:6f:f0:94:60:5f:fd:79:2a:b7:ec:7c:88:92:26:45:
         98:9e:17:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:06:31 2025 by rpki-client