Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
File:                     h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft (raw, json)
Hash identifier:          zj7AL1wR+NoBDtQ6CQRddX3ECaCcZ6qN0rlo4zXmUMw=
Subject key identifier:   FF:69:1C:ED:45:93:5C:DA:50:52:34:4A:CA:CC:A9:0F:48:87:AD:7E
Authority key identifier: 87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
Certificate issuer:       /CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Certificate serial:       01968EB9929DF36DBD595A54629F0B94ED71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
Manifest number:          0614
Signing time:             Fri 02 May 2025 02:00:48 +0000
Manifest this update:     Fri 02 May 2025 02:00:48 +0000
Manifest next update:     Sat 03 May 2025 02:00:48 +0000
Files and hashes:         1: h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl (hash: 5QVyip8GnwcMjoI4xm5G0sY3FyetjEMeX5DUZYbTNHc=)
                          2: hlby1xXJUtbaqPmELmi7xbziBY8.roa (hash: QsHPEqttrfF2zMx3M7sZxcReCt1hljy1sF+KTN49S3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8e:b9:92:9d:f3:6d:bd:59:5a:54:62:9f:0b:94:ed:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
        Validity
            Not Before: May  2 02:00:48 2025 GMT
            Not After : May  3 02:00:48 2025 GMT
        Subject: CN=ff691ced45935cda5052344acacca90f4887ad7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:21:16:46:4b:25:ca:df:68:38:57:93:e8:
                    06:11:97:4f:cb:d1:2c:52:14:c2:ea:9d:30:20:b2:
                    41:e9:7f:e6:8d:de:4d:cb:07:fc:d2:7a:a3:c1:06:
                    d5:61:21:85:60:a8:95:aa:84:dc:04:a2:3a:c5:57:
                    c0:95:1d:f6:f2:b4:9e:11:9a:83:b6:30:dd:aa:5c:
                    61:57:a9:62:01:63:5d:51:ad:43:10:ef:10:f1:f7:
                    a6:a7:d8:ed:28:03:b7:26:6b:d8:a0:2e:ee:1e:ac:
                    c4:a7:d3:fa:3c:89:c4:56:53:a2:37:fd:0c:90:15:
                    77:23:c9:e0:97:c9:ca:5c:c0:af:26:5b:bc:28:5f:
                    ce:0c:b3:e0:48:c4:24:40:ea:9b:a7:7e:4e:af:aa:
                    33:41:55:be:5a:56:4b:7a:e9:e5:10:2d:1e:e5:54:
                    00:3c:2d:88:61:10:a8:d5:24:77:06:b5:cb:08:d9:
                    91:1f:33:91:4b:2a:46:41:68:4e:09:84:f3:dc:97:
                    ba:a6:8b:08:77:8d:2c:b3:e7:92:cc:2e:d2:e2:52:
                    b8:50:72:00:57:d6:71:c9:a4:18:1c:c4:86:8c:64:
                    77:89:70:88:79:bf:4e:3d:c0:b9:6e:5c:4b:1e:f2:
                    9e:3e:6d:ec:31:b6:32:fe:92:f9:96:de:7e:08:23:
                    70:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:69:1C:ED:45:93:5C:DA:50:52:34:4A:CA:CC:A9:0F:48:87:AD:7E
            X509v3 Authority Key Identifier:
                keyid:87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a4:41:84:1c:38:b3:d2:7f:09:22:f8:43:5c:0c:ac:0a:6d:
         e0:b7:38:7f:98:d4:af:a2:48:cd:4d:bf:46:26:f9:fb:5b:f2:
         dd:d0:99:ed:57:09:0c:7f:44:85:48:52:09:dd:ba:5d:11:b2:
         b6:d6:2f:51:ee:d8:2c:cb:91:72:30:31:d5:6f:cf:78:80:f1:
         3b:67:27:53:5e:1d:1b:7c:68:f2:4e:0e:ce:c1:81:e4:7c:5f:
         17:8f:9c:20:58:03:d5:59:0b:a2:ac:d3:73:ce:05:2b:d1:ee:
         dc:f0:47:64:3a:3d:d1:61:95:3c:aa:7a:9d:bd:0c:8f:e5:bf:
         73:29:52:a5:08:2d:b8:08:77:ad:42:1d:f4:c7:c9:f1:12:56:
         95:78:34:5f:f9:44:2c:a9:80:eb:e8:60:1b:bc:36:71:b0:9e:
         04:b6:79:0b:f2:76:74:f6:75:a2:55:cb:32:4c:8e:ef:31:7b:
         ff:bd:b0:e3:e6:c2:5b:fe:9d:1d:5f:18:f9:9f:24:36:bf:f7:
         cb:42:45:75:ca:3c:60:ca:e5:b5:d9:28:96:9a:82:98:33:92:
         09:13:47:1c:10:e2:9c:ac:84:2d:59:a0:2c:51:b1:7d:25:c6:
         a7:1c:06:f0:99:5d:32:f8:7a:dd:77:4d:b6:2d:9b:03:1d:78:
         cb:8e:27:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:06:00 2025 by rpki-client