Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
File:                     ee4R2MQpe-xUvTBUMMpHct-shHo.mft (raw, json)
Hash identifier:          kouF45lr2ijvYu8jRxuMldZLV7itEsZ4Trp9Mmgwps8=
Subject key identifier:   45:B7:3E:B0:36:5E:40:A3:14:97:65:6D:74:A6:F1:6D:DA:5D:D6:C7
Authority key identifier: 79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
Certificate issuer:       /CN=79ee11d8c4297bec54bd305430ca4772dfac847a
Certificate serial:       019677C3B382C404E0E2CB3BA19A9D5B34D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
Manifest number:          091D
Signing time:             Sun 27 Apr 2025 15:00:36 +0000
Manifest this update:     Sun 27 Apr 2025 15:00:36 +0000
Manifest next update:     Mon 28 Apr 2025 15:00:36 +0000
Files and hashes:         1: ee4R2MQpe-xUvTBUMMpHct-shHo.crl (hash: 7GZrDOXcFe411gKtNgzNyicWsUaToGAz1fCYFurkSn4=)
                          2: tzK04gs2QWdGkmPOxcIJ7O89Pa0.roa (hash: c/EnpCuozOUYVClxONo4ish8u2CS6ZGPowUUX+Csd6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:c3:b3:82:c4:04:e0:e2:cb:3b:a1:9a:9d:5b:34:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ee11d8c4297bec54bd305430ca4772dfac847a
        Validity
            Not Before: Apr 27 15:00:36 2025 GMT
            Not After : Apr 28 15:00:36 2025 GMT
        Subject: CN=45b73eb0365e40a31497656d74a6f16dda5dd6c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:87:de:15:a8:6e:8e:9d:bd:23:40:6c:95:be:
                    c3:c0:1b:7a:b8:b6:b3:31:5e:75:bd:dc:ee:1f:8a:
                    e0:7a:2a:ba:2e:62:61:78:be:a5:d5:83:bf:d9:e5:
                    23:22:25:f9:a9:35:41:f8:e9:51:fd:4c:88:bd:7d:
                    f3:31:68:ec:36:71:bd:75:5a:ef:22:16:5e:6b:76:
                    aa:02:d7:8c:6e:d5:b1:81:5c:3c:c8:27:ca:33:d9:
                    36:53:4e:19:39:9f:17:b9:37:70:4e:c9:f9:67:aa:
                    a0:7f:6e:0d:02:36:da:e6:5c:be:1f:b7:82:09:fe:
                    d3:f2:a6:45:e6:3c:3b:f9:ca:5b:0b:bb:af:44:46:
                    13:8e:33:20:ce:a8:6e:ae:68:9d:f7:6d:84:02:7f:
                    ac:22:5e:c2:3c:0d:a2:af:0a:cc:a5:8b:4a:c5:46:
                    58:7a:1f:fc:85:78:f4:11:2a:d3:b6:2b:a9:54:9e:
                    e9:8d:1b:a0:43:33:41:b7:6d:38:33:43:7f:13:5f:
                    60:1d:dc:0e:7b:e4:82:24:32:db:d6:62:7b:84:fe:
                    cb:16:64:d7:66:14:cc:fb:d0:5a:38:6c:87:23:52:
                    95:bb:5a:7f:ef:a7:f2:5a:8f:fd:54:44:48:c0:fd:
                    84:3d:ee:fb:a5:0e:c3:2e:ed:e3:61:8c:67:c1:a2:
                    58:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B7:3E:B0:36:5E:40:A3:14:97:65:6D:74:A6:F1:6D:DA:5D:D6:C7
            X509v3 Authority Key Identifier:
                keyid:79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:71:ed:88:2a:49:84:3b:b9:cf:cb:2c:95:ac:16:c7:e6:00:
         8f:20:e6:28:ba:fe:fe:b5:e7:0d:4f:4b:73:d8:04:2b:fd:86:
         5f:9b:a0:40:3f:dc:ba:12:45:82:3b:93:6a:4b:1b:99:60:5e:
         4f:65:c4:32:56:cd:ba:9a:7a:0a:14:91:89:d9:2a:98:19:bc:
         d4:fb:28:da:1c:ab:6a:d5:b2:cd:46:0f:ea:ef:6d:2b:34:53:
         bf:0a:d1:25:26:c0:8a:d7:97:2a:00:ee:df:d7:16:a5:22:d5:
         0e:81:dc:fa:22:35:79:a3:f1:c7:3a:c0:a8:e4:ee:67:a6:60:
         c2:06:2f:05:0f:c3:68:b5:2f:94:84:ca:03:aa:e8:20:53:d6:
         31:36:b0:68:dc:c7:7a:ed:a3:f3:be:6d:3a:a5:56:cb:69:6f:
         6a:a2:39:81:73:ab:cc:97:ba:0b:a9:37:20:a0:49:a8:37:35:
         05:03:f9:69:a7:5b:57:82:10:37:61:30:a8:8f:03:db:0c:47:
         6f:46:e9:29:f0:58:e5:44:97:fc:bb:2c:4a:a5:64:01:d0:e7:
         f3:f2:50:92:88:b6:b5:29:8d:59:e7:39:a0:8d:b9:9e:af:b1:
         16:b4:b5:93:ef:80:62:61:6e:8e:b1:5d:c5:ff:0f:83:0d:b9:
         d5:4d:91:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:00:48 2025 by rpki-client