Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
File:                     _Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft (raw, json)
Hash identifier:          3zQa7+waFhCxdjL7Nj8nJouVmj4mNUaSq8GFAnG6bTY=
Subject key identifier:   9A:4D:BA:4D:95:8B:0A:E6:98:5D:A7:EB:24:BA:38:72:F3:5C:EA:D0
Authority key identifier: FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35
Certificate issuer:       /CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
Certificate serial:       01967679F744C14DE3B0EBA41B0104E197E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
Manifest number:          150D
Signing time:             Sun 27 Apr 2025 09:00:26 +0000
Manifest this update:     Sun 27 Apr 2025 09:00:26 +0000
Manifest next update:     Mon 28 Apr 2025 09:00:26 +0000
Files and hashes:         1: _Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl (hash: BZS0MUdL4dT1P7KH9P5Fm/YZiHuISixDFIGIAE2drfQ=)
                          2: gj7G_bFbDmDYpYp6GKUqBVaPkf0.roa (hash: 636LllEYf1p/aMnvVspv63btZ6guwyZEmYUh7DiMd9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:79:f7:44:c1:4d:e3:b0:eb:a4:1b:01:04:e1:97:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
        Validity
            Not Before: Apr 27 09:00:26 2025 GMT
            Not After : Apr 28 09:00:26 2025 GMT
        Subject: CN=9a4dba4d958b0ae6985da7eb24ba3872f35cead0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a6:3d:11:d5:a0:82:b5:23:ef:fd:11:57:97:
                    40:21:2b:d3:83:51:4f:9c:79:28:5f:8f:72:e6:b2:
                    0a:a3:50:97:ba:12:aa:9f:6c:75:e2:06:39:82:3e:
                    0e:05:c3:79:14:5b:a4:eb:6d:ce:f3:a5:c2:f2:25:
                    df:3d:d8:39:06:c3:6e:69:2a:fa:fc:e9:d7:39:88:
                    49:cd:30:2b:7a:5d:d5:e6:cf:8a:4e:45:27:21:87:
                    26:58:e6:08:6b:61:c7:75:ba:86:d9:f1:c5:d4:93:
                    94:84:e7:de:df:02:69:b0:ba:c8:21:a3:5b:68:bd:
                    21:89:c5:2e:80:00:89:6a:1b:73:39:0f:a2:c5:cd:
                    4b:0e:df:80:23:a0:f7:02:5f:7b:86:57:05:d9:18:
                    98:4b:30:fe:dd:27:aa:95:bf:f0:59:cd:0c:1d:e0:
                    60:9b:b1:55:a5:f5:9c:3e:9e:7c:d9:bb:08:8d:39:
                    cb:5b:46:2f:73:ab:f6:ea:ce:ab:2e:33:fc:e5:45:
                    f6:01:52:f8:a7:e7:cc:be:c9:ab:a9:ef:32:07:d4:
                    29:eb:07:5c:e5:03:c0:b0:16:0d:47:fe:a9:aa:13:
                    ee:df:f6:8a:7a:89:6b:1f:6a:c3:70:f3:87:7a:35:
                    41:97:3c:e4:7f:21:25:51:e0:ef:02:7e:73:07:af:
                    da:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4D:BA:4D:95:8B:0A:E6:98:5D:A7:EB:24:BA:38:72:F3:5C:EA:D0
            X509v3 Authority Key Identifier:
                keyid:FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:3a:7d:9f:0e:b0:1b:b7:31:b6:83:01:a2:9c:65:10:e4:19:
         8d:80:74:35:cc:25:da:1a:b8:b4:61:49:5c:be:14:9d:1c:9e:
         ff:54:73:d3:85:75:29:b5:00:f8:86:38:06:12:94:a2:44:7c:
         26:66:38:3a:bb:71:4d:8b:44:ef:49:0f:66:f3:2e:d4:be:31:
         2a:6a:9a:90:e5:8b:fb:e5:07:b8:7a:a4:83:43:65:9f:03:b1:
         a7:9b:2f:fe:14:56:5e:cd:5a:c5:a6:5d:b2:89:ca:b8:82:81:
         e9:33:16:27:d5:bd:ac:f8:44:7c:a4:b6:12:4d:5d:5f:ee:38:
         58:0f:0c:1d:82:de:65:65:53:b1:94:fd:1f:a0:6c:48:9a:29:
         9e:f6:a8:e6:60:09:17:08:88:d5:00:95:8d:97:c4:4d:e8:ce:
         aa:09:f9:78:86:16:2c:ef:0f:29:55:b9:3d:38:61:66:0e:04:
         46:c0:01:06:14:75:61:98:39:f3:86:cc:a7:0d:2d:37:d0:71:
         e5:e8:bb:58:16:57:24:50:13:61:ac:ba:43:51:9c:e8:53:ef:
         fa:1d:2a:8d:a9:04:d9:28:f1:1a:7a:37:a1:99:5e:8b:1d:ab:
         bf:64:5d:b2:1a:84:e6:5b:6f:73:4c:0a:6e:3a:10:0a:e8:cc:
         84:65:ac:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:29:16 2025 by rpki-client