Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
File:                     1-KK2BcWOB0aq3Fvw18vDbJMH900.mft (raw, json)
Hash identifier:          hf5oOJwh4akks72KHTD0MwMXpbQAPEiftTzoFuCoZvA=
Subject key identifier:   39:72:C0:78:8A:B4:9C:08:6F:70:DF:B1:83:53:20:66:99:0E:EA:A3
Authority key identifier: F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D
Certificate issuer:       /CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d
Certificate serial:       0196760CAFEE59FD2E11772C7F2B4DF3368D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
Manifest number:          DB
Signing time:             Sun 27 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 27 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 28 Apr 2025 07:01:05 +0000
Files and hashes:         1: 1-KK2BcWOB0aq3Fvw18vDbJMH900.crl (hash: dWVbzRC9IYlciHZMdsQqNOX7U60lTHXB7u1iAaq805w=)
                          2: KMs7aUSS9LqAFlnC_o5ElLedNIc.roa (hash: /x7zWDBe20WK1XP4EQ8MfhJthk5BD7GGqFW7sL/0M74=)
                          3: hqdB3dvV_dcCWDsTMYzzBUkq1iQ.roa (hash: PqNxdXFESdm3E0fpRf9aF9eGcWyACVXLt/A8w8L4KSw=)
                          4: ntHtztrMmkHjlQm-nR0AF_-ZVFE.roa (hash: Bf849e8DMlDt314X2PPaLUOxw5PYejhf50bcsgAnmcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:af:ee:59:fd:2e:11:77:2c:7f:2b:4d:f3:36:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d
        Validity
            Not Before: Apr 27 07:01:05 2025 GMT
            Not After : Apr 28 07:01:05 2025 GMT
        Subject: CN=3972c0788ab49c086f70dfb183532066990eeaa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:55:d1:e4:f6:14:ee:41:28:09:08:53:a3:9c:
                    65:83:3d:ed:3c:86:24:fb:56:55:17:fe:bb:ad:4e:
                    a2:e5:62:65:51:e9:92:b2:64:c7:39:d1:7a:10:14:
                    d8:45:24:94:4b:71:bf:c4:03:39:d0:79:7e:b7:76:
                    af:3c:a6:6c:af:a8:78:0f:c2:05:14:b8:51:28:b0:
                    d0:a4:ce:8c:47:08:4a:a2:76:6e:04:3d:12:e8:bc:
                    b4:55:c5:78:55:68:ee:1d:1d:96:95:3d:60:91:cc:
                    c7:bc:d3:16:0e:16:75:53:48:01:8f:d0:a7:44:f5:
                    3c:d1:42:c9:77:71:0e:6d:ea:b9:93:64:fd:54:a6:
                    ac:a1:53:7a:3a:a9:12:4d:59:61:26:5e:9a:ab:f9:
                    fd:ed:4e:70:c2:33:a8:10:03:94:78:cd:6e:85:b4:
                    16:09:08:7a:c3:b1:f2:cc:4b:8d:f8:b5:28:a8:95:
                    01:cb:7e:ea:6f:dd:ac:2f:d5:e7:8e:45:07:31:99:
                    e0:a0:29:54:ae:bf:b7:20:60:13:d5:59:8f:e6:bd:
                    6e:13:cb:62:c8:1f:2b:53:88:cf:f8:bd:1d:b9:c3:
                    54:fe:bb:5a:ee:5b:43:4c:3e:c0:41:f4:d3:1f:95:
                    f0:0b:27:0a:31:fb:52:ac:20:f1:fa:2c:cb:f4:1a:
                    16:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:72:C0:78:8A:B4:9C:08:6F:70:DF:B1:83:53:20:66:99:0E:EA:A3
            X509v3 Authority Key Identifier:
                keyid:F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:20:4c:13:16:4d:69:a5:f2:4e:ca:e1:cb:97:ba:50:74:04:
         41:12:65:c5:e2:91:c1:81:73:05:b7:f2:88:6f:b6:48:27:b8:
         40:5b:aa:d5:a7:0c:13:8b:60:db:d4:da:86:45:f4:b9:88:45:
         0d:dc:e7:c3:0d:da:e6:ea:dd:a6:b6:97:8d:7f:16:45:82:fd:
         6e:0f:44:93:cf:fe:35:54:f6:b4:d8:9c:fe:4c:35:12:de:46:
         52:6f:06:5d:85:a8:f3:93:01:8d:02:5b:d5:a4:2a:83:6c:7e:
         76:a1:b0:91:ef:bd:19:75:49:81:e0:45:d8:6a:e0:fe:27:ac:
         45:41:ef:46:e3:03:d6:96:32:9d:f1:2b:e2:9c:a5:eb:ce:15:
         7e:b8:93:52:25:e1:80:88:48:26:29:af:d0:d2:fe:bb:8e:f6:
         91:90:0a:07:97:a4:f6:58:9d:d9:7d:15:d4:67:0d:c8:dc:46:
         14:9e:78:af:57:e2:f0:d1:69:61:be:8d:f7:12:7f:7e:58:43:
         da:fc:a8:80:ab:74:94:3e:54:a8:86:6b:12:c7:f8:83:c6:5c:
         12:9a:3c:a4:31:e2:4e:30:e1:d6:df:99:5e:9c:d4:86:96:3b:
         82:bc:ab:60:96:9f:c5:e6:d1:00:13:ca:ad:dd:59:35:5f:4d:
         9f:b9:ed:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:23:25 2025 by rpki-client