Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
File:                     1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft (raw, json)
Hash identifier:          LrwiIxY/uLWJsXifdjdTHo5ULuoA72yRPwQ2bTIGOk0=
Subject key identifier:   D2:37:63:14:E0:38:26:03:D3:EC:0C:16:D8:DD:53:EA:A4:E1:80:C2
Authority key identifier: F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
Certificate issuer:       /CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Certificate serial:       01967FEB1B85FA84C24BA40A3F62DA8118D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
Manifest number:          1516
Signing time:             Tue 29 Apr 2025 05:00:36 +0000
Manifest this update:     Tue 29 Apr 2025 05:00:36 +0000
Manifest next update:     Wed 30 Apr 2025 05:00:36 +0000
Files and hashes:         1: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl (hash: kHcTUn/ANFoyGXyI+zQ0z1b1jpH+DJNplVtU94gyqc0=)
                          2: RA2Fj5XNpBEGqwtLV7JPBiXXhZ0.roa (hash: BNo8QMwK2CvmHYQFxYebo4KjKZTrRv5gh0bqfDREWd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:eb:1b:85:fa:84:c2:4b:a4:0a:3f:62:da:81:18:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e0257d067ef8b85f620c67220cf977ddde3994
        Validity
            Not Before: Apr 29 05:00:36 2025 GMT
            Not After : Apr 30 05:00:36 2025 GMT
        Subject: CN=d2376314e0382603d3ec0c16d8dd53eaa4e180c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bb:4c:91:36:47:96:85:be:60:17:f2:e5:5d:
                    fa:36:af:40:97:92:1d:b0:d4:36:aa:e5:22:58:54:
                    56:2b:26:08:bf:06:f7:91:13:e4:8a:ee:95:92:2c:
                    04:f4:92:2d:a2:b1:1c:50:c8:20:65:59:d4:11:f1:
                    a0:bd:28:66:f4:ec:87:f5:70:ce:ac:96:3f:21:63:
                    55:fd:29:45:26:64:e1:4a:ad:bf:d3:80:4b:21:ce:
                    9c:51:48:e3:a6:f3:ea:12:cc:ad:6e:29:0c:d4:bd:
                    e9:93:74:a2:81:f5:d3:d9:3a:35:68:49:1a:05:d3:
                    56:0d:57:e4:fa:a2:13:cc:af:b2:b5:9b:6c:18:a9:
                    56:29:ae:d7:34:92:98:e5:85:6c:bd:74:3e:33:17:
                    f4:fc:15:c5:bb:8e:28:98:8f:b2:5c:b0:07:3d:f2:
                    c7:a3:f6:5a:41:7e:ef:6d:84:53:8c:4a:06:8d:3e:
                    7e:0c:16:09:f0:25:3a:50:64:18:67:a0:67:63:22:
                    83:38:f0:01:29:15:21:52:75:10:95:e9:5f:1f:c1:
                    54:11:64:a4:98:c5:49:1b:3c:41:91:82:c2:fb:24:
                    a9:1d:80:13:35:26:cb:4a:ff:4f:c8:14:b9:b0:29:
                    c8:55:20:ce:3d:ae:84:f3:3c:a3:fe:0c:c8:5d:33:
                    82:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:37:63:14:E0:38:26:03:D3:EC:0C:16:D8:DD:53:EA:A4:E1:80:C2
            X509v3 Authority Key Identifier:
                keyid:F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:af:82:69:59:29:cf:aa:2e:ba:f2:d8:72:b2:e9:5a:e4:bf:
         e3:43:cf:d8:8f:cf:23:38:00:11:2f:3a:45:ca:2b:fd:48:ef:
         3b:8e:8e:9c:ee:0f:13:7d:a3:94:c9:1c:a8:09:36:d2:34:f6:
         8d:e3:f0:a4:2a:9f:5d:a2:42:76:79:9c:d8:82:7e:81:2b:e4:
         c4:40:d9:c2:02:57:ae:04:a4:72:80:08:85:50:bc:31:6f:8e:
         7d:9a:2f:f8:80:5a:3d:88:73:e6:6a:ef:41:89:54:c0:89:e6:
         aa:7a:b3:e8:fd:67:8a:2c:cf:ec:94:3e:e3:31:c4:98:ea:a1:
         52:c2:48:bb:cc:02:f1:55:4d:b8:79:5c:c3:86:01:02:83:c8:
         b6:37:37:f0:b6:e4:84:42:1e:99:e9:c3:5b:be:4d:47:63:64:
         2f:c9:7a:b7:59:47:50:80:a8:c7:8c:d6:bf:6c:8b:2c:90:fd:
         5b:5d:d5:75:42:08:6d:81:23:ad:f0:a0:b1:8e:2d:ce:e1:40:
         4c:dd:93:94:23:3d:18:b0:57:0c:67:f2:46:93:ed:ea:f1:cb:
         8c:27:fd:bd:1e:a3:d5:9c:f2:e7:8f:f4:c8:bb:51:fa:3a:16:
         d3:ff:49:29:bc:62:9b:72:b8:a7:8a:c5:fb:24:ac:1e:32:8e:
         2a:02:9e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:26:17 2025 by rpki-client