Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File:                     4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier:          6wdPsHYT0hntzCU5YwypRdRKtLdJOJOLCQWbXooEFjI=
Subject key identifier:   DB:A0:B9:81:15:9E:E5:63:B2:42:00:55:D6:C2:6D:CA:EE:6A:7E:8B
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer:       /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial:       0196726657395587E570185D38F67A476E3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number:          044C
Signing time:             Sat 26 Apr 2025 14:00:31 +0000
Manifest this update:     Sat 26 Apr 2025 14:00:31 +0000
Manifest next update:     Sun 27 Apr 2025 14:00:31 +0000
Files and hashes:         1: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: 7KZsrOYDNZ02LUDvmr0QqvucLhC9hGI5Lwqrjyj/tPg=)
                          2: Ym4cY_1EuRnkCyF3T4bm70pYxjE.roa (hash: AkplZO86AEiMlgSJVWAGSBviunFDjdLnWUMhCPpbyQE=)
                          3: iIMfjrcM-EEaIrK48S4AaqdLSDc.roa (hash: kGHhJdo0yzn2T1RMM++JhdnOAbfrtsEDL/H5s4If3hE=)
                          4: kVLjxhxgFuqXEqXn9rCH2eEb9oA.roa (hash: QbtMbRiPhMHo4O/j41QZux+PuXLhM2M+5dr1jmr3fpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:66:57:39:55:87:e5:70:18:5d:38:f6:7a:47:6e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
        Validity
            Not Before: Apr 26 14:00:31 2025 GMT
            Not After : Apr 27 14:00:31 2025 GMT
        Subject: CN=dba0b981159ee563b2420055d6c26dcaee6a7e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:68:0f:44:c7:8b:61:11:35:64:c2:0c:2a:80:
                    93:f0:2d:fc:64:9c:b8:30:b8:33:d7:ce:e9:f2:b7:
                    22:db:a2:68:2b:ed:50:f3:86:41:52:87:68:f1:60:
                    66:44:c1:fb:ca:2e:89:a0:40:3f:62:b8:8a:9f:16:
                    cf:b1:74:3d:83:ad:6c:57:40:2d:28:f1:ab:e5:d6:
                    3b:80:34:f5:96:0f:2b:9f:fc:81:89:53:3c:2f:15:
                    15:7e:5d:d7:6d:d9:d2:19:52:cf:01:d9:8c:63:88:
                    50:fe:5d:5a:68:7e:d0:6c:88:00:e6:15:36:cc:7b:
                    8f:65:6a:6a:9b:79:7f:45:07:28:5a:3b:7b:83:cd:
                    6b:5e:1a:c5:1c:98:62:55:45:ef:a9:8a:c0:17:11:
                    dd:ae:42:a5:1d:b9:49:43:fb:40:8c:8e:d2:92:6d:
                    d8:40:7a:a3:e8:2a:60:16:96:03:cd:2d:9d:a4:64:
                    2f:ff:8e:0d:7b:39:8b:81:6e:52:93:52:7d:1b:9c:
                    44:5e:c9:f9:fa:22:c2:c8:d9:cd:b7:64:9c:a3:66:
                    ad:dc:25:d8:b0:f2:7a:33:a0:22:a1:74:1e:41:34:
                    af:27:7b:83:4c:35:4c:5b:ec:38:a0:98:dc:3e:2a:
                    97:16:ef:94:db:f3:b6:83:35:b3:92:c7:66:d2:fd:
                    96:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A0:B9:81:15:9E:E5:63:B2:42:00:55:D6:C2:6D:CA:EE:6A:7E:8B
            X509v3 Authority Key Identifier:
                keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:cd:17:b3:a2:c0:af:27:14:0b:50:3b:b1:93:70:2d:63:eb:
         a0:6f:04:22:5d:c8:b9:08:d6:14:fb:6f:38:bd:dd:15:5b:c0:
         f5:d6:8c:64:55:ec:d8:09:96:bb:68:f5:0b:2d:70:42:d8:74:
         ab:e6:3e:88:66:26:3e:97:91:85:bb:29:66:e7:ba:1c:d5:3c:
         13:49:74:78:d2:4f:9b:06:3c:75:f7:6a:08:66:d7:50:7e:3f:
         b7:fd:0d:ef:e7:16:44:7f:2f:59:a0:d8:58:5c:7c:f7:87:4e:
         ee:49:22:75:f4:cb:63:87:ff:f5:ab:3c:6b:41:7f:83:36:92:
         51:41:0b:90:8c:28:31:bc:ee:4e:e1:30:04:33:f1:bd:7f:67:
         6c:c7:a1:0e:90:f7:52:23:ac:9b:7d:85:da:88:0d:dc:f9:59:
         b5:95:98:c6:e4:6a:5e:d9:32:62:e7:73:0d:52:19:88:0d:f0:
         0f:df:a1:8d:82:e7:96:f9:68:f3:2f:79:c0:76:12:5a:fe:d8:
         9c:21:98:4e:7c:1f:35:9e:0e:e2:5c:c2:59:19:6b:d9:07:97:
         79:3a:d6:67:5e:5b:e6:7e:04:3d:7e:11:31:c3:9e:1a:df:52:
         16:36:38:59:83:c6:bf:1b:55:be:d7:df:ea:5f:fa:9a:ee:1d:
         7d:c9:73:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:36:43 2025 by rpki-client