Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
File:                     1NhufQc6nk1p7HFcNiMXaAWJTVo.mft (raw, json)
Hash identifier:          789KPZ2n5HT7Cwpd3qMaeLEs7eEx3VZWyp2LD63r+Rg=
Subject key identifier:   5B:95:68:18:8E:22:D0:6D:5D:FA:80:7A:34:0F:38:5C:18:3B:36:39
Authority key identifier: D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
Certificate issuer:       /CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Certificate serial:       019684DAB830A7DAE8F484E645637A44C279
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
Manifest number:          0C09
Signing time:             Wed 30 Apr 2025 04:00:48 +0000
Manifest this update:     Wed 30 Apr 2025 04:00:48 +0000
Manifest next update:     Thu 01 May 2025 04:00:48 +0000
Files and hashes:         1: 1NhufQc6nk1p7HFcNiMXaAWJTVo.crl (hash: qJPa8Kk80cc9bQgt4kiDdabNVJ5o/u1nv/Rm5xJFZus=)
                          2: yVOuH9GnWiOJ4T0Bjcul16G_CUI.roa (hash: cYY3QuLeMs+0RKKYLhzyVIgFcgFYuNr0hEZcjUsKwaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:da:b8:30:a7:da:e8:f4:84:e6:45:63:7a:44:c2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
        Validity
            Not Before: Apr 30 04:00:48 2025 GMT
            Not After : May  1 04:00:48 2025 GMT
        Subject: CN=5b9568188e22d06d5dfa807a340f385c183b3639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cf:13:c0:76:e2:65:89:9f:9f:e4:b7:64:37:
                    f5:98:75:4f:a8:6d:a3:83:93:ae:a5:34:0b:e0:e2:
                    3a:6f:d9:e0:c6:0f:d9:95:46:f2:21:67:7c:b1:0e:
                    81:a2:5d:85:b4:f1:97:f9:51:d6:dc:94:3a:10:83:
                    8a:6c:fa:ba:87:46:1d:b4:5e:3b:25:d0:57:80:fb:
                    1b:dc:06:1b:1e:0a:03:c7:11:a6:0d:e7:8c:ca:16:
                    3e:62:52:f9:b9:28:b4:23:d3:d9:75:b5:d1:ea:a9:
                    3e:71:d9:d3:a6:c2:99:5f:6f:dc:eb:f2:16:77:78:
                    bf:5e:18:a4:fc:ef:3a:af:de:df:d0:cd:29:5a:94:
                    85:0e:6e:2f:d1:cc:cf:68:c1:93:ab:f5:16:f1:36:
                    87:84:e0:93:83:d7:69:48:d5:e2:12:03:6e:4b:7c:
                    28:08:c8:c1:a8:80:ce:68:7c:60:e8:8b:cf:7b:ea:
                    b5:75:cb:12:cd:aa:96:a4:d4:49:f4:e2:2f:c7:cb:
                    12:b8:7a:bc:cf:98:79:87:cb:2e:f6:d2:d5:6c:3c:
                    c9:7e:e8:9d:9a:66:0b:67:20:1d:c0:4c:49:41:01:
                    5c:eb:a0:a2:e4:58:74:51:6a:79:2d:e6:ce:f3:47:
                    77:93:c4:d6:51:99:5d:ac:10:f7:14:5d:7e:c0:f8:
                    9b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:95:68:18:8E:22:D0:6D:5D:FA:80:7A:34:0F:38:5C:18:3B:36:39
            X509v3 Authority Key Identifier:
                keyid:D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:3d:a8:41:2e:71:c8:be:25:69:f6:b5:cc:da:1b:a3:a7:09:
         a5:3e:96:78:20:d9:2d:6a:0d:ce:12:7c:9d:d1:c7:e2:3e:4b:
         07:e1:c5:68:9a:60:15:81:60:da:af:79:67:55:e3:dc:a3:f1:
         9a:40:38:d5:0b:26:1c:d3:70:69:fd:eb:63:5e:3c:7d:ec:2c:
         44:5b:de:fd:69:3f:fe:a1:0d:e5:bb:44:4b:57:ed:75:58:38:
         60:3e:8e:4d:df:f5:b9:02:21:de:b2:c5:21:bb:e5:45:79:fd:
         23:0d:e5:f5:80:f9:40:fa:6d:df:af:8c:17:52:88:ef:86:d8:
         9a:01:0d:17:9b:32:5d:42:de:57:52:94:74:ae:5c:c4:df:13:
         ad:dc:21:ea:22:71:08:a2:3b:df:f1:9b:51:c3:05:e2:ef:5d:
         76:48:b9:74:de:26:e0:5b:1a:e7:95:bc:f6:39:b8:fd:30:dc:
         0a:a5:00:dd:a6:eb:a4:eb:47:24:af:14:85:b7:57:88:50:2d:
         5f:0c:70:21:6f:55:08:a3:3a:86:77:27:95:5b:08:f6:bb:5b:
         8b:e1:59:67:49:ba:6b:87:32:c1:09:5e:38:6b:91:15:b1:ed:
         42:24:e3:05:bf:3f:ed:1b:6c:1d:e9:e6:23:8c:ff:22:d9:22:
         82:38:67:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:52:10 2025 by rpki-client