Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
File:                     d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft (raw, json)
Hash identifier:          5nHsXt2t7ryRoRBQroVfC4KWuVypg0T00KsunyWyGkc=
Subject key identifier:   40:09:F2:43:AA:D3:6C:EE:8B:45:2B:80:A1:D3:39:A3:B3:92:D5:D0
Authority key identifier: 77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
Certificate issuer:       /CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Certificate serial:       019676E8565DBA3CF8DFE821FC101A96A942
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
Manifest number:          0CAF
Signing time:             Sun 27 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 27 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 28 Apr 2025 11:01:00 +0000
Files and hashes:         1: d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl (hash: yzhSiZHn1b0MRiQr6LlBcvRt5ygyMfTpSorkvVr4FAU=)
                          2: hNGctvUgxsV9VRFcAR330Ay19l8.roa (hash: zQTWmn2EIkYMs7iDpMx3kmmkHaS8RfsfTxjAwAVdFG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:e8:56:5d:ba:3c:f8:df:e8:21:fc:10:1a:96:a9:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
        Validity
            Not Before: Apr 27 11:01:00 2025 GMT
            Not After : Apr 28 11:01:00 2025 GMT
        Subject: CN=4009f243aad36cee8b452b80a1d339a3b392d5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:08:4b:4e:98:15:00:2f:5e:73:9c:27:68:2b:
                    bd:1c:ce:6b:55:9c:06:f1:e6:12:1e:53:a6:38:6b:
                    b6:0c:14:71:86:61:ee:c9:df:ff:0c:12:20:b7:9e:
                    07:d7:d5:43:09:61:b7:f5:6b:3b:54:01:05:c8:a9:
                    01:ca:66:a2:6a:fe:ce:fa:e3:ad:c2:da:ad:90:52:
                    d0:28:0b:d9:09:60:8c:3b:43:79:75:93:79:2e:76:
                    ae:7d:53:b3:13:d7:21:f5:f6:3a:c2:8f:ff:66:87:
                    3e:6c:4b:d9:dd:6c:6d:ba:47:6f:a8:6e:3f:11:26:
                    90:64:cf:76:68:26:0f:8a:c8:02:0c:ee:a0:8c:1e:
                    55:c7:21:eb:dc:87:76:db:b6:e4:50:9a:bf:7a:da:
                    ec:1c:98:99:d4:5e:a8:67:e0:fb:ef:7a:7e:42:9c:
                    72:fc:32:9b:ff:46:4d:eb:98:98:f7:dc:5f:6f:2c:
                    5b:45:95:2e:51:2a:35:d2:db:36:2f:67:dc:3d:c6:
                    7e:07:5a:10:91:04:56:0c:05:ca:66:65:ed:8c:62:
                    79:99:5d:10:48:43:42:2b:44:85:a7:70:bb:cb:51:
                    2f:9d:2a:99:c3:d2:08:ca:d8:ae:ae:86:ac:64:94:
                    c5:5c:fd:88:40:78:e9:9c:8e:e2:6f:bb:15:96:21:
                    c3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:09:F2:43:AA:D3:6C:EE:8B:45:2B:80:A1:D3:39:A3:B3:92:D5:D0
            X509v3 Authority Key Identifier:
                keyid:77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:c8:97:97:6c:18:9a:c2:0f:9f:4c:ff:ca:cb:fa:01:80:7e:
         50:77:79:76:60:30:f2:2e:aa:fa:36:0f:38:cb:dd:91:98:9e:
         ce:4b:01:d7:09:63:56:58:63:10:fa:d8:c5:ee:9e:f7:62:7f:
         55:0b:6e:47:ef:60:14:50:6c:b9:e9:b1:04:3c:9a:56:11:e9:
         c8:61:11:74:f2:7f:f4:ec:cc:b9:0e:59:f3:ce:84:7d:bc:46:
         2b:2d:75:9d:d6:01:a2:3f:a9:46:26:61:56:ef:de:cc:2a:7a:
         d9:f5:6a:76:92:93:3b:34:7a:a8:36:bb:ab:6f:d0:71:a6:ab:
         4b:22:60:01:80:30:df:22:2e:7c:84:45:22:03:e2:71:40:32:
         e0:ff:8b:6c:71:e4:9e:20:03:88:fd:5f:65:95:59:19:01:90:
         aa:6c:31:16:c1:0f:7b:08:25:b6:e3:e1:bd:7f:91:41:c9:44:
         ab:39:31:e5:54:f8:7d:80:27:3f:23:f8:36:12:03:1b:0a:41:
         eb:28:64:f4:0d:8a:ca:95:ec:71:37:99:b5:ad:16:b6:03:14:
         5d:5e:45:b5:bf:8d:73:4b:65:c8:5b:0f:cd:58:75:b8:54:39:
         89:72:48:43:e1:a0:cb:3d:18:21:2c:91:3e:f5:b1:d9:6c:61:
         00:73:8d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:44:52 2025 by rpki-client