Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
File:                     4d9YUq-QW0Ff31PjKHb1enTWwfA.mft (raw, json)
Hash identifier:          oqMv+V2/f4Z433STG7do4EUsmrbW8Y38C9ol0sEHZo4=
Subject key identifier:   25:15:D0:91:8B:EC:36:F6:42:81:60:1F:29:94:B8:F2:D1:6A:D3:20
Authority key identifier: E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
Certificate issuer:       /CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Certificate serial:       019673B0506ADCBF097A274B87F862E6817B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
Manifest number:          0E1E
Signing time:             Sat 26 Apr 2025 20:00:56 +0000
Manifest this update:     Sat 26 Apr 2025 20:00:56 +0000
Manifest next update:     Sun 27 Apr 2025 20:00:56 +0000
Files and hashes:         1: 4d9YUq-QW0Ff31PjKHb1enTWwfA.crl (hash: lEOjwvt0Bn8y9bB0Wu4iTISWKYpJRpcaUBapmrKBYJs=)
                          2: cD_mZgVZwLPlXPcv17kJI-LgBr4.roa (hash: KNwGHjS6BluwkxT0qyW7BxgZYc1pPDj7oHyq37oQR90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:b0:50:6a:dc:bf:09:7a:27:4b:87:f8:62:e6:81:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
        Validity
            Not Before: Apr 26 20:00:56 2025 GMT
            Not After : Apr 27 20:00:56 2025 GMT
        Subject: CN=2515d0918bec36f64281601f2994b8f2d16ad320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ec:bd:8e:3f:3e:22:ff:77:62:40:33:b9:62:
                    7c:01:77:56:c4:da:64:23:46:54:43:c6:72:f1:d9:
                    f3:79:da:f0:fc:ab:ba:ab:d5:b4:82:04:31:17:1a:
                    4e:bd:2d:b7:1a:7a:0c:7e:7d:0a:cb:0f:cb:d6:cb:
                    6c:d2:a0:e0:cc:cd:ae:52:00:ba:cc:14:6c:3c:a0:
                    4d:d1:af:51:f5:3e:47:e3:c5:c2:e8:ea:04:25:8d:
                    cd:51:86:72:da:3e:51:19:18:fc:8d:0e:b0:53:6a:
                    ab:6e:34:6c:c1:53:a5:a1:96:cb:b5:97:fb:03:00:
                    43:04:4d:d1:59:3d:28:ec:2b:bf:e1:f2:e6:c0:c4:
                    6d:2d:e7:9e:19:af:53:89:93:ef:a9:a8:14:2b:23:
                    8d:09:ab:50:4b:bf:9b:bb:f8:12:94:0e:bc:c6:93:
                    8d:84:5d:ff:e6:76:de:e3:5e:23:ee:42:b4:10:a5:
                    92:a8:53:b7:1c:4f:9b:91:fa:60:94:ef:49:bb:20:
                    e4:97:d5:d5:58:14:17:43:fb:40:fc:9b:e8:23:2c:
                    74:07:c0:70:f8:21:d1:2a:a4:e9:1c:54:e4:94:97:
                    31:65:2f:ec:b7:21:fc:7a:12:e9:31:b6:79:34:e5:
                    5a:54:fe:c7:73:1e:1c:07:c6:47:21:0d:9a:d5:f6:
                    1e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:15:D0:91:8B:EC:36:F6:42:81:60:1F:29:94:B8:F2:D1:6A:D3:20
            X509v3 Authority Key Identifier:
                keyid:E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:3c:00:5e:3f:20:05:58:3a:0b:7b:96:2e:76:32:1c:2b:5f:
         de:a6:49:a2:a6:00:79:53:9b:1e:05:01:41:75:ba:03:a2:c1:
         78:6d:4a:68:a9:8f:07:33:38:ef:ef:69:41:d1:33:5e:ae:81:
         57:e8:88:0f:30:22:9a:b3:5b:15:61:46:d3:4f:5d:76:27:ce:
         ac:40:b0:f3:7f:10:56:43:21:ae:57:f0:75:5a:2e:8f:88:64:
         fc:f8:b9:5e:0e:bb:fd:0b:8d:ba:84:20:bc:80:df:65:57:eb:
         3c:dc:d5:19:52:ed:0e:ca:8f:0e:10:91:c7:b8:26:78:f7:44:
         31:17:31:3d:b0:fc:f9:51:fc:4a:45:d7:f7:20:f9:96:71:27:
         f6:58:37:8e:60:d7:09:10:81:70:f8:19:2e:63:53:ac:a7:22:
         2a:eb:3e:33:44:0d:a1:05:e5:5a:96:92:34:a8:9e:06:d3:24:
         ec:d9:25:0a:1d:11:1b:56:bf:98:ed:11:a6:a6:a1:90:bd:72:
         a8:4b:21:b0:0e:89:fa:13:40:6c:3f:10:d8:54:ee:55:05:ae:
         87:d9:17:e0:00:0d:66:9d:5c:90:76:5b:4e:28:fb:50:23:06:
         e0:16:ca:78:a6:c3:cd:c6:22:93:e0:8a:fa:d7:96:ef:91:ef:
         00:1a:8a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:19 2025 by rpki-client