Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
File:                     4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft (raw, json)
Hash identifier:          7Pn30txX61cTRuOmkTKZQGJ/UsI3Z+LX6kuNKDUge2I=
Subject key identifier:   7E:50:B7:B0:D2:B9:98:56:5A:F1:4E:89:99:87:DC:08:C5:9D:BB:40
Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
Certificate issuer:       /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Certificate serial:       01964FA36B5ED61288708F1954876E135510
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
Manifest number:          150C
Signing time:             Sat 19 Apr 2025 20:00:32 +0000
Manifest this update:     Sat 19 Apr 2025 20:00:32 +0000
Manifest next update:     Sun 20 Apr 2025 20:00:32 +0000
Files and hashes:         1: 4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl (hash: igCQlkVBTjLrpk90YNmBV205ydpksI/1sktp3+sk5ec=)
                          2: 69Gg052Fvx4I2Fe4cFxkAgmaw8U.roa (hash: 4OJvsk33eSq4Pcms3ZWUp5ICc5rvGRU0gr/rstfeV/0=)
                          3: M0_KB7YWngkVytRrWSYysj7YJLA.roa (hash: Wx2mA+u5jzHoEfTRzsY0nX3Oe/9sdMOBfbPWiWl5Xlc=)
                          4: V0Sp0TtSbp08bch-dMvX-f8oa2o.roa (hash: JjHFR/Br8lLNxd0wBIShn4KBf2iV68ca7V3XI/Bh6Lc=)
                          5: w2HliW1FxAoWboCzBC57HQK_5M4.roa (hash: 1o/6TghmsgYeou6D438p0wdWpOeCHDeKRbg9VK0Bxfs=)
                          6: z5K__5uwKXFTzaD79qKBdTd2bJI.roa (hash: Cp/izXCB0pUAYpj87c/lOI2duT2TX+EDfDIWds1Fqng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 20:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:a3:6b:5e:d6:12:88:70:8f:19:54:87:6e:13:55:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
        Validity
            Not Before: Apr 19 20:00:32 2025 GMT
            Not After : Apr 20 20:00:32 2025 GMT
        Subject: CN=7e50b7b0d2b998565af14e899987dc08c59dbb40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3c:69:5b:5f:94:17:82:0a:8f:86:e3:a9:33:
                    aa:fe:f6:ac:3f:a4:fb:51:7b:3d:8f:76:53:5f:18:
                    e5:62:9f:4a:e6:01:97:0b:27:bc:3b:2f:f8:5e:09:
                    82:5c:a4:1b:91:c5:5f:93:ed:c2:7c:d1:ae:d1:ff:
                    8f:2d:78:87:19:68:4a:ff:a1:76:59:d2:87:fb:7c:
                    3e:0e:57:c4:fc:fd:57:71:09:46:6e:d6:1a:ea:da:
                    e7:d6:2b:ee:17:78:99:e0:62:d9:ce:72:f1:a7:b0:
                    fa:f5:38:7e:94:6a:c6:f0:f4:55:2a:e0:38:19:c8:
                    ae:fb:76:c7:4d:2e:2a:b2:20:6b:2e:cf:51:b2:3a:
                    af:06:8a:84:d8:c3:cf:c4:e8:7d:66:52:7b:66:0a:
                    e6:9d:3e:6d:3d:db:56:8e:58:c5:bc:22:5d:6b:75:
                    9c:76:3d:db:2d:dc:ea:26:66:80:70:1f:c4:97:c2:
                    1f:12:83:16:89:fa:55:d6:67:7f:a1:aa:19:ab:be:
                    35:73:05:e7:10:8d:3f:c5:ed:78:55:7c:5a:ad:ef:
                    04:6b:71:44:d9:f4:67:f2:b0:11:84:cd:a9:86:ed:
                    eb:cc:5b:cf:06:f6:1d:ad:f5:27:90:95:f0:ed:a9:
                    cc:6e:57:92:27:cd:99:60:f2:b6:23:63:6d:2e:e2:
                    22:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:50:B7:B0:D2:B9:98:56:5A:F1:4E:89:99:87:DC:08:C5:9D:BB:40
            X509v3 Authority Key Identifier:
                keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:7f:e5:14:34:b2:4c:d7:04:d2:c8:4b:c4:c1:b6:a3:5b:ad:
         25:0a:bf:bc:0b:a4:b4:11:e9:da:14:fe:1e:cf:fd:60:fc:0c:
         99:f2:f3:72:0c:1a:af:8c:0d:2a:b3:13:73:15:fe:7a:7f:0d:
         14:71:a5:8c:d6:c7:7c:e6:17:f0:79:06:e6:34:a4:fd:01:3e:
         d9:b4:df:a4:1f:29:a4:4f:bc:6d:d3:be:9e:16:56:39:db:20:
         07:2e:7d:ff:a2:d5:dd:39:96:6a:b5:3a:36:7d:05:5f:e2:1a:
         7d:5f:a6:c5:b1:49:c3:0d:8b:66:b8:c4:cc:c6:73:c9:51:73:
         7f:07:91:f4:9c:23:d3:88:64:b3:79:fd:c5:97:df:2f:07:be:
         d7:e3:31:c5:f8:42:e8:28:d0:5b:8d:6a:b6:b9:1a:47:06:fd:
         6f:8a:8a:be:14:ee:96:09:e9:a9:27:1c:65:9e:d3:f7:9e:01:
         52:bb:a4:74:e8:13:fc:0f:7b:30:71:18:ac:b7:3c:75:30:d9:
         13:f5:de:48:ca:59:b1:72:86:63:87:ba:fa:c5:a1:cc:78:2c:
         84:71:c6:74:1f:ec:c9:52:85:8f:ef:11:67:0d:d1:f5:9f:3c:
         b1:db:75:70:48:9c:6f:0b:13:57:88:97:47:c4:33:8b:af:ff:
         55:36:fc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:16:21 2025 by rpki-client