Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
File:                     DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft (raw, json)
Hash identifier:          /nbkRG46tGbvai4Vq3ss50f4RzeI/N9lGnGL0J5GfBc=
Subject key identifier:   23:55:C5:A7:51:61:0F:5D:B2:B4:CB:F6:90:A4:74:5B:82:44:CC:AC
Authority key identifier: 0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76
Certificate issuer:       /CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
Certificate serial:       019655009B41ADAD73A58E442F4A34625648
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
Manifest number:          023E
Signing time:             Sun 20 Apr 2025 21:00:25 +0000
Manifest this update:     Sun 20 Apr 2025 21:00:25 +0000
Manifest next update:     Mon 21 Apr 2025 21:00:25 +0000
Files and hashes:         1: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl (hash: hdoc0M+Tg2vH+Ydc1S7G4wDa9rfk0GXJIdkGLEVo4rQ=)
                          2: WBCctmrLBY9TZchWHVefCJRpgwo.roa (hash: ha4SM2FYKNPb6uYgJ7O/6N/bp7uHsy7szwwtLn89ZkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 21:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:00:9b:41:ad:ad:73:a5:8e:44:2f:4a:34:62:56:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
        Validity
            Not Before: Apr 20 21:00:25 2025 GMT
            Not After : Apr 21 21:00:25 2025 GMT
        Subject: CN=2355c5a751610f5db2b4cbf690a4745b8244ccac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:21:04:55:ff:01:40:91:66:d6:fd:48:3f:
                    7d:08:05:d1:54:58:36:14:7d:73:f4:69:ac:43:71:
                    4d:21:e2:2f:15:df:7b:87:e1:40:e5:62:0a:f3:71:
                    12:15:af:ae:be:5f:4d:41:73:f4:de:af:98:e4:0f:
                    75:cc:b8:d1:d2:0b:6e:79:17:77:18:ce:4b:21:18:
                    53:f7:a7:d6:32:19:fc:dc:7c:b7:87:43:20:70:8c:
                    75:88:fe:9a:42:9f:27:ef:f2:45:af:ec:09:ea:b1:
                    47:88:72:ae:90:09:ae:8e:ea:60:ef:49:3d:0b:1e:
                    8f:9d:08:03:ca:08:1d:41:56:37:3a:9e:a8:af:b9:
                    6f:35:77:99:e9:35:93:be:d1:ac:64:48:2d:45:d3:
                    62:e9:db:70:e2:c4:76:51:e9:d9:d4:33:9c:f7:36:
                    78:d6:fe:4a:f7:0e:b3:45:ef:72:e8:38:92:81:05:
                    ad:b1:02:0f:64:36:c7:20:3c:ff:4a:0b:98:99:33:
                    a2:6f:a9:bc:77:b7:83:85:32:a0:13:dd:80:65:99:
                    67:47:28:fc:1c:b3:22:e8:6e:94:31:c9:c8:12:cc:
                    2c:9f:b6:1e:74:ea:06:8b:98:76:48:2e:39:ea:79:
                    64:23:64:f5:85:9a:f4:34:15:ae:92:8b:85:f4:3e:
                    c3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:55:C5:A7:51:61:0F:5D:B2:B4:CB:F6:90:A4:74:5B:82:44:CC:AC
            X509v3 Authority Key Identifier:
                keyid:0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:8a:6d:c4:e7:70:66:08:3a:65:9c:4d:ff:45:52:3f:f5:1f:
         ab:80:65:04:9d:30:8f:27:51:29:28:81:49:bb:e0:8e:49:59:
         47:67:68:88:7f:3a:53:b3:e4:06:31:ea:4a:b7:fc:63:03:71:
         1e:35:cd:88:59:dc:c4:71:dc:6f:22:03:ac:0a:76:f7:0d:7a:
         51:fb:01:21:f1:c3:94:35:c2:b3:e7:93:24:65:c6:29:b2:98:
         89:1f:b5:8e:6f:7e:f3:d8:ff:cc:7b:9f:24:da:d0:94:c8:3c:
         6e:29:7d:51:30:ff:83:cf:b4:df:10:d5:f8:9e:7e:94:79:ee:
         13:fe:4d:f7:3a:8e:8e:4e:b4:f2:34:8e:28:a1:8d:17:39:a1:
         ca:20:59:5c:f3:78:d1:bc:b0:c2:b6:d8:a1:10:e4:aa:38:fe:
         23:6d:5e:f9:db:ee:7d:cd:42:49:27:9e:cc:ff:30:46:38:c9:
         87:da:74:10:8e:b0:b8:03:c5:e5:09:a6:fd:6f:bd:f9:f1:f5:
         53:9c:16:1b:6c:85:cc:d2:f5:f0:73:29:d1:85:5b:42:60:0c:
         a0:95:88:45:ce:bd:7e:0f:8f:33:5e:4e:38:fa:9a:ad:81:61:
         3e:7b:fc:c0:6d:a3:19:4c:8c:3b:28:5a:35:d1:f3:ae:c5:ca:
         a2:18:ee:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:50 2025 by rpki-client