Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
File:                     d8pTqKWgOwVcs_NA_L64XXrUh6g.mft (raw, json)
Hash identifier:          95wi6b2TPcmWLiCeOfuDmSIglqQfb0l4Ixe+KNaLuIQ=
Subject key identifier:   F8:20:35:CD:A9:F8:7E:BE:7D:4F:1A:8B:3F:56:CC:FA:EA:22:4C:5A
Authority key identifier: 77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8
Certificate issuer:       /CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
Certificate serial:       01964E22ED047580906DFAEC75FBE287918C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
Manifest number:          0924
Signing time:             Sat 19 Apr 2025 13:00:33 +0000
Manifest this update:     Sat 19 Apr 2025 13:00:33 +0000
Manifest next update:     Sun 20 Apr 2025 13:00:33 +0000
Files and hashes:         1: 9zwR0ItkTBE3NBrhNXLgD19Ygh0.roa (hash: 668uqZpsKXpsQP4NHjfvBq7qiMq3YrFIWJSOqGsUVvE=)
                          2: d8pTqKWgOwVcs_NA_L64XXrUh6g.crl (hash: INX7J1hJpql22xQ7w4gms78nauOuC/Pk5Dy+axI0hOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:22:ed:04:75:80:90:6d:fa:ec:75:fb:e2:87:91:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
        Validity
            Not Before: Apr 19 13:00:33 2025 GMT
            Not After : Apr 20 13:00:33 2025 GMT
        Subject: CN=f82035cda9f87ebe7d4f1a8b3f56ccfaea224c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:69:59:f3:5f:e0:2d:dc:02:3e:06:a3:03:71:
                    ac:04:05:11:07:23:04:07:e7:01:55:d8:0c:e2:62:
                    bf:0e:9b:6e:91:2e:e6:cf:9f:d4:53:6b:8f:2d:7c:
                    99:94:a4:17:19:22:fc:fa:b3:d2:bb:b2:86:1e:7e:
                    5e:6a:74:57:1c:62:04:c9:39:f2:11:fc:4e:5c:f9:
                    be:59:24:2c:bb:0a:a1:4d:50:bf:99:03:b7:16:04:
                    34:01:22:aa:ec:bd:96:24:4f:97:a7:54:80:bd:1b:
                    03:23:09:19:9e:01:c0:c0:b8:ee:bf:69:58:e4:ae:
                    3d:c4:00:b9:64:9d:c9:2c:4f:df:4a:b0:d0:a2:7a:
                    3b:da:c5:03:91:d9:58:32:b5:a6:29:2b:b0:1d:34:
                    16:85:8c:6a:39:23:8a:7f:16:c8:fb:b5:84:52:be:
                    09:79:29:bf:01:f8:54:0f:23:04:c1:dc:62:42:f1:
                    34:62:06:9f:71:ed:4c:08:52:bc:e4:40:93:d5:ec:
                    a8:42:63:60:a2:e7:af:0b:46:80:a2:76:a1:1c:a4:
                    c5:e5:13:2e:9c:bf:57:5e:07:9e:c1:3a:ac:65:0a:
                    11:88:9a:23:22:a8:00:73:4f:ca:cc:65:d5:12:b4:
                    cb:2d:50:df:d4:fa:d4:35:1e:d6:9a:24:e8:fe:60:
                    ee:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:20:35:CD:A9:F8:7E:BE:7D:4F:1A:8B:3F:56:CC:FA:EA:22:4C:5A
            X509v3 Authority Key Identifier:
                keyid:77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c4:00:4f:f1:c7:8c:11:c5:f5:af:c4:9c:fa:33:90:ac:7e:
         dd:fd:2e:74:57:37:f3:91:b3:97:f0:42:b5:91:6c:1e:31:57:
         c7:1c:57:fa:9d:66:65:57:4b:73:a6:c5:bb:2d:61:16:ec:98:
         5a:5c:4e:fa:e0:dc:bd:e1:7a:25:e2:d8:b9:e8:df:3e:a6:90:
         bf:ff:9e:86:bb:9b:10:82:42:4a:a2:3b:ac:aa:47:cb:03:9c:
         df:85:63:6f:3b:e1:0e:c9:ee:57:4f:12:a0:58:e6:df:e8:ef:
         a4:46:76:72:d9:13:bd:2f:7e:a4:48:98:27:f6:f1:8b:a7:79:
         94:17:9a:bf:68:41:86:0f:48:78:8f:81:d8:fb:db:d8:ca:30:
         33:0f:f0:4a:ad:0f:55:f9:84:3e:18:99:a6:04:be:85:61:cd:
         7a:50:58:75:cb:9b:9c:26:c8:4c:cd:f7:70:e9:5a:5c:00:d8:
         14:59:65:84:8c:93:f0:e7:74:01:b4:ce:b7:c0:5e:bf:66:bd:
         b0:11:ae:fa:c0:fe:38:2a:86:00:0e:78:ba:ff:ec:b7:cf:f1:
         c4:45:c5:bf:31:7d:1b:a3:d8:ec:18:f7:71:95:76:f4:8a:c0:
         68:c1:02:8d:b3:05:e2:02:c1:8e:2f:7d:fe:f5:c9:ca:4f:5a:
         44:25:ca:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:36:30 2025 by rpki-client