Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
File:                     8gwo0Z4N-1NIJqojqlBq9oowW3o.mft (raw, json)
Hash identifier:          mzeyIwjdz2UMPGrsu+vocVW3a2tg7SH30dLqnlE93UE=
Subject key identifier:   26:1B:94:BB:35:0E:BB:06:5D:8E:62:7A:C8:7E:D6:12:47:C7:F2:70
Authority key identifier: F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A
Certificate issuer:       /CN=f20c28d19e0dfb534826aa23aa506af68a305b7a
Certificate serial:       0196572636F6413CA5B8E698ED256DDE7074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
Manifest number:          1491
Signing time:             Mon 21 Apr 2025 07:00:44 +0000
Manifest this update:     Mon 21 Apr 2025 07:00:44 +0000
Manifest next update:     Tue 22 Apr 2025 07:00:44 +0000
Files and hashes:         1: 8gwo0Z4N-1NIJqojqlBq9oowW3o.crl (hash: Mddmx/PgFOCTacuP4TswsN/Fr8TpvCdD2hOnNevIGGg=)
                          2: eCt_o7wQa4uTOlJ8RZzlmDoTQs4.roa (hash: PGIcRqsMSnRyuLEgYQdmyq8FNdFdg9Cwl+Xi/IOiL8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 07:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:57:26:36:f6:41:3c:a5:b8:e6:98:ed:25:6d:de:70:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f20c28d19e0dfb534826aa23aa506af68a305b7a
        Validity
            Not Before: Apr 21 07:00:44 2025 GMT
            Not After : Apr 22 07:00:44 2025 GMT
        Subject: CN=261b94bb350ebb065d8e627ac87ed61247c7f270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:5b:cc:73:85:c7:33:1f:66:b7:7f:f2:35:
                    38:44:6a:9e:37:60:34:f3:36:9a:dc:ec:e3:17:a9:
                    f9:2c:2b:47:44:0b:08:6b:76:9a:c3:81:fd:e4:f6:
                    9f:f6:31:46:3c:ff:de:f9:14:66:32:ca:14:42:66:
                    00:24:0f:b5:3f:cd:a0:e9:15:7b:c2:b5:85:20:bc:
                    52:fc:19:04:b3:a1:df:e3:93:98:62:53:3a:22:f7:
                    e9:7b:40:00:d3:79:33:6b:aa:53:7c:c8:31:ff:8c:
                    e2:3a:d0:a1:67:60:d5:20:13:c5:df:e7:08:e3:42:
                    9e:24:d2:bf:ed:81:e5:79:97:fe:bf:81:c1:c6:cf:
                    1b:e5:df:a6:67:13:57:6e:ed:97:eb:0e:75:cf:5e:
                    28:6c:45:fd:77:88:0e:b4:57:fa:e5:41:e4:61:5f:
                    0d:e1:12:e7:e8:1f:78:d4:b8:76:91:d1:b2:da:b4:
                    ad:46:d8:4a:6d:9a:ec:c0:ea:b6:b6:a0:96:b3:a8:
                    d7:44:72:4e:63:4a:9d:1c:cb:a6:e1:d6:36:5b:92:
                    48:ad:a1:dd:79:9a:b5:65:16:ee:5d:21:1b:7a:c5:
                    04:6e:95:78:ba:4f:58:8d:e4:6f:2b:f5:1b:76:72:
                    98:50:58:35:bb:bf:cb:2b:ab:e8:82:4f:1c:ce:96:
                    86:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1B:94:BB:35:0E:BB:06:5D:8E:62:7A:C8:7E:D6:12:47:C7:F2:70
            X509v3 Authority Key Identifier:
                keyid:F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b5:1d:8c:0b:97:3e:68:43:e4:15:0f:a1:9b:5f:f4:26:df:
         32:1f:0e:f8:1a:8a:28:46:23:2a:e8:8f:f7:45:22:ea:4b:0c:
         0b:51:48:8e:7b:9d:3d:2a:31:e9:95:15:b6:d9:e5:30:6d:3f:
         f7:b4:e9:55:25:94:2e:f0:52:35:9f:8c:ea:99:33:f7:93:aa:
         cf:9c:5f:65:e8:3c:43:cf:c0:5b:c7:90:d2:96:7e:9f:bc:35:
         ae:e5:e1:3e:4f:66:40:af:c3:c1:9b:46:c6:a8:47:b1:51:a0:
         06:98:d8:a1:b3:df:74:f0:f1:5e:ce:59:6f:4b:0a:7c:cb:4b:
         e4:d9:45:c7:ed:d6:d8:e6:4b:0c:06:8b:8b:77:b2:ea:3d:ac:
         22:77:33:43:78:a9:51:67:2b:3f:e1:74:63:d4:35:fd:53:be:
         6a:41:a2:4f:97:d0:4b:16:ce:a0:18:b9:67:82:2e:63:b3:db:
         18:c9:69:1e:38:a2:36:20:c8:23:69:25:92:d4:bd:25:f8:17:
         34:46:da:75:ec:7a:3e:37:ac:77:b3:05:c6:9d:1f:b7:99:c0:
         39:62:55:dd:68:b0:a5:ef:77:21:e2:d7:e8:cd:12:45:da:2c:
         01:99:50:33:d9:44:f7:60:e6:e7:6d:e2:59:b3:f7:81:52:7c:
         c7:eb:88:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:15 2025 by rpki-client