Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
File:                     grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json)
Hash identifier:          WknT7kyaBClpSAtitdQBgZsDTPvvKb0kLs1q92GuXZU=
Subject key identifier:   49:4D:7E:16:AA:07:DD:40:59:A2:A3:0A:F2:3B:AF:AD:AE:B4:3B:C1
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Certificate issuer:       /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial:       0196556EAFB355A7AEA83F8E0A60082AE4C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
Manifest number:          10A3
Signing time:             Sun 20 Apr 2025 23:00:39 +0000
Manifest this update:     Sun 20 Apr 2025 23:00:39 +0000
Manifest next update:     Mon 21 Apr 2025 23:00:39 +0000
Files and hashes:         1: 2x3GH0uugj9PiKapw7_y_5XF8YY.roa (hash: Q5ocnBPifUXZuaMrfYFAL794jt6aZyPuaM4u2/TpMXA=)
                          2: cYL1PLXBlxYVDNJh8eskDp73wJI.roa (hash: sc3bndIqRaS/g3PvEGkay4IT17gUF6IlbM+GmNxxekk=)
                          3: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: HrxU9otaHHLA7uGzWBiSKimZIZ219aS1z7vj2tR/Kls=)
                          4: jkh_FFhFNHENA3gIbYhebQVvuBM.roa (hash: cA2VhsNT4DoSkMtREZkBzaZ4CHPg5DwGT95fVOvu/Ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:6e:af:b3:55:a7:ae:a8:3f:8e:0a:60:08:2a:e4:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
        Validity
            Not Before: Apr 20 23:00:39 2025 GMT
            Not After : Apr 21 23:00:39 2025 GMT
        Subject: CN=494d7e16aa07dd4059a2a30af23bafadaeb43bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d6:7f:e0:54:c8:5b:96:38:0b:bf:2e:2a:e9:
                    b6:c0:d5:cf:f9:a5:12:87:cb:8c:a0:4b:74:66:52:
                    fd:e5:b1:ce:0d:1e:6c:99:eb:9d:77:59:da:fe:56:
                    dc:ce:88:e6:36:7d:3b:56:d4:b2:e8:3b:56:03:3c:
                    6a:47:1d:56:76:c1:0e:d1:ed:55:67:1a:41:e8:89:
                    e6:e2:e7:e9:01:5c:2a:c6:7c:8b:8f:64:d8:88:0a:
                    39:32:c7:64:f4:a3:4b:66:25:0f:c6:11:79:89:03:
                    13:a1:8e:1c:16:e9:12:a4:f6:a8:dd:60:aa:17:b1:
                    a2:e8:0c:76:42:b0:5f:c8:57:1d:8d:28:43:32:9b:
                    47:c7:fc:ea:f9:cd:0f:79:fd:4e:01:df:0f:b3:1b:
                    3d:3d:da:1f:1c:48:6d:40:60:13:fd:53:7d:fc:99:
                    42:f7:ad:2f:e3:76:3f:29:d9:49:2c:18:4d:40:45:
                    cb:70:13:3c:54:1b:ba:f6:c4:b3:51:e1:84:3a:20:
                    45:5c:9e:89:cb:d9:86:15:ad:c5:a9:c0:3b:c0:11:
                    dd:0b:6e:f7:10:8d:45:31:d8:53:c4:b7:a1:d2:93:
                    33:46:c0:8c:79:6e:2a:61:4d:33:26:4e:15:93:4a:
                    43:39:80:be:fb:69:94:50:b3:ff:6f:10:19:b5:b6:
                    9b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4D:7E:16:AA:07:DD:40:59:A2:A3:0A:F2:3B:AF:AD:AE:B4:3B:C1
            X509v3 Authority Key Identifier:
                keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9f:f1:a9:2f:91:06:fb:15:8f:c5:41:2b:b0:e6:e5:f3:1e:
         ce:ab:b8:b3:a3:0a:20:31:a1:83:02:06:67:d0:99:47:f7:cb:
         94:b9:d4:86:57:f3:09:c9:52:32:00:30:5f:be:94:e8:ed:86:
         ae:46:36:a2:87:4e:86:01:45:b8:e1:e3:4a:57:93:b0:be:4c:
         d5:f6:f5:56:b8:9f:7f:ac:fa:82:53:83:05:d2:a0:22:62:32:
         73:cc:c4:38:10:8e:2f:11:a7:8a:a1:d9:d2:41:17:61:79:ef:
         5f:fb:4e:ba:4e:39:6f:08:1f:b5:3a:6d:3d:5e:c3:36:cb:ec:
         87:17:62:33:5d:da:44:c3:dd:ce:01:83:2b:c4:2a:c2:f1:97:
         b4:e4:a3:6d:d5:84:74:81:ce:00:31:81:5a:e2:23:72:1d:e8:
         5c:ef:c1:54:bc:74:c1:d3:60:d2:fe:ce:1b:aa:7c:94:c0:b8:
         11:1d:27:f1:f9:fa:fe:22:c0:36:4d:27:86:82:05:0a:46:69:
         45:c4:7c:d6:e6:bf:af:e2:ea:e1:a0:e7:5a:18:05:0e:d7:64:
         99:9a:4e:aa:03:93:44:d2:7c:c4:6e:3b:e1:5f:b5:e3:de:0f:
         45:15:f5:da:d6:f0:10:d9:15:c6:f5:73:91:18:b5:0f:68:3e:
         31:3f:03:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:45 2025 by rpki-client