Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
File:                     1-uJ7jB3msWHHmKt7hRU9a6N5774.mft (raw, json)
Hash identifier:          LRLNf7CtSp19KsQTG1puDn5YtAAA/CIxcNx+2JCBFx4=
Subject key identifier:   82:0D:19:12:08:07:E9:22:CD:BF:F6:1C:62:7F:51:5A:D5:26:83:AE
Authority key identifier: FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE
Certificate issuer:       /CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe
Certificate serial:       01964A0F0FB775F9A85E89A7909ACACCA5DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
Manifest number:          0420
Signing time:             Fri 18 Apr 2025 18:00:23 +0000
Manifest this update:     Fri 18 Apr 2025 18:00:23 +0000
Manifest next update:     Sat 19 Apr 2025 18:00:23 +0000
Files and hashes:         1: 1-uJ7jB3msWHHmKt7hRU9a6N5774.crl (hash: on3bZRvVytK/vpNDLo1NlzeNDhM5nGaHRj25RWMmUQQ=)
                          2: iRBbWvohEYJflS9OCEUVIoQSWfY.roa (hash: zk7p1QlOj9CX+QAjlGJs9mmfWeFhKlip2Q65HI1v4ZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 18:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:0f:0f:b7:75:f9:a8:5e:89:a7:90:9a:ca:cc:a5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe
        Validity
            Not Before: Apr 18 18:00:23 2025 GMT
            Not After : Apr 19 18:00:23 2025 GMT
        Subject: CN=820d19120807e922cdbff61c627f515ad52683ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:44:93:4b:b3:f7:6c:64:70:6b:e8:db:26:7d:
                    e6:56:96:62:ca:af:af:ac:c5:73:3b:17:c9:f0:a6:
                    30:03:9e:c9:a2:be:8d:6e:94:a9:61:7c:20:0b:58:
                    9a:b5:40:3f:00:d1:d9:a7:8a:2a:e6:3e:4a:f6:39:
                    c2:67:2b:9e:8c:9e:c5:5f:20:b6:50:4b:58:76:06:
                    ab:e2:46:06:5e:3a:38:1f:44:a6:38:97:af:a7:32:
                    cd:e6:82:7d:f5:78:8b:48:9f:4d:62:f1:a2:44:39:
                    11:79:12:a7:72:d2:46:27:b5:17:68:64:b1:0f:52:
                    de:2d:2e:6e:c6:71:2c:f5:e6:f6:2e:0a:09:33:db:
                    8d:22:47:1d:89:6e:0b:49:da:e1:2c:62:f4:62:f3:
                    34:e7:56:ca:1b:6a:94:c2:51:99:83:ce:8e:48:23:
                    65:5b:3b:f7:dd:39:cc:35:6f:d2:24:f1:b7:b2:2b:
                    eb:c3:3c:e1:bc:1c:a7:4b:fa:bf:f4:0d:12:b3:33:
                    9c:93:2c:e0:18:82:8a:60:85:6d:2e:76:7d:3f:ee:
                    ac:a8:36:61:c6:f9:90:2d:90:f7:21:b5:05:53:29:
                    84:8e:4f:93:1d:02:55:42:ac:8f:fa:97:a0:db:d3:
                    9a:62:73:88:dd:c8:49:a6:7c:c0:33:1e:e7:ce:dd:
                    2e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0D:19:12:08:07:E9:22:CD:BF:F6:1C:62:7F:51:5A:D5:26:83:AE
            X509v3 Authority Key Identifier:
                keyid:FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:35:dd:ac:ac:a6:0d:98:fa:bc:9e:6b:59:9a:40:ff:24:d0:
         24:86:58:4c:77:41:91:c6:c0:19:ab:6c:78:b1:3b:a7:19:f1:
         dd:ef:ac:f8:e5:1c:d5:d8:48:68:fd:bc:ed:93:d7:22:d5:a9:
         f1:d3:1a:66:4b:26:ee:6e:2d:1e:ac:61:1f:8d:d9:e9:ba:3c:
         07:c2:4b:60:35:03:ef:72:63:c8:78:1b:55:c2:43:fe:fd:d8:
         49:fb:2c:5c:ab:b9:cb:a8:ae:28:5d:05:70:86:86:df:0c:b7:
         99:d7:48:aa:9d:3c:91:18:e3:76:04:4e:91:74:73:f1:f6:88:
         37:c7:b7:1a:81:7a:48:cd:48:6b:94:c9:d7:fc:df:d6:5b:5c:
         91:2f:7c:47:e5:9f:ad:9f:1b:d4:35:6e:e7:48:f0:8a:61:b0:
         19:8f:f8:55:3a:0c:89:05:e8:19:5d:77:34:73:56:0c:1a:d4:
         9a:d1:29:c3:37:67:b9:93:65:49:24:e5:1a:ae:52:cf:ae:55:
         fc:f1:50:9e:8e:b5:58:aa:1f:48:89:16:f9:6c:e5:ea:7e:bd:
         55:31:37:a3:88:cc:7b:c1:44:51:43:c3:15:4b:28:b0:1c:7d:
         ca:6d:07:20:f3:b3:d1:72:ed:6a:ce:76:d1:0e:92:78:45:51:
         e6:d9:49:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:17:14 2025 by rpki-client