Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
File:                     boP2het7ai-EZLmXEpM41j9-7Wo.mft (raw, json)
Hash identifier:          rYqByIpwPueV5+eL33iJg+s0xOAIC4KhXkP9Hx0pTbo=
Subject key identifier:   FF:DF:A3:1A:2D:3E:A8:78:14:1D:24:DC:AF:BA:25:C8:E3:47:C4:05
Authority key identifier: 6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
Certificate issuer:       /CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Certificate serial:       01964F35AC2E6421A6CB5545014FAE72FF24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
Manifest number:          14F9
Signing time:             Sat 19 Apr 2025 18:00:39 +0000
Manifest this update:     Sat 19 Apr 2025 18:00:39 +0000
Manifest next update:     Sun 20 Apr 2025 18:00:39 +0000
Files and hashes:         1: boP2het7ai-EZLmXEpM41j9-7Wo.crl (hash: SSLJSyg2iZZ6JeZtR8yip3dFyzLB3xfBF8TXiIiGVl8=)
                          2: xL1waNLH89tu16gqR_InkZtP0MM.roa (hash: UbiBAyPW5WcKpHG6QUDn1a6TZhLyyQKfdK3u0M9NdEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:35:ac:2e:64:21:a6:cb:55:45:01:4f:ae:72:ff:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
        Validity
            Not Before: Apr 19 18:00:39 2025 GMT
            Not After : Apr 20 18:00:39 2025 GMT
        Subject: CN=ffdfa31a2d3ea878141d24dcafba25c8e347c405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:af:46:17:2d:f5:d0:e8:40:be:9f:0c:68:
                    8f:09:86:b8:8e:ba:21:4f:04:16:ae:0b:58:a9:27:
                    97:d1:f6:d2:e9:83:8c:78:8a:f8:6b:b5:a4:4d:e5:
                    3b:9d:f6:b8:ed:ef:97:08:e9:33:ce:43:02:de:28:
                    2f:9f:70:08:a8:5b:b7:f4:df:78:6c:ab:db:a2:6f:
                    85:6b:e9:13:66:79:f6:83:71:75:41:29:8c:8b:39:
                    59:10:d9:a4:79:a8:c0:94:18:ec:c7:d1:84:b5:c3:
                    2d:b3:e8:ef:96:02:08:71:19:af:4e:6f:62:b6:0f:
                    71:67:1a:db:44:81:f7:cb:11:57:8d:64:7a:67:ff:
                    b7:3a:0d:a5:57:71:c9:c4:17:3d:0e:90:81:ee:53:
                    b9:01:9d:f5:b3:a2:4c:2d:34:12:23:13:37:91:4f:
                    44:ae:c9:81:ea:dd:28:f7:71:87:ea:a0:16:15:13:
                    99:19:69:c1:9b:9b:31:62:24:c1:30:5c:f5:f8:02:
                    ff:80:b1:98:59:91:5c:db:bc:50:7b:6c:22:b0:39:
                    d5:3c:8e:f3:6f:c2:d8:31:5c:2a:33:b0:db:87:36:
                    cf:24:16:38:ed:eb:d9:b2:78:4c:7d:5f:cd:99:5d:
                    c2:40:71:5d:2a:62:42:98:53:1e:c2:3f:56:cf:c3:
                    bc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DF:A3:1A:2D:3E:A8:78:14:1D:24:DC:AF:BA:25:C8:E3:47:C4:05
            X509v3 Authority Key Identifier:
                keyid:6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:37:c6:71:f8:8d:ca:fb:8f:64:78:c2:e1:c9:fc:2b:ec:46:
         b2:a1:ac:09:2f:e2:9d:f7:67:95:39:ab:54:6f:1f:aa:ed:f7:
         8a:03:33:f0:dc:ca:c7:c7:12:7b:2b:2a:77:18:d7:69:ba:c2:
         61:50:67:03:f4:b1:2a:1f:56:cc:a3:d9:d0:a6:88:8f:e4:03:
         80:34:b0:31:8a:e7:5a:a0:87:d4:36:b2:9c:f7:cc:f9:a8:f5:
         04:89:c0:a0:41:02:c8:32:6f:ff:00:74:3a:92:4f:7d:65:8b:
         1a:9b:04:be:84:e9:fb:ba:6d:95:e1:1e:ba:27:5a:ed:c6:c1:
         c3:89:a0:a5:e6:8d:1c:e9:56:32:c8:be:8d:74:f6:45:0f:0f:
         ea:54:ac:02:8c:7e:a8:af:6e:31:46:74:23:ff:48:07:45:12:
         a0:2c:d9:2a:be:42:c1:b7:02:4b:65:38:42:96:b5:27:4a:ff:
         53:ad:ef:d4:bc:e0:fe:7f:72:9a:97:62:fa:bd:7e:69:34:94:
         9f:e8:21:dd:a7:6e:38:69:21:f6:ea:74:c7:4b:db:dc:e2:07:
         f0:84:a3:2e:aa:78:71:bc:73:43:2e:4b:63:47:d6:8e:90:0e:
         93:0a:f3:64:70:98:f8:9d:62:fd:f5:e9:d0:94:c1:d0:80:e0:
         8a:34:ae:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:04:56 2025 by rpki-client