Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
File:                     4QBqBtxJCZf_j8OkLs84m-090Xg.mft (raw, json)
Hash identifier:          ruizrI2vAPdBiwcTMXuWHDzU5k87xFqWaNychgoMrPk=
Subject key identifier:   27:CF:02:D9:CF:2C:F4:39:E9:0B:C3:1E:69:F9:C6:57:7E:2A:B3:10
Authority key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
Certificate issuer:       /CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Certificate serial:       01964BFD4B3FCF367F10771FC66667EB68F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
Manifest number:          14F9
Signing time:             Sat 19 Apr 2025 03:00:13 +0000
Manifest this update:     Sat 19 Apr 2025 03:00:13 +0000
Manifest next update:     Sun 20 Apr 2025 03:00:13 +0000
Files and hashes:         1: 4QBqBtxJCZf_j8OkLs84m-090Xg.crl (hash: BLswEmoNeXHISG43wTb/cfPYfX/RU42TWAwVm85hE5U=)
                          2: LnqHoulK3VATGmKEAn72iWxo7SM.roa (hash: yf2dP1AEzVPcio054NYKJ4SAhZkRjptLQTGykKC3qEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 03:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:fd:4b:3f:cf:36:7f:10:77:1f:c6:66:67:eb:68:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
        Validity
            Not Before: Apr 19 03:00:13 2025 GMT
            Not After : Apr 20 03:00:13 2025 GMT
        Subject: CN=27cf02d9cf2cf439e90bc31e69f9c6577e2ab310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:23:90:10:ee:67:73:34:39:90:53:38:0e:95:
                    3b:95:2a:80:d6:d0:86:b8:78:44:90:b4:ce:61:45:
                    cc:3f:f3:1a:23:13:85:4a:82:01:7c:99:71:40:99:
                    fc:c4:aa:bc:92:d1:71:4d:99:48:c6:ad:e6:5d:b1:
                    51:46:7a:76:28:a5:a8:8d:2f:d0:a5:01:c5:fe:92:
                    7e:f4:06:00:d5:ad:b0:ad:de:da:71:47:97:2e:2c:
                    9d:05:50:ea:b8:78:9b:a0:74:6d:e2:df:99:ad:7e:
                    21:05:8a:73:53:09:79:38:37:b3:22:63:3d:00:54:
                    d7:41:bc:a0:5b:52:03:8b:6b:c4:78:c3:5f:0d:d9:
                    54:3f:5a:8c:b4:c4:1c:b4:04:4e:46:93:0f:76:03:
                    87:bf:4e:91:1b:bf:90:55:67:8c:f7:5a:03:fe:92:
                    76:d8:c8:a5:e1:22:a0:83:90:42:51:8c:96:6c:8d:
                    e8:58:b7:24:71:8a:f3:9f:0e:c1:6f:f5:20:11:e2:
                    59:6d:ff:3e:8a:a1:a1:0e:61:e5:69:96:7f:f8:f8:
                    d0:d2:67:ca:55:49:37:84:d6:98:23:bc:62:30:4e:
                    25:52:a8:17:68:85:9a:80:d4:f1:8d:5a:bd:3f:fe:
                    00:f0:a2:f8:64:72:51:64:ed:d6:7a:03:f2:0d:1e:
                    9c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CF:02:D9:CF:2C:F4:39:E9:0B:C3:1E:69:F9:C6:57:7E:2A:B3:10
            X509v3 Authority Key Identifier:
                keyid:E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:34:8b:69:04:c2:e3:a4:ad:52:6e:a7:f0:4a:d6:53:49:f8:
         f7:4f:16:da:2e:03:0c:b1:c7:ee:61:2f:76:f5:20:3d:f0:0b:
         d3:6f:9d:3e:d7:42:56:f5:a1:7d:cc:31:1b:9d:4a:53:79:6c:
         01:5b:c0:95:64:c3:db:10:c5:c4:7d:1b:c7:6c:5e:3c:88:1d:
         71:1d:93:a5:21:14:20:81:fe:a7:c1:b3:e0:6c:0b:62:34:a1:
         e4:01:f7:6c:fd:af:fa:37:0f:34:58:56:9b:74:22:d2:10:0f:
         d3:ab:ca:91:e2:44:df:b6:3a:5b:f0:8b:3c:a1:26:1c:70:8e:
         db:cd:11:b2:33:d0:c8:c9:0d:b5:85:f0:75:2b:20:ea:c6:dd:
         51:2c:50:a6:cf:44:b3:3c:9e:d1:97:4c:e8:d7:bd:8a:ef:ea:
         a4:2b:2c:0a:ad:2a:6c:2a:7e:38:f1:0c:32:b1:bb:63:2c:48:
         e0:5a:18:f1:71:22:7b:04:44:c7:52:3b:c7:02:d4:47:2b:6a:
         e7:ef:77:8a:37:53:51:50:15:01:10:67:ca:79:a2:9f:42:48:
         73:25:75:d0:30:57:bf:b3:60:a0:2f:6d:d6:4e:51:f5:6d:f0:
         b8:9c:0a:4c:c6:d2:19:c6:32:4e:93:05:5e:ad:4d:93:ed:4f:
         12:e9:48:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:07:27 2025 by rpki-client