Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
File:                     pOd3fHr7fUObRvaBxMe_aoJS4xU.mft (raw, json)
Hash identifier:          adah6XxxIpnj/qF4oglGtcClrTUJSxcd8uDolM6xuCQ=
Subject key identifier:   18:D5:3F:D4:A5:17:25:29:70:0A:BF:4A:EB:30:55:BD:DD:A4:A6:7E
Authority key identifier: A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
Certificate issuer:       /CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Certificate serial:       01964D7EE4D53A69D85F02E36F6954C9CE14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
Manifest number:          0BE5
Signing time:             Sat 19 Apr 2025 10:01:23 +0000
Manifest this update:     Sat 19 Apr 2025 10:01:23 +0000
Manifest next update:     Sun 20 Apr 2025 10:01:23 +0000
Files and hashes:         1: pOd3fHr7fUObRvaBxMe_aoJS4xU.crl (hash: L3fQTjXNddbxf83O1+9QSLYOGOTlLKPc0VM8fsMDK0o=)
                          2: z4rUk_E4AGcR7M7P_EXqaAGwIrE.roa (hash: vdPESCF/t7U31UD2O57fuph7iNy0Hlzj8MYZvwZ4bj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7e:e4:d5:3a:69:d8:5f:02:e3:6f:69:54:c9:ce:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
        Validity
            Not Before: Apr 19 10:01:23 2025 GMT
            Not After : Apr 20 10:01:23 2025 GMT
        Subject: CN=18d53fd4a5172529700abf4aeb3055bddda4a67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:04:ef:eb:41:2e:9d:7b:a4:4e:2b:2c:ca:23:
                    65:cc:92:97:27:7c:9c:f0:6d:7d:a6:c1:33:24:52:
                    37:3d:67:cd:e4:f2:1c:15:2a:71:50:4b:74:f6:9d:
                    49:73:b8:7f:af:66:f4:71:4d:5e:f9:46:3e:71:c1:
                    14:86:5b:74:74:25:e2:27:c7:bc:75:fb:30:92:05:
                    2a:fe:b8:eb:4b:aa:59:88:68:78:66:88:74:bf:a4:
                    bd:b2:a4:3d:bd:50:74:ed:f0:e3:98:80:d7:32:30:
                    ac:1f:f9:9a:a6:12:ec:b2:6d:ab:90:90:d2:87:2f:
                    56:26:01:b8:80:e0:3d:63:04:93:38:88:87:ed:7f:
                    0f:51:e2:80:3b:0a:af:42:46:7c:28:88:94:fa:13:
                    0f:ed:66:af:ff:96:8a:ad:de:5a:d4:4a:4f:18:53:
                    39:77:95:46:2e:02:a6:a8:7d:cb:4d:7a:7c:e4:ff:
                    59:1c:32:2e:e0:19:c8:f0:e6:34:68:5d:0a:63:12:
                    f9:d9:cc:4c:7d:3d:47:cf:96:0a:a6:a6:9a:be:60:
                    37:f4:7d:bd:6e:cc:1a:76:b3:3b:c8:a8:5b:a0:88:
                    4e:30:89:fd:24:c3:58:6d:ff:a9:e3:53:fc:6a:71:
                    26:82:05:bc:6a:88:39:a3:e3:eb:c0:89:5a:9d:59:
                    29:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D5:3F:D4:A5:17:25:29:70:0A:BF:4A:EB:30:55:BD:DD:A4:A6:7E
            X509v3 Authority Key Identifier:
                keyid:A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:50:64:76:79:62:27:a0:3a:b5:d8:1d:53:50:87:b3:3b:b1:
         34:be:47:11:7e:cd:86:fe:8d:ec:aa:40:b2:f1:51:9e:52:a2:
         ab:b7:74:90:c5:fe:fb:ee:35:5d:6c:74:f2:83:6e:7b:d0:a8:
         c6:73:a2:61:2e:02:27:13:5b:38:7b:d2:d0:d5:ad:64:9e:ff:
         ce:5c:c1:73:40:fd:4e:38:fa:a6:48:c3:50:be:dd:d5:52:e5:
         2e:3c:3b:b2:a3:22:ae:f7:d7:b0:74:4b:f3:68:6c:d5:51:04:
         98:49:d3:dd:ec:f6:ab:0e:2f:e1:36:64:dd:6f:eb:cf:81:16:
         15:0e:8d:df:cc:95:30:62:fb:9e:e1:66:ee:fd:41:95:83:9f:
         13:15:14:32:44:0d:69:7b:93:ad:59:46:2c:b6:13:82:73:56:
         70:28:0c:a9:35:be:1f:ef:4c:93:7c:19:30:40:79:a3:c9:b2:
         33:ff:36:3d:44:6e:54:0b:26:78:6f:f6:91:23:d7:83:01:98:
         28:e8:f3:67:6b:27:bb:1c:28:67:74:d9:52:e8:9d:da:8b:9d:
         ff:25:37:41:95:ae:19:3a:84:63:39:06:e5:53:4d:ab:1f:96:
         dd:22:a0:cf:e0:66:4f:ea:3c:f3:49:6f:9f:fa:2b:c6:cd:d0:
         44:37:29:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:02:16 2025 by rpki-client