Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
File:                     pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft (raw, json)
Hash identifier:          X/G9izcbh5zXG6DlhsRNNQriOAh9k+fYPlfpvN8yWNg=
Subject key identifier:   0C:89:86:41:A7:5E:27:15:AA:0C:80:A6:A8:98:8C:DE:90:E9:27:89
Authority key identifier: A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
Certificate issuer:       /CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Certificate serial:       01964D105EA9A90F7993FE31DA92433D7D7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
Manifest number:          14F8
Signing time:             Sat 19 Apr 2025 08:00:40 +0000
Manifest this update:     Sat 19 Apr 2025 08:00:40 +0000
Manifest next update:     Sun 20 Apr 2025 08:00:40 +0000
Files and hashes:         1: pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl (hash: 1H+iAO80wxiLD5ROdlGoc2AcIjduZgzN3KjD45e8EFw=)
                          2: vUo_vlJ6sLUoSusR9Owa3qVO6yc.roa (hash: tQbWOVu74034awYo0QKVFApUcQf9SPwefFwA/Lt3iQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:10:5e:a9:a9:0f:79:93:fe:31:da:92:43:3d:7d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
        Validity
            Not Before: Apr 19 08:00:40 2025 GMT
            Not After : Apr 20 08:00:40 2025 GMT
        Subject: CN=0c898641a75e2715aa0c80a6a8988cde90e92789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:07:ee:4f:b6:ea:60:03:e7:54:24:f0:fe:d4:
                    df:66:5c:42:34:e3:71:5f:8a:47:33:15:8a:2d:aa:
                    aa:53:94:74:dd:71:44:71:67:f0:68:6e:2f:02:a8:
                    31:1c:43:86:8e:86:93:ce:8b:5a:cf:05:3e:ca:bc:
                    b8:d6:1e:a4:eb:06:17:25:cd:22:7d:45:04:7b:fc:
                    33:bc:0f:03:e9:c0:83:0c:89:0d:d7:30:9d:ec:53:
                    cb:48:5f:fb:d3:15:c1:9b:8e:b3:ee:57:82:8f:a0:
                    d1:79:53:ff:ae:55:25:24:f0:1b:76:61:73:57:f8:
                    e1:89:56:ea:60:20:bd:a8:8b:18:57:c8:aa:2b:97:
                    fa:07:b5:d8:b0:4b:46:8a:9c:02:cc:02:d0:30:da:
                    cc:cb:fa:41:83:78:b8:6b:6a:81:e2:e9:03:a2:56:
                    b5:1c:87:8c:8d:eb:f1:ab:18:22:3d:29:9c:f4:95:
                    ca:45:9a:98:6b:5f:60:ac:ea:88:a4:bc:df:f8:da:
                    50:59:c7:8a:eb:87:d9:82:52:7c:b9:5c:7c:70:28:
                    f0:cf:40:11:d9:73:39:d6:18:2e:68:48:fc:98:d3:
                    50:cf:5f:4c:08:ac:b0:38:3e:54:89:93:3a:1e:05:
                    d2:ed:41:bf:a5:97:8c:52:45:10:cc:82:74:3a:55:
                    9b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:89:86:41:A7:5E:27:15:AA:0C:80:A6:A8:98:8C:DE:90:E9:27:89
            X509v3 Authority Key Identifier:
                keyid:A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ff:a3:83:da:ff:31:d1:ef:bf:38:8e:b6:68:e4:48:48:d0:
         04:19:a0:82:fc:c6:81:30:56:ec:2b:06:16:ce:4b:89:aa:d6:
         6f:85:c7:61:1d:8b:8d:93:7f:cb:18:fc:54:71:7e:d6:d4:bf:
         89:b0:b2:53:1d:0b:6d:5a:40:31:b7:39:12:ea:d3:c0:55:db:
         f0:d1:3f:61:17:44:5b:62:04:49:c6:99:bf:01:6c:e0:96:36:
         90:7e:de:1d:ec:21:6b:db:02:3f:01:d5:75:0f:e3:f9:11:e3:
         b7:f9:be:22:f2:a8:f9:d5:3b:17:62:1c:d7:8f:2c:6e:62:7b:
         f3:1d:b7:19:73:55:48:27:52:94:d1:ee:ef:bf:ca:f2:0c:c1:
         0f:54:56:4b:6d:06:d0:29:b2:4c:d2:1d:72:11:28:df:d0:61:
         96:46:ef:a6:fd:e7:aa:d2:47:3d:0f:95:36:f0:1d:d0:c8:d4:
         47:ee:f6:a9:a7:67:c8:bc:09:16:db:98:ce:89:03:d6:3d:e9:
         ca:df:f0:cb:6d:41:43:44:79:60:ab:8d:42:38:db:26:3b:c5:
         d2:9a:58:10:82:77:0a:28:25:90:04:88:72:80:36:9c:89:2e:
         ac:8a:db:d7:ad:1f:e2:46:b1:2c:de:fc:d2:b5:6e:30:d2:d5:
         10:57:58:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:10:39 2025 by rpki-client