Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
File:                     cPK0H9NmFINeM_wIgdskY4s6eHs.mft (raw, json)
Hash identifier:          bhfMYb6l10BhkFa766XWcGuHSBEIRpqCt1BSDc/yhnE=
Subject key identifier:   16:8C:7C:65:D1:66:05:EA:EC:A3:60:FE:2B:37:77:2E:19:19:0C:5C
Authority key identifier: 70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
Certificate issuer:       /CN=70f2b41fd36614835e33fc0881db24638b3a787b
Certificate serial:       0196451F9129CC8241B0E88AEB1779CE7340
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
Manifest number:          11E5
Signing time:             Thu 17 Apr 2025 19:00:18 +0000
Manifest this update:     Thu 17 Apr 2025 19:00:18 +0000
Manifest next update:     Fri 18 Apr 2025 19:00:18 +0000
Files and hashes:         1: cPK0H9NmFINeM_wIgdskY4s6eHs.crl (hash: rDC60xdWC9ZLxSsEZUCXpd2b37Ktnkg/PO+9Wgsmwmc=)
                          2: iViHONOdVrtJaKvFtb1zW5ZiFfE.roa (hash: y//sfFe0FaBOPBIT3c460VOfTsEZyJ671nHpKb/hUio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:1f:91:29:cc:82:41:b0:e8:8a:eb:17:79:ce:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f2b41fd36614835e33fc0881db24638b3a787b
        Validity
            Not Before: Apr 17 19:00:18 2025 GMT
            Not After : Apr 18 19:00:18 2025 GMT
        Subject: CN=168c7c65d16605eaeca360fe2b37772e19190c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:eb:5f:b2:02:84:f2:64:81:16:6f:bb:70:8d:
                    ae:6c:4a:b4:3a:0b:cc:dc:70:53:11:b6:f4:29:04:
                    93:10:4e:59:cf:5b:37:23:44:1e:85:6f:23:49:bc:
                    89:dc:c7:49:2d:d6:a0:4a:44:c9:37:5a:9a:70:84:
                    31:74:75:a5:38:55:be:d7:36:c0:43:ee:0b:a9:9c:
                    3f:cb:f6:66:59:45:94:f7:26:bc:8b:be:ca:63:7c:
                    dd:17:a6:49:db:51:58:2a:cf:40:38:7b:81:98:c8:
                    1b:be:50:2b:c1:ce:2b:30:e5:35:93:be:1a:d8:2f:
                    e7:30:93:33:5c:5e:28:ad:1d:e7:c2:29:b0:8c:56:
                    b4:19:18:4b:6d:34:f1:bd:0d:62:20:49:94:25:41:
                    4a:80:28:a0:c1:38:74:58:43:d5:4d:19:f6:99:cc:
                    45:cb:84:26:f6:fc:2a:60:f9:7c:15:3b:98:28:2b:
                    a0:eb:bd:bd:85:c3:28:9e:bf:e4:08:ed:19:45:11:
                    af:f8:65:3a:c6:31:0a:35:e5:c5:50:e8:70:ce:8a:
                    7a:bd:70:a9:91:fa:97:d5:01:dc:a1:79:37:c2:e6:
                    1e:d1:fb:f0:3a:13:12:5f:7b:c6:de:c1:56:31:5e:
                    13:87:05:fc:68:db:9a:98:81:9b:43:46:26:56:af:
                    9c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8C:7C:65:D1:66:05:EA:EC:A3:60:FE:2B:37:77:2E:19:19:0C:5C
            X509v3 Authority Key Identifier:
                keyid:70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c0:7b:6c:0b:fa:04:05:7c:96:c6:4e:c3:0f:ae:fa:b0:be:
         56:5c:00:35:21:28:ca:c1:28:0f:f9:ef:b6:e1:dc:3a:22:0b:
         a4:a5:59:8a:37:1c:b9:9a:ce:9b:70:6d:03:e5:52:75:53:7b:
         c1:12:5f:5f:70:e8:a5:5f:0c:8b:6c:4b:8e:a1:5a:92:92:d7:
         f7:1f:e0:8e:d6:92:a5:91:64:f7:e6:a6:89:9a:4b:b7:79:c1:
         8d:21:d2:71:4f:09:8e:0c:92:db:76:6d:0f:90:a2:89:ef:68:
         18:ec:a7:14:61:a4:36:26:bd:a5:92:c6:bb:c7:97:ec:37:ef:
         bd:16:bf:49:d5:fc:3b:ba:b1:97:81:83:d2:5f:df:e8:e8:b0:
         11:97:14:75:76:b6:22:94:37:ad:f1:54:04:d1:64:cf:b5:75:
         b8:3e:98:cd:17:59:06:6c:8e:42:e6:61:43:65:0f:cf:56:95:
         fb:08:f0:2d:37:27:1f:a0:06:34:bc:24:4b:b7:a7:ff:40:14:
         77:7a:e1:bd:17:9c:2c:96:3f:80:0e:76:83:ff:37:c8:df:e1:
         a5:bc:18:1f:89:f3:7e:04:ab:6d:5b:f2:b7:eb:ec:4a:ce:be:
         a0:82:00:18:61:00:02:30:38:0a:18:4f:de:8b:c6:cc:44:92:
         01:79:bf:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:36:26 2025 by rpki-client