Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
File:                     46xjX9RfVHHGwsP-Re8btDOLwnk.mft (raw, json)
Hash identifier:          TvVIUKU1Ez42XL9io+i4C14h/8Si3Wsus+PFwpjpqN0=
Subject key identifier:   80:60:1C:CD:3C:65:84:DB:32:53:2D:47:77:B0:0F:77:5E:BF:C6:89
Authority key identifier: E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
Certificate issuer:       /CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Certificate serial:       0196575D04B33CAD92D87830B75931D30FC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
Manifest number:          1492
Signing time:             Mon 21 Apr 2025 08:00:35 +0000
Manifest this update:     Mon 21 Apr 2025 08:00:35 +0000
Manifest next update:     Tue 22 Apr 2025 08:00:35 +0000
Files and hashes:         1: 46xjX9RfVHHGwsP-Re8btDOLwnk.crl (hash: shTxM29d0uY+Z19u0RTYoNIJoNtD5dAnqGB8kZbK3PQ=)
                          2: kM9y4GrDXnCdNW0cB_r7lGW0ZiE.roa (hash: zTejL3tH1JMvgJP62ZpXEO3alzMxsTDuTLqKj9I1/dA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:57:5d:04:b3:3c:ad:92:d8:78:30:b7:59:31:d3:0f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
        Validity
            Not Before: Apr 21 08:00:35 2025 GMT
            Not After : Apr 22 08:00:35 2025 GMT
        Subject: CN=80601ccd3c6584db32532d4777b00f775ebfc689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6d:ab:25:94:a5:c7:fa:3c:2f:1a:b1:f2:c2:
                    7d:3b:cf:a8:1e:2e:5a:27:09:92:3a:03:29:b1:d7:
                    6c:59:00:3b:ed:2c:11:52:90:e6:7d:30:50:d1:db:
                    f8:40:87:2c:a8:39:f2:0a:71:16:34:31:17:ae:c5:
                    94:5f:f0:3e:26:db:52:5e:e2:e1:71:8f:60:8d:f0:
                    a9:53:97:57:88:8c:4f:32:b9:6d:38:23:0e:98:12:
                    9e:8a:ed:5c:7f:6a:5a:45:b0:79:ad:c6:c1:09:37:
                    e3:f7:a3:0a:a1:d9:c1:01:4f:d9:d1:e4:f0:53:43:
                    60:6b:c1:36:bd:94:a4:13:d3:a3:ec:92:03:a2:92:
                    85:89:67:e4:be:90:0e:b4:15:7f:5a:9a:0c:2d:24:
                    20:ad:8a:1a:9b:50:4f:50:b0:23:48:b6:c3:f9:31:
                    aa:29:db:34:2e:3e:a4:59:c6:df:b7:57:44:23:c6:
                    41:95:be:a2:bc:71:b3:09:5f:99:3e:44:11:26:96:
                    91:01:5e:02:ac:d9:38:14:1f:11:3f:51:54:a6:de:
                    41:1e:d5:22:55:41:52:90:8e:25:b8:87:90:f1:35:
                    f5:bc:0c:67:58:c5:1f:e3:41:3a:dd:a2:f2:b4:3f:
                    6c:09:e5:9e:01:86:83:16:1d:a0:be:fe:62:cc:21:
                    e9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:60:1C:CD:3C:65:84:DB:32:53:2D:47:77:B0:0F:77:5E:BF:C6:89
            X509v3 Authority Key Identifier:
                keyid:E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:90:7f:63:52:5c:80:1b:62:b3:a9:6b:c8:fa:ce:e5:8c:41:
         16:26:2f:3c:29:96:87:84:76:b6:8e:36:66:23:ca:eb:ee:6a:
         8a:85:92:81:ce:37:e1:d3:28:aa:6a:0c:50:9d:c2:33:31:9d:
         00:86:69:1c:2f:8e:ef:bf:54:d9:13:12:7a:c9:61:2f:38:20:
         2c:19:d4:02:6d:f8:d4:46:a7:54:1c:bc:77:e6:9d:84:dd:96:
         3f:dc:01:d7:80:6d:10:d2:df:1a:94:d2:18:aa:01:70:1b:83:
         c4:60:a5:ed:df:b2:dc:bd:9b:d9:69:2f:4d:c3:f9:39:01:7e:
         6d:62:45:84:fd:65:a1:39:be:b1:66:90:51:f1:59:05:fc:2f:
         7a:29:6b:79:df:6f:34:ed:da:d8:0a:0d:ae:ea:97:2b:bf:36:
         94:4d:aa:30:d9:16:9f:af:7d:86:32:bc:be:90:df:27:5f:01:
         c0:ee:89:01:1b:f2:f7:27:2c:85:0c:f3:b9:a5:80:85:06:ca:
         3f:c8:ff:c8:7e:81:97:30:63:4d:76:26:75:d7:3d:c8:83:bc:
         e4:fa:61:6d:68:35:de:84:62:b2:d8:7a:5f:95:f1:9f:3d:05:
         b4:37:0b:02:4f:b4:fe:60:35:87:60:04:b1:d9:ba:e4:50:32:
         0d:e8:c5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:18 2025 by rpki-client