Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
File:                     4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json)
Hash identifier:          aJ2XpMvZcRFh2tIISwXDxIMmlAgLGkQYnvCngzIb2OE=
Subject key identifier:   B8:A1:BC:41:6A:15:BF:63:81:6C:05:6E:09:7B:E4:49:40:18:ED:11
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Certificate issuer:       /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial:       01964D1066EEEF48781E145E8ED3C13BE996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
Manifest number:          154F
Signing time:             Sat 19 Apr 2025 08:00:42 +0000
Manifest this update:     Sat 19 Apr 2025 08:00:42 +0000
Manifest next update:     Sun 20 Apr 2025 08:00:42 +0000
Files and hashes:         1: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: GoedYCfEEngKTU8l9Lgq8wg0CtRpeaCj+slX1bzED0U=)
                          2: EERZ__dtLBxNrb4xviIUvrGB-a8.roa (hash: iXkp0sinzHN6/RBCDf5/vFrHJHlifR02gEFv9+yh+Ys=)
                          3: OrmnaIv7Ykw3uSFBs-BQky_7bs4.roa (hash: vkDAHcA+JuGp7WyKg9OyBQapexmqkZf8f/9s6IqTZIM=)
                          4: bLr6r57MqGHm8nK9w2IYUZH55ic.roa (hash: jUNvR24icg+/HoCVfLpAKbv7/xE1cDm9e9GWJS4plns=)
                          5: mslAiLHq2RhVoMBrlDZ7StvNRw0.roa (hash: 9NtVz0Q/+ObnJjRSZZ6ysBHLYm1GnmXiKVFqUmldHlw=)
                          6: s_WZrtHOlNd7wkkUhFGq2ejwDiQ.roa (hash: lRuZA83oB7sCJB/yZFB/ga5/o6PvU/KmR8+cgqPbV88=)
                          7: xxqAQj5ApVpCjQK_UbA4qZzprNM.roa (hash: kbcAcd5UMZoHVsf0Y1OkYvbV4qpft1douUqZabuqL8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:10:66:ee:ef:48:78:1e:14:5e:8e:d3:c1:3b:e9:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
        Validity
            Not Before: Apr 19 08:00:42 2025 GMT
            Not After : Apr 20 08:00:42 2025 GMT
        Subject: CN=b8a1bc416a15bf63816c056e097be4494018ed11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ef:90:20:6b:04:5d:c6:d5:9d:76:1b:25:55:
                    b5:d2:79:1d:46:9e:da:85:7c:36:be:f1:40:f2:5f:
                    32:74:1a:e7:0f:ad:89:aa:e5:3b:28:f3:24:6e:26:
                    8d:41:cc:93:9d:30:cd:8c:37:e0:27:eb:fc:14:f7:
                    6d:f0:33:f7:e8:7a:00:5f:1d:00:c9:b7:6d:98:85:
                    4a:3b:73:a5:20:18:ba:f0:74:5f:86:bb:6c:09:7d:
                    af:32:70:a4:f4:6a:98:c2:e3:a7:bd:83:d4:a9:de:
                    65:46:fd:3c:d3:21:d6:88:cf:9f:35:be:d6:19:16:
                    9e:a1:b1:9b:68:12:f6:51:24:13:14:50:09:6b:82:
                    cc:51:62:57:d6:66:e7:17:14:2a:da:92:72:31:18:
                    4d:1b:c4:17:cf:a2:9d:dd:b2:b2:a0:d7:93:9b:5c:
                    a4:1c:ff:d7:fa:ca:61:6e:86:9e:37:06:8c:e0:ec:
                    38:f8:1b:ac:46:b3:86:bf:40:7a:19:f6:f0:3a:82:
                    93:09:7f:a4:5e:7b:08:10:c1:8b:97:87:30:76:67:
                    54:b8:03:42:8a:0f:67:ce:56:4a:d9:76:7e:a7:60:
                    d1:dc:c4:e1:ae:c9:b7:ca:df:9b:59:e7:da:ea:57:
                    75:63:04:ac:fc:4c:39:fc:0f:43:c0:99:32:fc:76:
                    4c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A1:BC:41:6A:15:BF:63:81:6C:05:6E:09:7B:E4:49:40:18:ED:11
            X509v3 Authority Key Identifier:
                keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ae:ac:4b:57:9b:ca:10:3c:b9:29:6d:4c:a3:02:28:f5:f0:
         50:df:20:2b:5b:58:53:f9:21:57:9c:69:6b:10:a2:ff:4b:6d:
         ab:e5:88:88:96:6b:d5:57:f1:23:0e:44:be:22:0e:2b:ec:c5:
         bd:9a:78:23:17:57:b7:58:9c:c3:c3:db:68:7b:6e:eb:a1:ca:
         54:82:ea:36:aa:57:61:75:45:a9:88:fe:28:07:b5:1c:0e:e5:
         c5:11:43:b2:84:0d:9d:72:f1:c1:16:87:3a:5e:bb:d4:ef:97:
         a0:a5:c5:64:40:3b:1c:01:4d:c9:a4:ad:94:db:e7:5f:58:3e:
         38:93:03:b7:2c:c5:04:9b:0e:30:0c:54:5d:03:44:9b:7f:16:
         56:fc:d1:50:d3:ff:96:2a:b8:7f:65:c3:58:9c:d1:3b:05:0d:
         6f:85:1e:d8:a7:1b:80:aa:45:fe:2a:c3:1f:4a:de:77:c5:ce:
         c9:57:dd:31:7f:52:4c:97:84:16:92:f1:40:81:68:69:c1:61:
         7e:05:df:0b:96:5d:f3:18:24:5e:f0:e1:f2:22:10:4d:78:8d:
         3b:ae:66:c6:64:d0:a8:a3:9b:55:e3:67:31:bf:d8:43:84:d2:
         c9:40:ad:c5:d6:64:c3:38:e7:45:e1:a4:c5:c5:de:54:5d:ad:
         31:16:c2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:01:34 2025 by rpki-client