Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
File:                     qKJRFAEUyP2K1ftFtxiaunvFBI8.mft (raw, json)
Hash identifier:          QhVcrn08rnDyxOxIaxT6Qw8v87AWtbQv5WyztzaGDD0=
Subject key identifier:   E7:94:30:BD:28:16:43:E9:42:7A:5A:2B:26:18:93:08:EE:50:1D:65
Authority key identifier: A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
Certificate issuer:       /CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Certificate serial:       01964B907198C4AA3453D8AA378B8295E336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
Manifest number:          118B
Signing time:             Sat 19 Apr 2025 01:01:19 +0000
Manifest this update:     Sat 19 Apr 2025 01:01:19 +0000
Manifest next update:     Sun 20 Apr 2025 01:01:19 +0000
Files and hashes:         1: AHkD8Aaan3pABbcPGhXEHYTBg8Y.roa (hash: hXef/ttEb+W4FSVe0XdSIGoItwURMRnjh0hA4tDFc64=)
                          2: qKJRFAEUyP2K1ftFtxiaunvFBI8.crl (hash: teGvEQ1wF02NPauvA2gEgTXXxXI9TBi9pPRB1pPyle8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:90:71:98:c4:aa:34:53:d8:aa:37:8b:82:95:e3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
        Validity
            Not Before: Apr 19 01:01:19 2025 GMT
            Not After : Apr 20 01:01:19 2025 GMT
        Subject: CN=e79430bd281643e9427a5a2b26189308ee501d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:eb:e5:0e:01:54:08:55:2d:4f:c0:79:2b:72:
                    5c:8b:47:76:f9:d8:f0:a2:a8:ee:56:72:ad:33:25:
                    2b:ca:e1:77:99:a1:fb:7a:7a:ba:b1:07:92:ad:2a:
                    47:90:59:3a:fa:ae:aa:f5:af:40:9b:28:75:79:fc:
                    74:16:1e:f8:b9:3e:20:97:1a:49:22:3d:19:60:a6:
                    d5:cd:da:33:2a:12:62:81:1e:22:74:6e:15:1c:fe:
                    26:3a:7c:06:5f:45:bc:12:cd:48:2c:7a:56:cd:91:
                    b0:15:2f:8f:b1:63:be:c5:4d:3c:e5:51:46:1b:34:
                    03:9c:62:8e:ab:9a:f4:52:93:99:29:ec:30:23:be:
                    08:07:c3:ff:74:66:24:e6:08:1e:66:37:1d:77:0e:
                    75:c0:08:9b:f8:d6:07:ad:d9:32:77:57:26:9d:4a:
                    b4:47:20:eb:e6:58:0e:1a:b7:db:03:7a:fa:21:80:
                    1d:bb:cf:18:f1:6c:ed:9e:f7:b8:b4:66:22:92:28:
                    0f:89:73:8f:08:93:86:7e:ea:cc:0d:a1:2f:1d:9c:
                    ff:17:b8:32:e0:c2:ee:91:10:c1:68:87:49:ab:42:
                    e7:65:db:b9:d6:15:8e:8b:49:5d:f2:20:3e:b3:87:
                    99:ca:15:ce:4d:fb:ba:47:a1:64:9b:74:cf:a8:50:
                    e0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:94:30:BD:28:16:43:E9:42:7A:5A:2B:26:18:93:08:EE:50:1D:65
            X509v3 Authority Key Identifier:
                keyid:A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:28:2f:c7:da:af:ec:41:c8:87:68:9c:f9:3b:2a:e6:a3:39:
         cd:50:50:72:a2:79:1f:59:69:00:97:6a:f5:b1:1e:d6:6a:89:
         cf:3b:0a:87:ae:6a:2f:14:0e:39:c3:dd:38:57:39:bf:5c:65:
         fb:0e:86:e1:d0:b8:ea:0e:e6:66:64:7c:cd:01:7f:25:53:36:
         5a:4c:39:c9:d7:b9:bb:91:45:0f:8a:6f:5f:49:46:c8:0a:83:
         c4:f1:05:9a:70:5a:cb:81:0e:1a:71:c8:cb:0a:53:a7:51:32:
         2c:33:0f:2c:c0:83:08:1f:1a:3c:93:07:20:25:eb:88:d4:51:
         c0:f6:3f:a6:25:0f:c7:bc:16:3b:5e:35:ab:91:2d:7a:aa:03:
         4f:52:a4:cf:08:91:c8:00:7e:2e:54:2c:1a:5a:3e:26:e4:57:
         e7:19:95:80:27:0f:b6:51:41:dd:68:13:91:41:35:4a:bd:7e:
         d7:96:16:4d:32:46:89:55:39:62:2c:aa:77:e7:07:9c:b0:bd:
         d5:8e:0d:3a:13:5c:82:b1:63:68:4c:1a:21:98:f9:f3:47:19:
         ae:53:f2:8a:0d:34:56:09:08:f3:cf:ba:b1:1c:f9:71:e1:72:
         e8:a3:a6:db:1e:83:61:7f:fb:a8:cb:e9:14:1d:5d:0d:ec:3e:
         f4:19:6b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:04:18 2025 by rpki-client