Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
File:                     0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft (raw, json)
Hash identifier:          nYB0Zuo6pmHE/soVIDd+zfIbb3hfTWaNkUBRV2c0Gc4=
Subject key identifier:   74:B6:3E:5A:B9:0E:FE:C9:CC:A2:F5:C9:B7:2C:C2:C9:A9:75:99:A5
Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
Certificate issuer:       /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Certificate serial:       01964DEC349051C1A14421C7D16780C7422D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
Manifest number:          08FE
Signing time:             Sat 19 Apr 2025 12:00:47 +0000
Manifest this update:     Sat 19 Apr 2025 12:00:47 +0000
Manifest next update:     Sun 20 Apr 2025 12:00:47 +0000
Files and hashes:         1: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl (hash: VaFR0rDOQobvNa9KxjzgiYQkes/aDjrVJoqUmNOyWNg=)
                          2: lPRYsXr9JuYhFsnWzjWNX4jmwLk.roa (hash: iBeGuJYtICJBlFiRT2Vx63Td8Xc0QnYIl7/YBwzr0yk=)
                          3: nse16AXrwM95FOL9jR_rmw-FBUU.roa (hash: CGc2Mm01WTMfgJYYXJTw2QH6yfxtC7+nYMl9iTzeZeA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 12:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:ec:34:90:51:c1:a1:44:21:c7:d1:67:80:c7:42:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
        Validity
            Not Before: Apr 19 12:00:47 2025 GMT
            Not After : Apr 20 12:00:47 2025 GMT
        Subject: CN=74b63e5ab90efec9cca2f5c9b72cc2c9a97599a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:92:ba:cf:54:84:7c:a6:eb:d1:92:6f:9e:
                    9d:0f:3b:a5:c0:c8:7d:26:fc:6b:f3:0b:40:ff:a3:
                    27:bc:ed:74:cf:82:f6:8c:ae:2e:38:1c:da:3b:d1:
                    73:71:63:78:4e:e6:58:b9:e2:15:38:fc:b7:6a:e8:
                    37:6d:b9:a0:31:12:f9:c9:68:5f:e8:ac:af:1e:42:
                    b6:2f:71:b8:24:f6:c5:4e:55:c5:ef:48:8d:59:2a:
                    0d:62:ac:ab:64:5b:da:a9:80:4c:19:4e:dc:06:e6:
                    62:bb:44:5e:f5:99:fa:45:d1:08:1c:58:df:a8:32:
                    8a:87:bd:e1:14:17:e0:18:34:62:b7:bc:85:e9:09:
                    99:a8:96:d6:a4:9e:58:69:79:19:97:7c:ec:b4:da:
                    8e:c2:05:e4:92:f1:e4:99:f5:61:9c:6d:48:ac:48:
                    e5:2e:d9:ee:af:a5:04:f7:39:45:89:ad:42:bc:73:
                    36:b5:b5:23:b6:6d:e9:0f:7c:d3:a3:5a:0e:44:30:
                    2e:a2:ec:9f:92:24:18:12:fb:69:ed:5b:84:a7:ea:
                    0a:f1:e8:a1:6b:83:1f:14:03:bf:3f:5c:99:30:d2:
                    51:c2:7b:10:91:8e:49:64:8c:5e:65:db:3f:68:13:
                    00:bc:5e:c9:5c:9a:02:7e:4c:48:f9:c2:00:8a:48:
                    29:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B6:3E:5A:B9:0E:FE:C9:CC:A2:F5:C9:B7:2C:C2:C9:A9:75:99:A5
            X509v3 Authority Key Identifier:
                keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:09:36:a8:63:6f:23:6c:ea:d1:ac:b4:08:d7:47:a6:67:1d:
         af:cc:79:6a:f5:a0:95:7e:83:4e:0c:07:cc:02:19:80:e2:f9:
         7d:3b:ee:99:6b:41:13:f7:7e:15:43:48:3a:cd:0f:6d:53:dc:
         e7:50:c6:8d:9f:b7:d0:71:35:80:9f:9e:20:75:c2:92:4d:23:
         41:2e:1c:db:3b:66:b1:86:72:55:47:f0:b1:02:13:78:98:d4:
         bb:4d:ac:29:98:6c:6d:8d:a2:8c:c6:29:21:6f:7e:b3:69:a0:
         1e:24:03:3a:25:bf:18:65:ac:d2:80:31:7c:c6:52:9d:4e:81:
         ff:8c:7c:b3:9c:57:3f:8f:99:cf:bd:da:ad:f9:6d:4e:66:8d:
         3a:d1:07:73:3d:23:9e:3a:d3:2a:ed:4e:de:13:b1:69:2d:0c:
         63:6c:16:b2:1f:25:90:d3:c6:f7:98:86:07:cb:b7:9e:7b:62:
         75:88:e9:4d:ae:34:fa:84:be:5d:25:95:60:83:59:33:2f:f7:
         58:4f:5a:3e:ed:84:42:28:0a:80:64:ae:28:e7:52:5c:4c:26:
         56:b3:7e:50:0d:34:bf:fb:9d:a4:df:6c:d2:1c:b9:84:70:6e:
         4c:97:7a:bd:db:c3:38:10:13:b6:b3:fe:1b:2f:4c:5d:ae:21:
         f0:87:b9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:51:40 2025 by rpki-client