Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
File:                     sKclKqZD0NvELaQQ6cIPVwM2jNg.mft (raw, json)
Hash identifier:          w8qBPxlk2IM9mQLt4unt9++pIFxJvmpZLLw/3G0bc2E=
Subject key identifier:   D2:48:83:05:F3:8C:03:4A:FA:14:20:F0:56:16:51:43:2C:20:AC:65
Authority key identifier: B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8
Certificate issuer:       /CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
Certificate serial:       019652001DA70AB1F4B446B4CB769FCF08AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
Manifest number:          1500
Signing time:             Sun 20 Apr 2025 07:01:01 +0000
Manifest this update:     Sun 20 Apr 2025 07:01:01 +0000
Manifest next update:     Mon 21 Apr 2025 07:01:01 +0000
Files and hashes:         1: n60UwFRR1GBkJeWW6TyEPviSqRg.roa (hash: 1Igyo5YmuM6qjLho9mnJYZI0b/XVpfl/12bJjKoYl+o=)
                          2: sKclKqZD0NvELaQQ6cIPVwM2jNg.crl (hash: GbdsC7ro5YnIA96DgfiU2lrGPtR99iIXbT9dQN1uUmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:00:1d:a7:0a:b1:f4:b4:46:b4:cb:76:9f:cf:08:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
        Validity
            Not Before: Apr 20 07:01:01 2025 GMT
            Not After : Apr 21 07:01:01 2025 GMT
        Subject: CN=d2488305f38c034afa1420f0561651432c20ac65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ad:8f:82:23:18:b2:cc:70:e9:9f:fe:8f:74:
                    61:15:e4:5a:a3:60:1e:14:b2:5d:07:ed:37:53:10:
                    52:da:90:32:74:08:2b:12:0e:20:7f:41:e0:f5:33:
                    9c:e1:93:70:98:b7:ad:df:3d:5e:c1:5c:8e:2a:52:
                    37:3f:45:95:45:6a:c1:71:86:74:2f:e3:e3:21:ef:
                    84:19:c7:8e:91:e4:24:37:e4:b4:72:9f:91:62:ee:
                    98:fd:a1:8f:d2:30:40:f6:4a:50:c3:0e:73:38:cc:
                    02:0b:5f:04:6b:fb:d7:da:80:fc:0b:60:33:fb:7f:
                    5f:4e:ea:3f:fb:31:3f:4d:2c:0c:fc:95:e2:f5:69:
                    b3:6b:d8:97:2a:11:c8:17:c5:f8:d5:1c:b2:f1:87:
                    6c:b3:f8:1b:98:cf:2d:83:2e:03:2d:31:58:bf:fa:
                    e1:58:36:f8:aa:b1:44:2e:30:bf:67:2c:99:02:ba:
                    0e:f0:cb:c3:3e:ce:b7:d1:6d:4e:58:4d:e0:76:e5:
                    84:38:3c:4b:56:62:06:32:f6:85:41:bd:1a:e4:50:
                    46:50:89:08:3b:78:d7:77:41:8a:36:c9:d8:ce:f4:
                    bb:e1:6d:42:f8:9f:7c:b6:2d:ec:28:76:42:13:81:
                    30:25:c2:1f:bf:db:f2:42:8e:53:01:0e:ca:9f:08:
                    12:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:48:83:05:F3:8C:03:4A:FA:14:20:F0:56:16:51:43:2C:20:AC:65
            X509v3 Authority Key Identifier:
                keyid:B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:b2:ae:25:b2:f4:30:0d:bd:fb:0d:63:9c:8e:e9:72:7d:13:
         a4:7c:53:ce:c8:7c:4b:5b:69:7e:be:f7:49:e0:e6:87:0b:72:
         32:28:37:9d:ee:ab:df:db:23:90:c1:70:bf:de:3e:b8:b3:f2:
         2d:fe:ae:f1:b1:1c:35:e2:b9:e9:8b:d7:61:5d:06:de:48:41:
         0d:fb:53:04:ed:f8:39:09:29:4a:10:4a:f1:1a:16:08:96:1b:
         2c:84:b8:81:bc:97:1a:53:5b:da:19:61:de:c0:4e:5d:3d:1a:
         32:1c:76:e8:d6:37:94:a3:e5:f4:97:13:3c:22:f2:9d:93:23:
         5a:e7:ca:45:02:b0:85:54:a0:d0:43:4b:20:95:67:e7:9c:10:
         17:53:dc:c8:a9:38:f5:81:f5:e5:0c:a3:1e:1e:e1:7b:a5:04:
         1c:8a:8e:65:14:82:ae:a6:fc:ed:ae:79:fc:83:b5:0e:24:3c:
         4b:e2:5f:1b:da:99:4e:d8:57:0a:34:cf:cb:c2:e5:ed:4d:82:
         24:b9:43:55:b6:eb:b7:ce:80:5d:e6:c5:e5:c8:1c:9f:46:43:
         53:a7:43:74:c4:95:7e:a1:a0:29:5f:04:ea:2b:89:78:42:53:
         06:0f:2b:e1:2d:ed:2c:14:c5:22:a0:e4:86:5d:3c:c8:40:6a:
         43:67:1c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:52 2025 by rpki-client