Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
File:                     0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json)
Hash identifier:          Me89Tk75tvrxcLRE9mxbpqoV++5DFoJmEKC/BOELohg=
Subject key identifier:   7B:56:2B:D9:B8:AA:18:84:3F:7B:9E:95:F5:B8:D1:40:14:B5:A9:77
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Certificate issuer:       /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial:       01964067D2F2D9168CF7C739CFA24FF3A39E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
Manifest number:          0954
Signing time:             Wed 16 Apr 2025 21:01:08 +0000
Manifest this update:     Wed 16 Apr 2025 21:01:08 +0000
Manifest next update:     Thu 17 Apr 2025 21:01:08 +0000
Files and hashes:         1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: KCKrRWgW4ndqVm1izzdychKd8z8FakQUxrBZ5D1Sagg=)
                          2: my3o3dT-eplM7qhNIqgkY-xUMAU.roa (hash: FEhLISLzUVk+az2cUSg9otpj4LY6SNS67CMNyG2sJTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:40:67:d2:f2:d9:16:8c:f7:c7:39:cf:a2:4f:f3:a3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
        Validity
            Not Before: Apr 16 21:01:08 2025 GMT
            Not After : Apr 17 21:01:08 2025 GMT
        Subject: CN=7b562bd9b8aa18843f7b9e95f5b8d14014b5a977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a9:51:81:ea:38:e9:c7:14:b1:2a:cf:b2:ad:
                    ea:a4:69:96:98:e4:e8:64:08:ac:af:a3:91:60:96:
                    d2:a3:80:96:77:e4:1f:42:32:37:7e:e8:40:cc:ec:
                    69:42:c3:72:34:28:f9:9a:5e:22:ba:69:60:77:42:
                    33:56:78:af:23:40:38:d3:d1:d3:c2:81:b6:16:a6:
                    94:1f:3b:02:f6:d9:db:29:c1:07:6f:c5:17:c3:15:
                    d0:29:3e:9d:0e:b2:ba:fa:f2:fb:7c:72:f0:28:81:
                    b0:c6:27:aa:2b:97:86:38:ec:ae:0d:eb:5c:32:4c:
                    f6:1b:a6:c1:26:be:07:ab:3e:54:c6:d3:cf:8e:cf:
                    f5:6f:77:d9:c1:f3:da:52:a8:81:51:ae:b8:10:28:
                    aa:49:e3:d9:9d:4d:eb:b8:85:99:f0:4d:12:4a:18:
                    47:25:27:0a:66:6a:26:db:51:73:ef:ee:3c:3a:a8:
                    ca:f3:c1:93:b2:47:4f:a4:4c:83:f3:47:c3:ee:48:
                    08:8f:c6:ef:1b:e4:8e:f1:0e:2e:8c:e1:b0:8c:26:
                    df:81:5b:a3:e7:13:46:18:fd:54:97:4c:8c:f3:76:
                    7d:c7:ff:9d:e0:39:80:19:96:bc:90:68:38:fc:6e:
                    72:d3:85:3c:13:2d:84:4e:44:50:c0:b5:90:44:c1:
                    d0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:56:2B:D9:B8:AA:18:84:3F:7B:9E:95:F5:B8:D1:40:14:B5:A9:77
            X509v3 Authority Key Identifier:
                keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:7c:45:32:af:7d:1f:8c:2c:7d:cf:56:59:df:87:b4:db:74:
         29:69:27:2f:ff:64:d4:df:1d:c3:72:d3:ec:2c:55:7a:14:ee:
         e3:5b:ff:a2:bd:c2:b8:26:fc:1b:b7:53:a8:63:44:75:bc:e8:
         cb:d8:a7:49:f2:b5:58:b5:90:17:56:e5:df:8c:88:aa:e3:31:
         23:90:c7:ab:ee:d7:f6:86:cd:a4:94:51:5e:18:df:77:17:46:
         99:a1:87:b4:ec:69:b3:28:e4:85:6e:c7:57:fa:2b:95:8b:9e:
         15:b1:7e:88:41:86:40:70:83:c3:a1:33:5a:c4:59:9f:09:fd:
         7f:57:be:25:06:e7:39:df:f2:38:c4:46:d1:cd:6f:10:a0:06:
         cb:4a:23:f3:89:56:b3:80:5b:77:f7:c6:92:69:ba:8d:67:db:
         64:69:d9:ef:8b:6a:c1:00:c8:77:a9:31:44:c8:5b:af:56:05:
         4b:4f:43:c4:d9:d0:fc:1a:47:0e:18:f2:da:3e:19:ef:83:41:
         16:d2:87:fc:5d:a1:d3:14:14:a9:61:a3:9d:13:04:71:94:bc:
         39:c2:84:da:1f:f4:90:b8:29:aa:73:2e:d7:da:86:59:dc:4d:
         4c:b7:56:77:64:b9:1c:bf:6b:27:85:11:e8:2e:bf:35:75:18:
         98:3f:7e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:23:29 2025 by rpki-client