Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
File:                     EDWtT69cNx08JO1z-tZs3GrGuRg.mft (raw, json)
Hash identifier:          ED7uWugh1oG8Nm+yaJuKlifTlX/IQ8JbCdcy77Wp3Po=
Subject key identifier:   26:6B:90:65:33:1E:F6:19:69:95:DC:47:73:A5:4C:8C:BE:D4:2E:D8
Authority key identifier: 10:35:AD:4F:AF:5C:37:1D:3C:24:ED:73:FA:D6:6C:DC:6A:C6:B9:18
Certificate issuer:       /CN=1035ad4faf5c371d3c24ed73fad66cdc6ac6b918
Certificate serial:       019657944181EE1867FB2902C4932C62D018
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
Manifest number:          0568
Signing time:             Mon 21 Apr 2025 09:00:55 +0000
Manifest this update:     Mon 21 Apr 2025 09:00:55 +0000
Manifest next update:     Tue 22 Apr 2025 09:00:55 +0000
Files and hashes:         1: EDWtT69cNx08JO1z-tZs3GrGuRg.crl (hash: i/wP/xJ0o9datnQ0fn+czjYXdhxCBnF1dg70ZV86iLQ=)
                          2: qv58PcziHSozk6pOK4h_LgXLS7w.roa (hash: BZchB3z4vvljLfndUGS0R7LquQNr6/obSV/f0pocufU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 09:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:57:94:41:81:ee:18:67:fb:29:02:c4:93:2c:62:d0:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1035ad4faf5c371d3c24ed73fad66cdc6ac6b918
        Validity
            Not Before: Apr 21 09:00:55 2025 GMT
            Not After : Apr 22 09:00:55 2025 GMT
        Subject: CN=266b9065331ef6196995dc4773a54c8cbed42ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6c:fa:64:81:14:cf:83:93:f0:6c:36:a4:71:
                    8a:87:e0:21:d3:85:a1:12:df:a1:f4:da:23:00:a7:
                    5b:f3:bc:85:fd:73:a6:a9:33:52:ac:8a:8a:ce:73:
                    56:68:68:de:be:5f:31:6f:66:7c:eb:02:7d:47:3c:
                    81:69:fb:45:e5:68:f0:53:46:51:4a:14:b3:e3:7f:
                    bb:b4:f4:17:23:b3:e5:14:32:71:5d:6f:41:aa:31:
                    24:ff:cb:7f:f8:92:53:54:3b:77:eb:f7:b1:cb:9d:
                    2a:83:e3:e3:dd:99:03:d8:6e:91:a2:75:ee:5f:8a:
                    50:bc:bb:2a:92:39:6f:44:aa:b0:63:0b:c5:f4:2d:
                    e7:4a:dd:a9:65:6f:43:32:9e:39:b0:26:f9:88:aa:
                    b3:2f:79:40:5f:9b:42:eb:6f:73:e6:4c:06:a4:3c:
                    21:6c:3f:b1:82:41:bf:5c:da:45:b5:64:32:30:c2:
                    ce:fd:40:e6:64:82:f8:c6:57:ab:d5:03:27:ea:cb:
                    8c:84:4d:d5:f3:b0:c6:bc:d6:5e:e2:7c:ef:f8:78:
                    d8:3b:04:21:65:e3:e4:93:c3:a9:fd:2b:3d:78:a4:
                    62:e5:3b:31:48:00:1c:35:ce:21:ae:20:ba:ee:2a:
                    29:af:01:0f:1b:c0:06:ee:d7:d5:fe:7e:af:52:32:
                    69:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6B:90:65:33:1E:F6:19:69:95:DC:47:73:A5:4C:8C:BE:D4:2E:D8
            X509v3 Authority Key Identifier:
                keyid:10:35:AD:4F:AF:5C:37:1D:3C:24:ED:73:FA:D6:6C:DC:6A:C6:B9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b2:15:f5:74:97:14:ad:6b:f0:cc:68:1e:44:16:f2:81:a9:
         ab:c1:12:2b:06:f2:15:04:4b:64:b1:5b:46:52:fb:0b:23:ee:
         fe:5a:86:6b:f5:b2:67:96:5c:89:b5:03:d6:d9:f3:36:d2:45:
         29:52:81:6d:85:e9:88:64:71:51:fe:7c:d8:b7:8c:05:68:72:
         5e:ef:56:c0:6f:f1:a4:60:67:33:10:07:cd:ee:49:3f:03:36:
         e0:68:8d:af:c0:c2:73:b2:82:46:29:23:24:06:8b:3d:21:5e:
         73:5c:3e:9f:09:5b:59:24:fc:14:c8:57:d0:e9:72:05:78:91:
         0f:19:b5:33:0f:93:2d:35:9e:ae:6c:d0:fa:e5:07:40:08:e3:
         ab:9b:33:bb:58:24:0f:a9:fa:56:13:eb:6a:a6:05:e4:4a:49:
         e4:af:08:49:0b:f2:14:55:09:ae:28:cd:92:46:a3:ea:7c:66:
         81:71:16:49:51:cb:f7:fd:95:e8:06:bb:de:80:79:25:15:81:
         73:c8:be:e7:27:cc:c1:9e:ea:e3:fc:77:3b:9f:5f:3f:ce:33:
         f3:5e:64:54:70:72:91:11:cb:ae:6e:85:f1:62:a1:c5:06:93:
         02:2f:ff:f8:03:14:2e:d6:73:ef:f1:9d:3f:3f:e5:6c:d3:b2:
         f0:ab:4d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:16:44 2025 by rpki-client