Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
File:                     4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft (raw, json)
Hash identifier:          9OLeM9fq7wMN0ErDqS8lyvwa14qSF+oiGtLX8t4Mlx8=
Subject key identifier:   F3:1A:88:76:B6:35:F0:88:4C:D6:22:AA:37:FE:AC:BC:F0:34:E8:32
Authority key identifier: E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
Certificate issuer:       /CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Certificate serial:       019650119F0A2EFED031A7237EFC4BCDD1A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
Manifest number:          0E3A
Signing time:             Sat 19 Apr 2025 22:00:54 +0000
Manifest this update:     Sat 19 Apr 2025 22:00:54 +0000
Manifest next update:     Sun 20 Apr 2025 22:00:54 +0000
Files and hashes:         1: 4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl (hash: 6eYLW1ih7xvX98xwBPDm1CSAUWhUilnkErJk2FlVZXs=)
                          2: GLpHbmgk_HKZm99_6XW1zFhPnQ0.roa (hash: L9ftFB4BS92bIq/ClzkGPs+4wSqKQ5UFQA3ipP2ayPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:11:9f:0a:2e:fe:d0:31:a7:23:7e:fc:4b:cd:d1:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ea14d1343b992506bee6c3d90e19a69798b018
        Validity
            Not Before: Apr 19 22:00:54 2025 GMT
            Not After : Apr 20 22:00:54 2025 GMT
        Subject: CN=f31a8876b635f0884cd622aa37feacbcf034e832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b5:37:ad:16:ce:b6:cd:d1:79:06:68:15:35:
                    ad:2c:6a:01:3f:92:ae:95:c4:bd:fd:56:2c:8d:a5:
                    15:d0:e3:41:f9:00:98:eb:21:ff:59:8a:9e:5c:8e:
                    46:46:ef:79:32:c1:a5:4f:cb:a7:c7:f7:e9:4c:0d:
                    72:88:b6:56:59:3d:d9:69:0e:9f:96:8c:e7:ef:28:
                    f2:90:53:cb:fb:4c:44:61:e8:87:82:10:47:7f:ed:
                    dd:a6:f8:15:33:95:e1:82:80:92:e1:9a:49:9f:b9:
                    fc:9d:97:16:1d:f3:da:db:a7:05:36:a0:65:ab:86:
                    9f:cf:0a:3c:e1:b8:bc:e9:90:35:54:2a:22:78:36:
                    ed:12:ed:9a:25:6e:31:d3:20:1f:6a:bd:54:2b:0a:
                    27:76:c7:71:ee:9c:06:aa:f8:86:90:72:80:4c:4a:
                    7b:f7:d4:1f:b4:8a:72:38:52:6d:d1:9f:63:88:e9:
                    bc:f3:48:40:84:4f:08:d5:7d:aa:1c:bc:fe:17:2d:
                    92:a7:d1:35:c3:d0:7c:f5:b2:f6:5d:b3:58:e3:fb:
                    23:6a:14:19:f6:eb:d3:de:83:77:c8:f6:9e:9d:89:
                    f0:98:7a:57:18:bc:bd:b1:35:2f:c3:59:86:3a:65:
                    0e:eb:7c:f1:23:9e:8f:56:59:89:38:88:58:fc:75:
                    f7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1A:88:76:B6:35:F0:88:4C:D6:22:AA:37:FE:AC:BC:F0:34:E8:32
            X509v3 Authority Key Identifier:
                keyid:E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:87:80:5b:eb:2c:aa:ae:56:3c:fe:b2:6b:33:7a:2f:f4:66:
         6b:29:9d:81:27:c7:9b:4a:99:32:59:61:c7:e0:86:f6:6b:65:
         13:e6:88:4d:3a:0e:fb:cc:b8:d2:4b:fb:c4:e2:43:d7:30:ce:
         2f:7d:2f:d0:b3:c2:e3:ac:b2:48:d5:87:79:e7:0d:7c:e4:1e:
         c3:02:e4:e9:46:44:19:d5:ef:ff:26:db:09:7f:c5:e2:d0:7a:
         72:e2:c6:dd:67:c5:71:1e:24:ac:cf:57:44:72:78:24:20:21:
         be:3d:8a:16:8a:59:13:e0:7f:b6:49:ce:1a:bf:62:43:a1:f4:
         d8:4b:4d:1c:b8:38:62:10:d9:48:08:5f:f1:25:1d:87:59:fc:
         1e:b4:9b:94:eb:4d:df:f1:ba:e0:19:b6:ae:07:55:29:d8:54:
         45:71:ff:ff:c4:22:8f:0a:97:91:4a:61:30:d8:5e:d2:a3:97:
         b3:78:2a:51:7b:ca:63:2a:4d:64:41:a0:7a:0f:91:a5:c2:f5:
         e7:9a:b7:da:fd:ab:81:43:9f:03:be:bc:65:1c:d7:f4:92:21:
         d2:98:4f:dc:74:5d:38:17:7c:a4:08:82:32:f2:67:cc:4e:ae:
         56:08:24:00:89:8f:b4:a0:e2:62:9e:88:78:2a:52:47:ee:47:
         33:80:e2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:45:36 2025 by rpki-client