Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
File:                     sq8TPUrDS9z7e93H4RsnBUNi9wk.mft (raw, json)
Hash identifier:          1lDAL3Rp4tYMxXR58uEJzf/EI1RWo0gXc6w0PB6enbY=
Subject key identifier:   25:69:34:CB:6F:87:40:AD:1E:7D:23:BA:4E:A4:E8:23:26:05:E9:C8
Authority key identifier: B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
Certificate issuer:       /CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
Certificate serial:       019644B206189526032D131F315A040C076D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
Manifest number:          0D0D
Signing time:             Thu 17 Apr 2025 17:00:39 +0000
Manifest this update:     Thu 17 Apr 2025 17:00:39 +0000
Manifest next update:     Fri 18 Apr 2025 17:00:39 +0000
Files and hashes:         1: sq8TPUrDS9z7e93H4RsnBUNi9wk.crl (hash: fEcpBVsYQiNX959e0iMPoMYtz8T9Lo9JEZybj9OJgk8=)
                          2: xXoDvLCzfRoJB4GWdWLxvsrNdQE.roa (hash: RkrqVMW2nuj6+gtG8zfIqk3F/I8r7HrDxMHvJpo4Plw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:b2:06:18:95:26:03:2d:13:1f:31:5a:04:0c:07:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
        Validity
            Not Before: Apr 17 17:00:39 2025 GMT
            Not After : Apr 18 17:00:39 2025 GMT
        Subject: CN=256934cb6f8740ad1e7d23ba4ea4e8232605e9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:87:9d:69:b2:4e:46:18:cb:04:5a:cd:e6:21:
                    8d:9f:57:b5:6c:29:11:65:2c:5a:bd:0c:99:1a:fc:
                    dd:2d:dc:61:b9:19:91:6f:7f:71:e8:43:f5:40:3c:
                    87:c4:15:cc:36:01:ef:7b:aa:80:6b:e6:88:1e:fb:
                    32:24:b1:0d:58:8b:24:06:70:3b:e6:2c:31:7e:ef:
                    e1:38:e0:b1:57:ad:1c:bf:4e:a7:1d:54:fa:81:fd:
                    0a:f5:a2:4a:7a:ec:65:1f:ed:d9:a5:6e:30:78:41:
                    f4:48:c1:72:ae:30:3b:d9:87:3b:f5:1b:c9:85:e3:
                    f6:80:4e:8c:c0:08:d7:82:de:87:72:69:5d:73:4d:
                    cc:4f:13:23:fd:83:f5:42:40:6e:a1:90:f1:1d:e4:
                    b4:c4:82:a0:c5:7a:33:9f:fd:f2:98:76:3c:6a:6d:
                    22:9e:15:79:85:11:2e:56:8e:6b:25:ab:a7:7d:79:
                    f0:9f:b1:b4:21:cf:37:a9:69:86:40:b1:86:c5:f0:
                    6f:ae:7f:ff:77:2e:28:b8:31:ed:f3:1e:af:7b:08:
                    c2:65:b0:07:ef:b9:3b:f4:dd:2e:fa:0c:64:52:2e:
                    46:64:f1:f0:4f:5e:2f:1c:e7:9d:30:e6:57:51:b3:
                    4b:13:75:bd:fe:e8:99:3c:d3:78:4a:2e:a3:62:d8:
                    f9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:69:34:CB:6F:87:40:AD:1E:7D:23:BA:4E:A4:E8:23:26:05:E9:C8
            X509v3 Authority Key Identifier:
                keyid:B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:53:30:dc:ac:85:e1:01:30:05:54:15:f8:f0:3d:f7:9b:3b:
         41:5b:f0:59:c7:d5:af:6e:c4:dd:8a:fa:31:25:df:c3:1c:d6:
         6d:6c:eb:b7:3f:03:d8:71:0d:3a:ca:f2:ba:1a:1e:e4:2f:b6:
         90:45:d5:72:c2:42:5f:bb:af:38:4b:8e:f4:b6:89:b1:9f:de:
         9b:8f:03:c2:50:1f:10:e9:bc:2a:29:fe:3d:63:99:e3:b4:05:
         ed:7b:7d:bb:80:52:5c:25:ab:cd:b0:f6:bf:ef:43:dc:f3:80:
         2d:c1:c7:85:ee:b2:b6:55:a7:3e:a2:47:f2:2f:50:44:81:7c:
         34:23:7f:e8:98:5e:fd:b8:a5:97:d4:f4:a6:7d:dd:7c:53:6e:
         80:47:e1:a4:b7:0e:13:fe:4b:49:be:21:8e:66:0b:79:14:0e:
         38:10:65:b2:74:5a:8c:f0:10:ff:0d:2d:12:60:84:a8:70:ac:
         55:6c:06:18:bc:4c:b4:c4:7f:18:8f:12:59:66:2d:33:3c:d8:
         2e:53:94:6b:7d:2f:16:2e:a3:09:63:63:4f:20:43:8a:b5:c8:
         5a:62:01:f7:9b:7b:17:26:62:d7:63:1f:30:bd:29:27:67:52:
         6c:7b:b8:eb:d8:37:fb:b1:69:7b:20:0f:89:50:6d:17:c3:0b:
         07:c8:4b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:04:23 2025 by rpki-client