Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft
File:                     i4JDP_6UvzU2_sMnVD05YVggIHI.mft (raw, json)
Hash identifier:          3l/GMlyL9qawNq/FvlOsp+qeWw24MCy/H+iAMWRKIoU=
Subject key identifier:   F2:41:FF:F1:E6:6B:7D:9D:3C:69:CF:97:6F:45:E7:E1:7D:33:3B:FB
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Certificate issuer:       /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial:       01964DEC423C34BB6137E70B1F9A49158AC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft
Manifest number:          0B10
Signing time:             Sat 19 Apr 2025 12:00:51 +0000
Manifest this update:     Sat 19 Apr 2025 12:00:51 +0000
Manifest next update:     Sun 20 Apr 2025 12:00:51 +0000
Files and hashes:         1: 4fxQzx_8ByWwMKk9dyXM0XEaMys.roa (hash: /pQNDc4tCpOKVTxdQ/1sSXEuYSGaPkaAPaOzkIFfq/U=)
                          2: D0yJcu0JvPJ2IZ6qvrN_68RL81A.roa (hash: NXJKvgJ+KpYYxv4h48ZyQkogSfsaqjnCJ9F84sJ/8IA=)
                          3: fAdRVcLtp1Hdo62qAxJzNRyFLms.roa (hash: /9qm18tTMk3ZVKpb3SBqcWWsV0TFo0WtQqugq7BXDfU=)
                          4: fk9piBmxadoxJuP7Wx4UPTdBTGM.roa (hash: P0efcRRoA7jHUP2kLMx2ZKnIu/J2T6OthYnnV4Yj06A=)
                          5: i4JDP_6UvzU2_sMnVD05YVggIHI.crl (hash: 2dqKxR+XmQgq2ExNdzi7GrGMaKI5+eGIcDpmqa4Z9F0=)
                          6: xNtGHv1YLmz0baQ6fFAsVkQIQLw.roa (hash: glTrDTx+iBPrwn7/BNyzFNiZr9vyz3H84OvS4u/lrN4=)
                          7: yx9i8LZCbjvaDebLsn4vp_1QQsw.roa (hash: koRh5dNP2sZyFodyKIh0Iqwubeq7l02U0bZSoimi8yU=)
                          8: yyP9fmeZAYp1K1vaVu0uJv4Agws.roa (hash: egmTg6Tzum2/xFgjHv1aVGDhof0qC374Rh2lR+uVm0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:ec:42:3c:34:bb:61:37:e7:0b:1f:9a:49:15:8a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
        Validity
            Not Before: Apr 19 12:00:51 2025 GMT
            Not After : Apr 20 12:00:51 2025 GMT
        Subject: CN=f241fff1e66b7d9d3c69cf976f45e7e17d333bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f9:4a:03:69:55:a9:63:c3:75:0d:57:62:12:
                    8c:de:73:50:05:29:cd:ff:85:23:22:fd:b8:1b:bd:
                    3d:41:2b:e3:2b:e5:fa:93:b9:1d:98:4d:17:48:a1:
                    4d:b4:37:13:51:38:6d:78:26:a4:ac:98:64:9a:7e:
                    6e:48:9b:4f:62:0b:47:ba:73:26:a3:d9:3b:d3:c4:
                    aa:61:c5:61:69:ce:dd:d6:6c:8c:ef:dd:04:5d:73:
                    73:52:80:3f:fe:20:e1:dc:74:cd:06:40:b8:05:35:
                    bb:2c:87:62:9e:38:72:23:48:af:2c:07:16:44:ab:
                    7d:bb:98:4c:70:66:03:a6:31:35:ca:b5:6f:fa:a2:
                    8d:7d:1a:f6:d7:cd:6b:59:f0:13:c1:72:33:6c:f9:
                    28:42:ba:4c:0d:67:37:06:df:e5:60:3a:ae:80:e9:
                    97:2f:51:c0:5e:e1:f7:b6:52:d4:75:c2:52:ea:ce:
                    8d:6b:57:3a:3c:e5:6a:1f:45:7f:29:93:62:d4:ae:
                    11:ce:3e:e4:2c:f9:59:6e:21:6f:78:d9:3b:5d:09:
                    45:fb:b0:1f:8a:9e:74:55:18:a7:28:12:cd:d9:dc:
                    ff:c0:10:43:8b:69:14:84:ab:75:7f:27:b1:e6:fa:
                    1b:cd:79:f3:3e:8c:9f:fc:ac:06:6d:a8:24:fb:c1:
                    4e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:41:FF:F1:E6:6B:7D:9D:3C:69:CF:97:6F:45:E7:E1:7D:33:3B:FB
            X509v3 Authority Key Identifier:
                keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e5:e1:e7:3c:82:aa:40:4c:32:6d:86:e6:0c:a1:21:88:f6:
         68:f2:44:5d:d4:1f:29:a5:65:88:e5:02:da:0e:7f:de:a3:8f:
         bd:90:05:3b:86:a9:c5:da:9f:4c:3f:63:e9:3e:a6:64:f9:66:
         f1:04:ad:e9:52:80:a5:97:85:2d:2f:b1:c9:60:82:71:ce:3e:
         7c:7a:43:7f:d5:fb:cd:9e:34:ca:53:54:b0:68:9e:32:30:2c:
         c5:f9:2d:62:d9:74:79:be:63:e0:b6:7f:5b:42:ba:09:30:fb:
         ad:fe:0b:a5:8f:9b:8e:1d:a8:09:c0:74:b5:37:e1:40:20:f7:
         eb:ff:28:e0:4c:e0:30:08:41:31:cf:b7:48:2b:15:26:a7:52:
         e3:f5:7d:23:0d:c3:b9:6e:e1:c6:7c:7b:b4:dc:37:22:07:a3:
         de:68:c4:cb:09:7e:a1:ae:a7:dc:66:b3:a9:b3:5b:b2:fe:93:
         c6:6a:52:be:8a:32:d7:19:6d:68:0f:e7:4a:38:70:1f:80:c9:
         2e:09:cb:07:db:c8:d7:dd:41:7e:10:a1:1f:a2:a9:6b:43:bf:
         98:52:5c:39:de:80:05:08:16:10:8a:06:9a:5c:3f:b2:4e:16:
         cf:36:84:45:26:4a:46:b8:c2:95:d1:b2:16:39:aa:35:43:cb:
         a8:e8:cf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:26:31 2025 by rpki-client