Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
File:                     G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft (raw, json)
Hash identifier:          hDTf/c4Jx37XKG/gx+Ayxuvx65mI4uMZQ8mnUcWJCog=
Subject key identifier:   E3:F0:63:97:6E:E4:25:2D:26:19:43:E2:AA:EB:AE:6A:9C:71:2F:98
Authority key identifier: 1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29
Certificate issuer:       /CN=1bb29b3f158fa80710c12a58b69fb926098d5129
Certificate serial:       0196542562D419833C59F23768D8D4ACE548
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
Manifest number:          0B92
Signing time:             Sun 20 Apr 2025 17:00:58 +0000
Manifest this update:     Sun 20 Apr 2025 17:00:58 +0000
Manifest next update:     Mon 21 Apr 2025 17:00:58 +0000
Files and hashes:         1: G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl (hash: 1qWqbF7aMYV1zQs9BvDcEWTxFerAIHnB/ZMDZq1Htws=)
                          2: j_n9Kg39TCshbmu8W1dk2NVjcFI.roa (hash: 56S9svTLKP+1FymtE0skXNThCYHX7pM3o2tRL4nBuW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:25:62:d4:19:83:3c:59:f2:37:68:d8:d4:ac:e5:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bb29b3f158fa80710c12a58b69fb926098d5129
        Validity
            Not Before: Apr 20 17:00:58 2025 GMT
            Not After : Apr 21 17:00:58 2025 GMT
        Subject: CN=e3f063976ee4252d261943e2aaebae6a9c712f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0a:98:e3:6d:a6:be:c0:16:55:b1:78:ae:65:
                    7d:25:bf:93:e5:ac:e4:18:d9:42:95:a4:e6:c2:bc:
                    83:29:77:20:4d:10:ec:18:50:96:f4:71:dc:4f:a8:
                    51:9f:73:3a:5c:a0:6c:10:03:a5:64:20:da:b9:60:
                    e4:6b:16:75:36:dc:48:43:2a:1a:18:57:49:fb:49:
                    cd:b6:8c:d6:61:98:45:d1:53:48:18:b7:73:f9:1c:
                    44:df:a2:26:0d:04:f2:f1:a1:5b:d4:48:80:94:8a:
                    cc:14:51:d0:f3:94:a5:55:b9:cc:b5:44:13:64:22:
                    55:44:ec:b2:ae:13:d5:20:94:a0:13:66:5f:61:b4:
                    b6:f7:a3:6d:58:e1:f5:5b:96:66:3a:c9:c2:94:bb:
                    0b:a4:8c:2d:61:5c:a8:8c:ed:d8:aa:cd:71:fe:e0:
                    ea:cc:9e:21:2a:9d:7a:87:fe:17:f8:c7:bd:da:93:
                    33:8f:56:7e:e6:09:57:8f:b2:4d:5e:e3:42:cb:08:
                    30:a4:0a:d4:1d:57:17:31:db:78:2b:20:a6:f7:50:
                    9f:c3:59:23:6f:3a:3a:58:e3:e1:25:e8:1c:8b:52:
                    de:de:32:c1:f6:e3:82:e4:7c:75:89:8a:51:4c:56:
                    43:74:c1:55:78:51:41:92:d1:83:6e:b0:73:c0:c4:
                    dc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F0:63:97:6E:E4:25:2D:26:19:43:E2:AA:EB:AE:6A:9C:71:2F:98
            X509v3 Authority Key Identifier:
                keyid:1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c3:90:dd:27:4b:2d:ec:7b:9a:45:ea:72:7f:b5:58:1e:9d:
         c5:a6:96:87:c1:42:f3:6e:fc:90:fe:80:e2:40:29:40:33:07:
         9e:c6:a1:55:99:4b:fc:18:c0:77:0a:2f:e5:92:7d:9d:4d:22:
         c2:3c:88:5e:76:d5:ab:00:b4:11:f0:ae:e6:9c:27:1d:4a:81:
         28:c6:e7:66:5d:f5:a1:d8:f6:b0:45:7f:35:fa:79:22:2e:fb:
         54:c2:b1:8b:41:78:19:6b:12:13:84:ce:2b:49:0b:56:ec:96:
         50:46:a6:b3:2e:b3:9f:e1:ee:45:3d:68:78:d1:18:9b:c0:c9:
         66:59:67:8e:52:dd:4a:c5:08:22:9d:8f:90:cf:3c:62:99:ee:
         ca:6a:05:00:4a:cc:d5:97:43:39:ec:fd:43:cc:3d:cf:08:27:
         74:fe:54:98:47:53:c7:37:6b:1b:77:2d:d7:60:c2:ec:7e:57:
         e7:a5:94:1f:0f:f5:e7:c8:f5:08:f8:c4:9b:ff:cd:51:26:90:
         d6:12:fd:91:a0:74:aa:35:19:f5:f8:ef:c1:95:06:eb:2e:08:
         c8:df:35:fd:0d:19:b7:8e:1a:9a:bd:7b:c3:60:76:d7:be:82:
         60:85:96:a6:3b:dc:8c:5e:d1:3e:8e:f9:33:bc:a3:85:5d:06:
         89:53:e0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:11:21 2025 by rpki-client