Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
File:                     g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft (raw, json)
Hash identifier:          7UV7lmpGaczqahf1ot+ne3nfLAAcvAveQ4JIc5TLrfU=
Subject key identifier:   B8:0A:24:6C:68:5C:E8:D6:6D:2B:89:A6:63:1E:14:A9:32:C1:D4:9B
Authority key identifier: 83:5B:F4:8F:18:52:7B:2B:3B:59:BF:BF:3F:DF:F2:04:49:2B:CE:91
Certificate issuer:       /CN=835bf48f18527b2b3b59bfbf3fdff204492bce91
Certificate serial:       0196556E810A79045A30A2A33ECB20D892BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
Manifest number:          14FF
Signing time:             Sun 20 Apr 2025 23:00:27 +0000
Manifest this update:     Sun 20 Apr 2025 23:00:27 +0000
Manifest next update:     Mon 21 Apr 2025 23:00:27 +0000
Files and hashes:         1: g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl (hash: X9wiVIawQ/0UVTfVOWR5ekFZX5bRLl7sqClsljcM3vg=)
                          2: mKXM1sCXbX4WM_fKlx6FQU4VLjU.roa (hash: bq/vxuiDoDVFgx9I1292qiHAVq4peufKuf4SJNis0Io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:6e:81:0a:79:04:5a:30:a2:a3:3e:cb:20:d8:92:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835bf48f18527b2b3b59bfbf3fdff204492bce91
        Validity
            Not Before: Apr 20 23:00:27 2025 GMT
            Not After : Apr 21 23:00:27 2025 GMT
        Subject: CN=b80a246c685ce8d66d2b89a6631e14a932c1d49b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:99:a4:6a:76:1a:3a:c9:f5:48:d9:c7:86:61:
                    ff:0a:2d:b6:ff:31:1c:2b:e4:ee:a7:a0:a9:1e:06:
                    1d:97:1e:db:7c:ca:f4:bc:3f:a6:ef:f2:c1:89:34:
                    50:fe:fd:fe:ac:48:66:81:e8:14:66:4f:82:3e:7f:
                    b5:7c:b1:e1:91:a1:d6:3d:05:34:63:b9:99:18:28:
                    ba:29:3f:86:66:17:4c:bb:2e:e2:d5:59:7c:30:50:
                    b0:93:d8:e0:6e:a7:15:0a:6b:b1:7b:ed:6f:ef:41:
                    04:00:18:92:7b:b6:d7:45:bc:ca:44:4b:03:38:8a:
                    2f:06:f9:bd:73:28:a7:a0:90:31:64:65:64:1d:85:
                    1c:f4:da:c5:2b:42:a5:2c:06:5f:64:8b:65:22:82:
                    d0:17:99:32:9a:4b:6d:a8:b8:9f:e9:42:5b:bd:85:
                    8c:92:ee:e1:bb:1c:33:1d:bc:30:1d:29:97:b1:ad:
                    db:ee:6a:59:ea:0c:7f:7a:0f:4d:50:5c:2b:49:cc:
                    66:ad:0c:13:03:84:52:96:a1:74:b7:a6:8f:f4:ef:
                    59:49:ee:7a:9d:2e:db:21:e6:d7:6f:81:b1:cd:97:
                    f2:0a:23:d9:9c:2b:77:37:d1:bd:0e:34:b6:22:03:
                    e9:5e:01:6c:e5:b3:8b:68:f8:91:a7:3c:e8:8b:36:
                    bf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0A:24:6C:68:5C:E8:D6:6D:2B:89:A6:63:1E:14:A9:32:C1:D4:9B
            X509v3 Authority Key Identifier:
                keyid:83:5B:F4:8F:18:52:7B:2B:3B:59:BF:BF:3F:DF:F2:04:49:2B:CE:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:c7:e9:3e:dc:fd:08:96:68:d9:2d:ce:cb:2a:2e:9d:af:20:
         63:cd:42:7a:22:ee:49:09:22:da:d9:2b:6e:70:e0:0b:3f:d6:
         5c:0f:d9:4a:ac:0a:dc:8e:74:18:0d:b1:aa:22:52:fe:6e:19:
         e0:2b:db:41:b3:72:cd:21:15:5a:a9:9e:7c:cd:df:13:7f:cd:
         f6:f3:56:e1:4e:fc:96:53:ba:da:5b:78:f3:66:f8:d9:c9:4d:
         d8:5e:14:d6:c3:55:9d:9b:0e:38:d8:2c:4a:ef:9e:f5:4b:db:
         64:e3:9c:23:6b:93:ab:71:3a:e0:41:4e:c2:9c:d4:5b:07:be:
         1d:d9:66:98:60:40:2c:9a:21:f8:53:67:2d:39:ae:dd:60:4f:
         86:65:f0:54:0c:09:a1:49:b3:da:5a:ef:5e:ca:1a:3a:21:97:
         25:bc:d0:50:9e:66:47:7e:66:2a:45:b2:69:62:70:db:a6:7a:
         cd:63:b9:47:94:de:7e:39:78:82:33:2d:83:28:6e:e0:34:1a:
         11:a2:93:8e:7b:1d:3c:72:8e:fc:82:a7:59:82:0d:61:5f:06:
         54:a4:d1:1f:69:f9:f8:86:65:5e:62:3a:82:53:52:54:76:b0:
         a9:71:41:6a:e9:49:6a:1c:82:61:67:78:cb:8d:60:ae:20:3c:
         41:a5:dc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:05:54 2025 by rpki-client