Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
File:                     rdJhytDf8tm7L4x60Nsm7Vcw090.mft (raw, json)
Hash identifier:          TreDwZhQQPKBknQmvWpPMLvf0gcwKJKTeGLbrM8P9U8=
Subject key identifier:   33:DB:18:05:CC:CA:79:07:BA:07:CC:30:CA:C2:A5:D6:B8:BE:FD:B9
Authority key identifier: AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
Certificate issuer:       /CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
Certificate serial:       01964CA2531CA9AC98C129B2223B7AC0D7DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
Manifest number:          0BCB
Signing time:             Sat 19 Apr 2025 06:00:28 +0000
Manifest this update:     Sat 19 Apr 2025 06:00:28 +0000
Manifest next update:     Sun 20 Apr 2025 06:00:28 +0000
Files and hashes:         1: rdJhytDf8tm7L4x60Nsm7Vcw090.crl (hash: 4t8mKFMbCDN3G48X4xH3M0zrEKLqgk9cFBWRRJQIuf8=)
                          2: tNraF_vYfkVNYT3rk3dbIhzsa14.roa (hash: Cyq1XU96xKn0Vjeuoq5f1b6ik1hGAwtTzIf0Tu199FY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:a2:53:1c:a9:ac:98:c1:29:b2:22:3b:7a:c0:d7:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
        Validity
            Not Before: Apr 19 06:00:28 2025 GMT
            Not After : Apr 20 06:00:28 2025 GMT
        Subject: CN=33db1805ccca7907ba07cc30cac2a5d6b8befdb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fa:48:14:5a:9b:da:11:14:05:f4:28:ad:a9:
                    83:ee:88:7f:cc:b4:e8:1f:ba:4e:38:34:69:3a:1f:
                    43:d3:d2:95:6d:b5:19:92:13:4f:4b:a6:d1:84:1e:
                    5c:41:00:c4:c2:ab:c6:e5:e9:51:f7:3c:f3:18:a5:
                    05:5f:fd:bf:6f:d3:1d:c6:07:ce:93:17:d4:f1:46:
                    0c:8e:9c:9c:d7:13:f9:27:07:e6:fb:c0:06:80:58:
                    ef:8a:66:f0:07:02:c2:0b:ef:f4:cb:52:db:5f:a6:
                    aa:3d:c7:ea:4b:34:70:67:35:3d:9d:37:61:64:b6:
                    7a:c7:7e:9d:b3:94:cd:23:4f:45:8c:31:55:5a:55:
                    f4:92:dc:ae:ae:81:11:e4:69:43:7d:ba:4b:25:c4:
                    c3:c4:1e:73:2f:89:c3:f3:44:97:01:a2:a6:66:57:
                    d2:1e:19:14:1f:1e:18:60:5a:45:03:34:34:aa:f2:
                    85:85:02:a7:88:d1:27:c8:e5:39:41:85:b2:e5:51:
                    91:f0:05:7e:a7:11:5a:ba:9b:21:ab:36:cb:71:1a:
                    d0:69:f6:7c:41:23:f6:43:53:3f:46:36:ae:1b:36:
                    51:f0:ca:6d:7b:4b:db:9f:f8:8f:6a:97:bc:88:d6:
                    80:51:cd:3b:72:dd:fb:8d:24:35:27:8d:46:e1:b0:
                    5a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DB:18:05:CC:CA:79:07:BA:07:CC:30:CA:C2:A5:D6:B8:BE:FD:B9
            X509v3 Authority Key Identifier:
                keyid:AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:32:2f:fa:f4:fb:96:f6:2c:8b:d1:87:9d:2f:25:b8:fe:27:
         97:33:48:a3:50:b6:4b:1f:4a:fc:e4:a9:c5:cf:df:ca:db:d8:
         2e:53:93:8d:b4:07:c4:de:36:ba:91:4d:0d:14:03:bb:42:ff:
         f9:1d:e8:ae:3f:a4:7c:1f:a9:02:dd:d1:c3:dc:9a:09:72:2f:
         fd:2c:d6:77:04:d0:cd:ae:27:a7:3c:74:d0:4d:2a:a6:1c:c9:
         33:4b:d0:30:4e:c2:eb:c9:aa:34:b4:d5:24:a8:fa:a1:05:5c:
         51:56:60:6c:6e:c8:4d:f9:ce:b9:ac:bf:39:bd:61:ac:bf:a2:
         f4:96:c8:1e:55:11:9c:ea:20:d6:58:7c:5a:5e:44:78:0a:0a:
         a2:9c:e0:d4:2e:3f:91:17:23:b4:a6:be:44:34:85:85:9e:03:
         3c:be:df:ec:cc:54:c9:b4:be:02:8b:54:35:18:bf:cd:c5:dc:
         30:41:f6:39:38:eb:1a:a5:80:b7:18:cd:9b:59:c9:46:a5:7e:
         8a:ab:63:99:f8:15:43:8f:cb:59:0d:a1:b1:6f:22:70:f3:8d:
         15:a6:e3:83:af:da:cb:71:63:be:82:fc:30:d8:75:43:c1:27:
         b0:4b:a8:69:d3:36:f9:4f:44:77:67:c4:65:d0:d2:4e:51:24:
         a4:d1:22:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:16:00 2025 by rpki-client