Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
File:                     4koyJ4zntMsgXfzK14YBSjsK4yM.mft (raw, json)
Hash identifier:          fhu/L5GIltMlh+MmIixePCQX36D6FEMXDvls1pUsXTw=
Subject key identifier:   D1:24:40:BD:F5:43:66:04:29:C8:48:52:65:FD:CD:12:6F:E4:C3:71
Authority key identifier: E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
Certificate issuer:       /CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Certificate serial:       0196504830E912F15FC4F44965FD53CF86A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
Manifest number:          0C94
Signing time:             Sat 19 Apr 2025 23:00:30 +0000
Manifest this update:     Sat 19 Apr 2025 23:00:30 +0000
Manifest next update:     Sun 20 Apr 2025 23:00:30 +0000
Files and hashes:         1: 4koyJ4zntMsgXfzK14YBSjsK4yM.crl (hash: OO3r59EXTAaVB8HN2OkD1besl0kaQu3j1EYZgDW5qNw=)
                          2: Fl9jCud-UU_nsltrgxF4woEzDPA.roa (hash: t0KQ+pJmnr1NHNCgrJUYJH3j4t5bgDietQ+c+4tjYIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:48:30:e9:12:f1:5f:c4:f4:49:65:fd:53:cf:86:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
        Validity
            Not Before: Apr 19 23:00:30 2025 GMT
            Not After : Apr 20 23:00:30 2025 GMT
        Subject: CN=d12440bdf543660429c8485265fdcd126fe4c371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f4:91:7a:22:71:45:f1:a3:25:d1:58:e0:99:
                    7d:d2:c1:01:b4:e4:8e:8f:d9:65:ed:a4:24:93:fb:
                    10:7a:f9:84:48:cc:de:d6:af:12:e9:28:6a:a1:66:
                    4c:c2:22:6e:3c:25:af:e3:c7:6d:ab:42:d4:e5:d2:
                    92:d0:be:27:f8:44:52:18:bf:be:95:7f:1f:5c:a9:
                    9e:d7:d0:0a:44:b2:b3:24:1a:e8:3c:a4:9b:da:bd:
                    6b:7d:fd:bb:b6:10:21:d6:a8:a0:50:e2:be:5a:d3:
                    e8:d2:a9:3e:74:3d:d8:bc:f2:18:23:05:24:49:c3:
                    df:f3:2d:20:8c:a6:f2:5a:db:50:e3:b5:86:65:8e:
                    b2:c4:94:64:a8:9e:31:4d:da:dc:7d:e5:68:9c:41:
                    b9:e9:24:05:bd:1e:44:73:cc:48:89:91:c7:e9:31:
                    fa:8c:ad:ed:c1:50:c9:7f:f2:3f:dd:49:7d:c3:52:
                    4e:69:0d:f8:38:ac:d5:ff:ee:ae:6d:0c:f9:13:7b:
                    65:a7:63:3a:ce:59:41:14:20:bc:bf:f4:08:1e:da:
                    1a:c1:f4:f2:4b:c4:61:f9:89:56:1e:2f:f6:19:eb:
                    b3:3d:96:73:7d:28:ac:97:99:2d:15:6d:76:f6:39:
                    b4:a9:49:6a:1a:54:4a:4e:08:06:e4:c5:5f:b5:48:
                    e9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:24:40:BD:F5:43:66:04:29:C8:48:52:65:FD:CD:12:6F:E4:C3:71
            X509v3 Authority Key Identifier:
                keyid:E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:6a:76:ec:34:5a:86:02:bf:6d:78:fe:42:50:30:43:8d:af:
         71:48:31:0d:0a:dd:91:f7:ec:73:72:90:72:bb:28:0c:ee:a6:
         47:18:eb:c8:bd:77:17:8c:2c:f8:f9:e1:9d:2d:63:e3:4a:9c:
         0c:16:14:f2:45:31:30:ac:36:74:97:da:e1:06:2b:4f:5e:c8:
         bc:9d:4e:0a:e4:e6:14:a5:08:39:eb:46:27:35:a6:12:04:a0:
         e8:f7:18:3a:a5:73:8d:f0:b5:69:0f:b9:6a:18:e7:a6:0b:8f:
         7c:c5:2e:1b:40:f8:ad:36:1d:ec:29:c6:bf:cf:61:78:1e:ee:
         b3:d0:d3:4d:a4:0f:2c:c9:a4:85:0a:39:ce:b0:c2:29:d3:fb:
         8d:51:c2:a3:cf:fe:ef:b9:3f:45:d0:49:a8:6d:f5:e6:38:da:
         6c:8b:0f:a9:b8:6c:68:d9:65:2c:7a:11:7c:08:2e:60:4b:b0:
         98:1a:1f:27:26:f8:41:db:7f:01:8c:17:de:20:15:d4:9d:79:
         58:55:15:9d:47:ac:8a:77:86:46:62:29:1b:ba:be:bf:c6:19:
         99:63:5c:2f:3d:8d:7d:87:cd:52:02:50:ee:28:62:4b:02:17:
         f6:bf:4c:50:4f:ab:28:6b:14:bb:bd:1e:18:e5:3c:db:df:49:
         bd:c5:5d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:33:41 2025 by rpki-client