Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
File:                     rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json)
Hash identifier:          2NSAffsklV1euuS3zIHSkkPFDY0WMq3t7QNsfs06b44=
Subject key identifier:   C1:D7:EC:A3:A5:37:8B:75:F4:58:90:26:FA:9D:45:83:5C:DA:FE:EB
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Certificate issuer:       /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial:       019619FEBA98F2FC2034800BCE3566587B91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
Manifest number:          09F2
Signing time:             Wed 09 Apr 2025 10:00:46 +0000
Manifest this update:     Wed 09 Apr 2025 10:00:46 +0000
Manifest next update:     Thu 10 Apr 2025 10:00:46 +0000
Files and hashes:         1: 2ANtTxYhC9doii2ZUg03hm4sdbA.roa (hash: z+xDfuoi1M8PZfat7ClShgNzShy9imRSBA53FNp3Yi4=)
                          2: fkWlT9PgiHrt21vPWUF4x1XaOLY.roa (hash: x7UGdmB+xVRIAlEZvuthxI7D4dWajJ53Iu1moiHZnkA=)
                          3: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: Bp68Fg+2gvlEA7uNCNVP27R27zARO3Z1ZrAboJ8cUrg=)
                          4: wF0b1KUXe0U_bON_pBEoysY2T6k.roa (hash: DPse6U512sX0ONNuBoLLi/K8A5hqXSZVhiW/ds6GDr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Apr 2025 07:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:19:fe:ba:98:f2:fc:20:34:80:0b:ce:35:66:58:7b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
        Validity
            Not Before: Apr  9 10:00:46 2025 GMT
            Not After : Apr 10 10:00:46 2025 GMT
        Subject: CN=c1d7eca3a5378b75f4589026fa9d45835cdafeeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ac:c1:1f:9a:3b:14:ed:dd:c2:4e:41:a9:07:
                    00:f9:23:ac:e7:c8:20:d0:9b:13:5a:7a:58:07:78:
                    94:8a:15:48:22:ee:f9:80:e8:b4:9f:6f:aa:98:17:
                    cd:4a:f8:a0:f2:f7:16:5b:51:22:99:53:07:bd:e1:
                    f1:ea:3b:ba:55:90:4c:ed:b3:dc:de:94:32:58:4a:
                    f4:4d:38:1f:7d:a8:bc:e4:e2:e0:a1:e3:e0:a1:fc:
                    30:e7:2b:58:0d:52:a4:f2:bb:ab:56:f1:80:12:94:
                    3f:4a:3b:c6:42:bd:cf:9b:4d:d7:31:f8:8a:aa:1a:
                    e2:f7:6e:92:2d:f8:17:79:56:bb:41:bd:2d:2b:f7:
                    d8:ba:c3:46:0a:e1:43:0d:6e:c0:21:9c:ac:63:78:
                    ba:84:81:6d:2c:88:3d:63:99:50:90:95:10:f7:f7:
                    23:8a:a5:ca:e3:15:83:dc:02:75:9c:fd:c2:55:74:
                    25:13:46:e5:25:08:1e:28:f6:be:ca:6c:f9:eb:f8:
                    55:18:51:fb:51:4c:5f:d7:a4:3e:b1:7c:63:c4:53:
                    50:5d:4c:69:63:f0:e4:dc:e4:95:86:59:58:7b:c5:
                    46:39:6a:72:6c:eb:c8:cb:6d:75:e8:39:fb:f7:27:
                    f6:1a:57:58:7e:ad:a8:17:20:d9:ca:4e:8b:92:bd:
                    0a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D7:EC:A3:A5:37:8B:75:F4:58:90:26:FA:9D:45:83:5C:DA:FE:EB
            X509v3 Authority Key Identifier:
                keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:5f:18:79:ba:1c:f2:05:62:9b:b3:4b:e5:f0:1c:51:ee:db:
         94:ed:f6:35:21:89:4a:bf:7b:ee:60:25:41:d0:16:89:23:9d:
         e3:08:90:c8:28:64:0e:d1:df:a1:ab:c7:f6:d4:80:fa:6e:ca:
         18:6f:7e:68:8e:78:be:b7:70:04:06:18:00:b0:1d:e8:0e:f5:
         a8:5c:7c:4f:d7:45:65:70:eb:f3:b4:ff:7e:7b:98:3d:78:48:
         7b:42:9b:67:63:08:18:a2:a9:d8:f5:35:5e:06:bc:f2:5a:80:
         12:e7:31:68:c3:d7:04:98:e3:cc:0b:09:92:49:06:af:42:6a:
         a7:42:a4:19:df:58:9b:54:af:cb:a9:55:29:e4:cd:88:9f:a9:
         cd:7e:74:a0:fa:de:0a:6b:45:24:27:97:0f:50:88:8a:a0:47:
         dc:c2:2a:db:48:db:e2:07:2b:41:7c:d8:b6:7d:be:80:69:80:
         57:2f:cc:b4:c9:f4:57:68:08:c3:28:2f:16:0f:dd:48:ae:4a:
         44:ab:52:f9:34:e6:b1:21:ca:82:ac:fd:90:f0:86:ba:c7:ce:
         6f:21:40:02:9a:e4:96:5c:74:bd:3f:38:54:e0:99:9a:ad:19:
         0c:e3:f7:2e:d4:a4:13:c9:00:1b:72:de:23:2e:30:7a:18:ed:
         c9:11:10:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:48:38 2025 by rpki-client