Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
File:                     Cs1OLATDntskKmcFG4tYEmNDbnk.mft (raw, json)
Hash identifier:          H3PI5R1urSBquPmbg9NB940NERNIHvzv8QpFRZ9/lNw=
Subject key identifier:   71:85:F0:B6:F2:1F:35:A4:95:F9:DA:90:03:60:84:D5:1A:1B:E6:1A
Authority key identifier: 0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
Certificate issuer:       /CN=0acd4e2c04c39edb242a67051b8b581263436e79
Certificate serial:       01964D47687EF45C2EABBF9BBC4A6E7A7CCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
Manifest number:          107E
Signing time:             Sat 19 Apr 2025 09:00:47 +0000
Manifest this update:     Sat 19 Apr 2025 09:00:47 +0000
Manifest next update:     Sun 20 Apr 2025 09:00:47 +0000
Files and hashes:         1: Cs1OLATDntskKmcFG4tYEmNDbnk.crl (hash: 3S9egnHxuhMkIqFlIVqR1fH0MlaHoKXZceRrNivP7RA=)
                          2: bbpg3V6ZZAXBeCd1yQ2Usxzc5uc.roa (hash: zEd/mqbUQwwKdBV4qgniA93ml7cpqC5pfS1X8ei6QF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 09:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:47:68:7e:f4:5c:2e:ab:bf:9b:bc:4a:6e:7a:7c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0acd4e2c04c39edb242a67051b8b581263436e79
        Validity
            Not Before: Apr 19 09:00:47 2025 GMT
            Not After : Apr 20 09:00:47 2025 GMT
        Subject: CN=7185f0b6f21f35a495f9da90036084d51a1be61a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6b:d8:86:81:c2:f4:88:e0:fb:0e:c0:77:a0:
                    a1:c1:1a:6d:60:84:58:ef:f1:00:0c:68:fc:54:32:
                    1e:5c:19:4d:91:2d:2e:3b:6e:a6:8f:f6:3e:66:9a:
                    e9:8e:5a:48:32:96:4a:a6:62:73:c1:95:8f:9a:d1:
                    73:37:77:4f:89:5d:e4:5a:d8:6a:8e:74:74:3d:e4:
                    ee:af:76:55:18:4d:1d:df:4f:59:f2:52:e7:e9:ce:
                    7f:f3:a5:16:1f:9f:b9:c8:9e:52:6b:75:b7:bc:61:
                    79:a1:16:7a:53:7a:dd:9a:9e:26:5b:2a:a2:80:cb:
                    c1:bf:98:11:0d:ae:d9:d0:c1:78:a1:e4:d7:a7:a1:
                    37:92:17:f2:ba:b8:ac:84:cc:e6:7c:cb:72:98:3b:
                    d6:c0:e8:93:83:63:50:1d:d3:ae:77:aa:cd:f9:62:
                    bd:12:54:3b:6d:62:34:1a:94:67:9d:e5:52:e4:df:
                    5b:d3:4c:66:4f:64:71:60:69:93:16:d3:b7:68:cf:
                    48:6f:e5:04:22:31:d6:8a:6e:89:5d:12:67:91:ee:
                    0b:de:64:ca:bd:4f:02:28:09:f6:2d:f3:42:9c:ea:
                    aa:77:4e:b3:0f:00:51:ec:eb:19:17:28:28:82:f0:
                    30:36:8c:e7:ee:29:e4:60:52:b9:12:7e:08:ec:6c:
                    f4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:85:F0:B6:F2:1F:35:A4:95:F9:DA:90:03:60:84:D5:1A:1B:E6:1A
            X509v3 Authority Key Identifier:
                keyid:0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:b5:3b:eb:a4:4f:22:6e:8e:91:48:aa:10:e3:77:8e:0a:e9:
         cd:41:c1:9d:96:a8:64:d9:96:66:72:4e:eb:e6:13:f6:1a:ef:
         3a:2d:c0:88:5d:7d:16:c1:68:a6:eb:23:5d:56:3e:ac:83:4a:
         4d:1c:a7:89:ec:54:c9:42:ab:f4:4e:dc:f2:08:bb:67:90:3a:
         98:a8:62:51:f2:85:33:d3:c8:0b:e0:ae:7c:84:4e:c2:b6:aa:
         8b:8a:9f:85:b9:8a:76:2b:f3:26:a9:ce:49:d4:3d:79:aa:66:
         5c:ca:e5:8e:69:84:6d:a7:43:e8:11:df:d7:ee:fb:a6:de:cc:
         cd:13:95:34:28:f4:d9:ad:ec:e8:44:4c:a4:bb:84:7f:d1:88:
         d1:f6:4c:34:6d:55:6d:86:72:08:a4:3c:8f:26:a0:93:0e:38:
         3e:f3:96:cb:aa:94:39:96:73:d1:e0:75:77:85:ca:c8:ba:b0:
         69:29:74:c4:f8:be:07:e4:aa:7b:de:0a:79:f3:7b:f5:c4:4a:
         4b:6c:a0:e5:ce:1c:c7:0a:bb:10:68:d9:80:f8:b4:4d:6d:d7:
         9e:84:e1:06:55:79:8c:3c:d8:8d:94:e1:52:d0:ef:e8:2d:d9:
         7c:88:c4:e0:78:c7:62:72:fc:a2:9b:b8:de:0e:7e:46:fe:aa:
         b7:75:fa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:21:06 2025 by rpki-client