Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File:                     aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier:          R6GDEj8yqgkDRh4W69udmUO1DFsEylcnXMoEO8Nglkk=
Subject key identifier:   84:99:79:E0:4C:74:7D:6B:2B:64:46:F8:D7:2B:F5:07:14:69:6D:73
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer:       /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial:       019647E9DB663A56BDC71AAF45C07C67C390
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number:          1489
Signing time:             Fri 18 Apr 2025 08:00:30 +0000
Manifest this update:     Fri 18 Apr 2025 08:00:30 +0000
Manifest next update:     Sat 19 Apr 2025 08:00:30 +0000
Files and hashes:         1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: B7SDR7pfCNbVkoJFAfQa7nMaSNmyy9f0A5jCf9hset8=)
                          2: gvJBtDmrBY4y1m9tVe-S6ndjy20.roa (hash: e9qz/rQIxQf43DTjLpdblCilaun5V9rCKHAnrG6oKJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 08:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:47:e9:db:66:3a:56:bd:c7:1a:af:45:c0:7c:67:c3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
        Validity
            Not Before: Apr 18 08:00:30 2025 GMT
            Not After : Apr 19 08:00:30 2025 GMT
        Subject: CN=849979e04c747d6b2b6446f8d72bf50714696d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7d:fa:8d:9c:9c:cf:42:de:a0:ea:bd:98:46:
                    6e:bd:37:58:55:05:5a:1e:cd:59:14:f1:34:b8:bb:
                    25:33:0b:fd:bd:6f:cf:00:0d:8d:0b:22:25:2f:66:
                    1b:a6:1a:ba:f3:1c:61:fa:bb:d6:3a:76:48:71:04:
                    42:ec:0b:13:e1:13:3e:1e:2a:6b:6b:e7:94:3c:7b:
                    4f:92:a4:1f:05:1c:b6:8b:68:41:30:0c:3d:e8:87:
                    31:c2:32:c8:9a:3c:26:23:80:de:26:f1:87:38:a4:
                    83:7c:a6:46:5d:d0:0e:68:b9:28:fb:cf:24:40:e1:
                    da:3c:dd:30:19:6d:aa:bd:2e:69:8b:95:70:1b:26:
                    8b:40:5f:17:ab:a3:47:f1:11:12:4a:0d:b3:2e:01:
                    22:87:61:b8:7c:96:eb:a2:35:41:c6:5e:3b:3f:2b:
                    26:ce:2a:a8:b3:a3:05:75:35:cc:63:d4:ff:76:10:
                    59:46:9e:82:03:8a:18:5d:52:fc:0d:0f:f8:d9:2f:
                    1c:41:4c:4b:f1:2d:95:8f:b0:99:da:63:6a:1c:03:
                    c4:d0:54:b3:10:df:9a:f0:23:9c:49:5b:96:49:04:
                    70:ea:26:01:11:83:e6:ae:b0:a1:8e:86:b6:7a:48:
                    6e:e3:5a:bb:57:67:dd:40:be:b4:e5:83:94:f6:cf:
                    ad:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:99:79:E0:4C:74:7D:6B:2B:64:46:F8:D7:2B:F5:07:14:69:6D:73
            X509v3 Authority Key Identifier:
                keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:87:46:70:2f:2d:d3:2a:33:9c:6f:42:63:d3:dc:8d:4e:2f:
         0d:86:06:4e:3c:96:7f:9a:e9:f8:21:ae:91:33:17:59:37:eb:
         4f:1c:5f:46:76:2d:a5:7e:32:d8:a3:c0:d1:91:d3:07:f0:a5:
         04:4f:25:16:c6:36:d8:06:30:35:8c:4e:a6:f4:0f:75:51:36:
         c9:2b:89:6f:7d:03:28:46:f9:68:dc:35:09:5c:ae:e0:21:02:
         74:f0:b8:57:37:fa:da:29:2b:85:79:27:60:64:4d:94:73:cd:
         8c:46:fe:e4:31:bc:05:56:3d:18:11:93:14:f3:31:bf:d9:d1:
         e1:5a:8b:2f:58:32:9c:b4:76:2b:db:20:93:81:36:d2:ee:ba:
         32:42:a1:64:0d:7b:c6:00:a6:d0:42:c4:95:1c:e0:45:e5:c5:
         89:95:49:14:90:01:98:2d:97:59:70:ec:6a:7d:8f:72:1b:6c:
         4c:d0:51:69:62:ff:f4:8b:87:f7:cc:fe:04:7d:97:52:3a:27:
         9f:d6:af:0f:ec:04:85:fd:b8:be:9c:c2:3e:85:ba:80:e0:68:
         e7:39:30:e7:24:b8:57:50:68:fc:71:39:09:4c:ea:36:c7:50:
         af:23:79:87:d8:5b:c6:da:32:10:0c:0a:3a:51:c3:7f:80:70:
         15:04:2b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:56:13 2025 by rpki-client