Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
File:                     g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft (raw, json)
Hash identifier:          zUlom7r0BMdo7opYcqf9r7BrhHVI+E5OUS7Ev3Tb4aY=
Subject key identifier:   41:F9:27:62:64:6C:87:E4:C7:4A:70:CD:13:DD:3D:30:D2:33:8A:F6
Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
Certificate issuer:       /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Certificate serial:       01964F6D8F5BF2D517980DF7C9E104C1336C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
Manifest number:          03FF
Signing time:             Sat 19 Apr 2025 19:01:42 +0000
Manifest this update:     Sat 19 Apr 2025 19:01:42 +0000
Manifest next update:     Sun 20 Apr 2025 19:01:42 +0000
Files and hashes:         1: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl (hash: R77Yt1SZZX6IQin9FxKh/GSmZhWyRR5sX6/MQOezPg0=)
                          2: hQt6fLvth7yhZ_gy-eWM04fH0Vo.roa (hash: 5eRa0XK3oy+0XVVEDTa2qZR1cDbvimVVidnig16u0uM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6d:8f:5b:f2:d5:17:98:0d:f7:c9:e1:04:c1:33:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
        Validity
            Not Before: Apr 19 19:01:42 2025 GMT
            Not After : Apr 20 19:01:42 2025 GMT
        Subject: CN=41f92762646c87e4c74a70cd13dd3d30d2338af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d5:af:e8:f8:0a:e5:76:ef:72:6d:ed:38:4d:
                    44:01:08:1e:a5:8e:3d:1d:1d:a0:74:e5:cd:ea:29:
                    9c:1d:25:87:84:30:d9:4d:f9:e1:44:9a:55:4f:82:
                    3a:77:3f:ad:5b:f3:40:ec:3b:76:0d:a2:05:07:0b:
                    30:1b:bc:40:4f:7a:f4:80:96:de:41:22:95:4a:ff:
                    4a:cb:6e:6e:68:d6:48:81:34:6f:97:22:1c:7f:70:
                    97:0c:83:f8:f5:97:7e:f7:62:81:0c:4d:9a:ed:91:
                    7d:b5:61:3c:f9:ae:85:9e:e4:51:16:12:a3:77:e2:
                    cc:d4:d9:da:b0:5e:01:5a:98:a0:ab:69:36:ab:72:
                    84:66:27:63:3a:82:4e:cb:5e:e4:24:6b:2b:01:df:
                    a2:6c:c5:4c:82:00:ae:01:9b:98:d3:39:f6:d6:99:
                    84:ab:57:d1:73:7a:4e:15:4a:fc:5f:02:cb:7a:82:
                    91:38:63:28:ad:89:6f:99:c3:82:84:71:53:5c:77:
                    21:ca:1c:3f:dc:0b:1e:25:4b:4b:88:04:3c:05:d9:
                    e8:f0:de:68:dc:0b:91:40:0f:e1:e0:e7:4c:7d:9a:
                    64:f3:37:b8:bf:0d:66:b9:eb:74:e5:ba:c3:9d:f6:
                    2a:3f:74:3b:00:6a:32:2b:f0:6a:a9:b2:4b:e5:a9:
                    d0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F9:27:62:64:6C:87:E4:C7:4A:70:CD:13:DD:3D:30:D2:33:8A:F6
            X509v3 Authority Key Identifier:
                keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f5:70:97:33:11:a0:c9:df:00:21:45:7b:1b:9e:42:67:ac:
         fe:30:bb:1d:8e:0d:c4:96:fe:48:3d:f4:87:84:97:52:66:43:
         2c:d9:2b:3c:f0:5c:fb:7b:93:0b:27:31:c7:c6:1d:40:03:08:
         85:e4:70:be:1c:e9:97:b6:55:68:65:ff:4c:e6:f5:5b:49:54:
         ce:c6:e1:6a:a5:97:ce:c4:15:02:12:65:6c:ef:f0:0a:bc:bb:
         e9:c0:54:e1:e0:b2:1f:76:f8:0c:af:7d:fa:10:7d:e7:46:e1:
         e5:a5:51:67:e0:be:54:5f:c9:91:67:0d:39:b6:39:88:71:24:
         ec:5e:52:52:8a:93:c4:ae:fd:9b:31:ee:80:7f:35:e1:a7:ce:
         48:ad:84:75:3b:ea:59:d4:f5:03:90:2b:e4:4e:6d:bb:db:90:
         ae:01:cf:9e:d2:5c:40:7f:a3:ef:ec:02:4c:bd:b1:ff:83:06:
         8d:66:04:96:1a:2d:c7:20:b7:1c:c8:93:f4:2f:78:a6:6c:8b:
         84:2e:b1:bf:02:76:65:82:05:2e:9c:a1:d4:7a:11:6f:3c:e5:
         29:bb:a6:bb:8f:a6:f7:57:78:be:95:44:3b:b9:bb:c7:2a:5e:
         10:bc:eb:3b:c1:7a:6a:e9:db:d8:92:2c:73:80:22:c3:ca:00:
         33:04:99:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:10:58 2025 by rpki-client