Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
File:                     K0ro4PiNDIw530T_pB4ywmJ8OhU.mft (raw, json)
Hash identifier:          cXjH6vULVjbTcEcnjbMGLyRvv4Cs5sbPlpCK0AfBggk=
Subject key identifier:   31:90:DC:9E:41:C0:AF:CC:C2:A2:A5:7F:D4:5F:47:8B:F5:96:FF:17
Authority key identifier: 2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15
Certificate issuer:       /CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
Certificate serial:       0196526D9C592035C8CE58F4C5C944DA6035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
Manifest number:          0216
Signing time:             Sun 20 Apr 2025 09:00:37 +0000
Manifest this update:     Sun 20 Apr 2025 09:00:37 +0000
Manifest next update:     Mon 21 Apr 2025 09:00:37 +0000
Files and hashes:         1: K0ro4PiNDIw530T_pB4ywmJ8OhU.crl (hash: Bh81PNRtUNz7w3EMHcchU4yzFojSugmOTFgt5mHDWuY=)
                          2: RewjGr43EG1iIMj1c-4pVfpQCtU.roa (hash: yXODa8RGa/7nz4mBNAxVv6ZScKn5IPa0tTC093Zhd9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:6d:9c:59:20:35:c8:ce:58:f4:c5:c9:44:da:60:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
        Validity
            Not Before: Apr 20 09:00:37 2025 GMT
            Not After : Apr 21 09:00:37 2025 GMT
        Subject: CN=3190dc9e41c0afccc2a2a57fd45f478bf596ff17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:29:ac:af:3b:f6:ef:f3:70:27:51:0b:b8:b9:
                    9a:18:38:d9:dd:ea:90:0a:dd:68:7b:53:56:d9:02:
                    4e:1f:ec:86:6d:b7:57:50:9d:84:aa:06:d6:51:73:
                    4d:77:dd:f3:40:22:9c:7b:ab:f7:02:a6:61:90:f5:
                    e8:43:62:16:b2:c5:68:2b:fa:3c:e3:45:0b:e3:04:
                    14:dc:7b:36:c7:e1:5f:f9:88:3e:f6:42:fd:c8:f9:
                    10:12:c2:9b:ea:99:ac:a6:95:08:1f:ca:74:e2:84:
                    df:76:88:72:89:77:ff:c2:41:53:e2:fb:15:b5:eb:
                    f6:99:79:e7:84:af:45:4e:ad:ab:46:e7:57:34:19:
                    19:65:d0:8e:f6:6b:9e:cd:2f:5c:05:82:48:67:d7:
                    9d:da:0a:bc:2f:fe:d6:c1:c2:3f:9c:51:05:28:6e:
                    de:5b:3d:6e:49:f7:a8:c3:37:66:61:20:d7:dc:b3:
                    da:21:40:e4:cc:7f:38:95:e3:45:8a:12:46:8c:72:
                    fe:49:75:87:e5:38:a9:1c:8c:61:59:f1:d2:40:e2:
                    56:53:87:0c:a4:40:16:23:02:4c:1f:27:b5:15:fe:
                    77:3d:ac:58:d1:cc:b7:a3:e9:c3:ac:60:cf:a3:9f:
                    6d:99:38:fa:54:43:44:17:b3:2b:4b:ec:c4:29:04:
                    0e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:90:DC:9E:41:C0:AF:CC:C2:A2:A5:7F:D4:5F:47:8B:F5:96:FF:17
            X509v3 Authority Key Identifier:
                keyid:2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:1b:ec:33:c1:33:d0:1b:5b:55:80:f1:17:0e:bb:87:4c:a5:
         27:2a:74:bf:c8:d3:47:31:48:35:ef:ee:24:c9:f6:76:bc:48:
         3b:19:cb:09:17:f2:02:f6:66:58:14:9b:6f:ae:3f:4d:67:83:
         95:4e:d5:42:ed:b2:ec:4a:39:9d:53:5f:aa:03:3a:97:ab:4d:
         64:4c:54:da:49:06:d7:03:d0:e1:72:42:96:a7:c0:3b:2d:57:
         0b:87:de:5e:78:75:3d:44:40:4b:72:71:39:8e:63:32:43:cc:
         d8:91:4a:52:aa:cc:4d:d4:44:6d:10:c0:88:3c:4b:e0:d3:a9:
         6c:24:11:72:f9:8b:c5:a5:a6:4a:39:1b:ab:69:9e:d2:0e:8d:
         4b:f4:27:2f:61:c1:08:f3:81:f0:4c:79:72:be:1d:0d:d7:ea:
         2b:45:85:7a:d0:9e:92:82:45:db:da:d4:66:dd:78:6d:66:8c:
         e1:1e:b9:0f:16:f5:f9:2d:4f:9b:82:0c:7f:4c:e1:98:d8:a8:
         b8:85:0a:db:f3:32:65:a9:c9:63:f9:02:ab:d9:34:ee:c0:82:
         ad:9a:2e:d7:c9:a4:9c:24:14:9c:d2:d1:a4:35:a5:38:b9:13:
         85:d1:dd:91:b9:b1:ef:2e:f9:95:4b:46:d3:84:5c:f3:03:18:
         9b:43:17:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:03:47 2025 by rpki-client