Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
File:                     CLP7QBlnsG-EG8ah6dSSqadfkmg.mft (raw, json)
Hash identifier:          ujqvGZrxMcIz4iBu1HkNTSAGl7kTwGwirAopCbocHq8=
Subject key identifier:   3F:BF:38:D4:D3:28:FC:2E:01:2F:55:09:A8:6A:17:1E:61:AC:A0:6E
Authority key identifier: 08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68
Certificate issuer:       /CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268
Certificate serial:       01964DEC3431F41546D560834A16699470B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
Manifest number:          0288
Signing time:             Sat 19 Apr 2025 12:00:47 +0000
Manifest this update:     Sat 19 Apr 2025 12:00:47 +0000
Manifest next update:     Sun 20 Apr 2025 12:00:47 +0000
Files and hashes:         1: CLP7QBlnsG-EG8ah6dSSqadfkmg.crl (hash: y3oUZtTXu/j5Ij8cEVFwLQYhxkNzuU7SIS/mwR0mny4=)
                          2: eHRO21DmqwNpVgTB2vD5a-Ys0dI.roa (hash: aBKp2xE7MsTi71gMh8o9d5bU6XkJQ/dv6sIkU9dHe34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:ec:34:31:f4:15:46:d5:60:83:4a:16:69:94:70:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268
        Validity
            Not Before: Apr 19 12:00:47 2025 GMT
            Not After : Apr 20 12:00:47 2025 GMT
        Subject: CN=3fbf38d4d328fc2e012f5509a86a171e61aca06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1e:8f:63:09:48:21:7c:47:e0:04:f5:41:9c:
                    aa:f8:92:b0:18:76:8f:e5:08:4c:30:28:d0:f7:98:
                    22:20:6d:a7:5b:8f:22:2f:89:1c:74:f2:8e:96:9e:
                    46:a1:4e:71:a6:03:b9:76:a5:bc:36:07:1d:53:fd:
                    42:af:06:b6:3c:bf:6f:6a:0d:a0:8b:ca:78:02:29:
                    4d:2b:6b:4c:a1:61:5e:38:c2:ee:67:98:11:cd:e8:
                    49:66:4d:8f:68:3b:cc:d3:7d:75:34:29:a7:2c:7c:
                    42:df:80:80:74:c0:c0:6e:b5:9b:1f:83:ce:b5:94:
                    52:03:e3:8d:3f:71:6c:a3:46:0d:3a:a3:65:0f:3e:
                    32:89:dc:9d:2e:d1:4a:65:a2:27:da:42:92:23:5e:
                    e1:95:1a:9e:6a:ee:a2:73:59:7e:a4:4d:c3:35:85:
                    2e:7a:d0:c6:8a:1c:76:44:92:af:27:2e:f1:a4:96:
                    41:61:9e:9d:cd:5e:9f:4f:17:e3:79:5c:e4:c6:a6:
                    7b:98:d6:1e:d4:05:1c:b1:d1:d4:e5:78:c9:30:a4:
                    1e:14:58:bd:4c:ad:a7:ba:27:2e:08:d4:d6:f9:5d:
                    48:13:a4:02:e7:f0:a5:2d:d0:8c:ee:3c:9d:8b:b6:
                    c6:62:d5:c0:7f:f9:f5:ff:c7:e0:00:68:9a:99:3b:
                    a8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BF:38:D4:D3:28:FC:2E:01:2F:55:09:A8:6A:17:1E:61:AC:A0:6E
            X509v3 Authority Key Identifier:
                keyid:08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:79:fa:e9:ef:6f:1d:08:6a:ee:90:93:f0:2e:46:5a:de:ef:
         d7:c5:99:88:be:30:24:19:1d:51:15:e0:f6:27:d5:07:f4:a5:
         35:09:72:61:2b:ed:78:53:0b:75:c8:23:5b:ff:e5:c1:0a:f7:
         a3:67:57:79:0a:e0:e8:1a:c6:07:3d:c9:59:6c:68:72:e4:39:
         72:e7:e0:17:a5:77:c8:43:92:85:e9:9d:1c:4c:18:6b:f7:25:
         0e:a1:a3:26:83:db:de:13:36:92:13:50:6d:bd:54:ab:1a:a0:
         91:85:70:d6:bd:81:d2:5e:78:d7:01:77:6b:ae:c0:d3:d6:97:
         69:af:fd:d1:22:2c:60:59:40:69:97:9b:fb:bd:fa:64:1f:54:
         ce:0c:d9:39:69:1d:12:97:d0:a4:38:f9:a9:92:bd:b5:8c:eb:
         09:44:5c:e5:95:1b:ac:3b:6b:f3:22:b4:90:18:de:ef:b0:c2:
         c2:0e:a0:53:52:40:cf:83:08:23:90:ba:cc:8b:5f:d9:78:82:
         e9:89:2b:ec:53:69:1d:dc:f6:24:37:54:04:5d:20:59:28:c2:
         4f:b3:b5:9f:ed:a4:50:fb:df:2b:3c:b3:57:f1:70:af:96:7a:
         08:07:33:f9:0e:59:e2:3a:7c:50:3f:9e:3b:28:d4:04:4c:3a:
         aa:de:8b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:03:12 2025 by rpki-client