Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
File:                     B13D8iVyK4Cavph3jDv9cAnhz08.mft (raw, json)
Hash identifier:          zijwzDDSlZH6yOr80fhsi05xwPRvrVpFAqMs4MPnkX4=
Subject key identifier:   87:58:FE:11:45:A6:91:BD:72:E7:E8:D7:C2:DE:E1:C1:14:F9:64:B0
Authority key identifier: 07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F
Certificate issuer:       /CN=075dc3f225722b809abe98778c3bfd7009e1cf4f
Certificate serial:       01964B58966885A46B24DE87BBA83D17A578
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
Manifest number:          075D
Signing time:             Sat 19 Apr 2025 00:00:18 +0000
Manifest this update:     Sat 19 Apr 2025 00:00:18 +0000
Manifest next update:     Sun 20 Apr 2025 00:00:18 +0000
Files and hashes:         1: B13D8iVyK4Cavph3jDv9cAnhz08.crl (hash: fLYr1KW8omrEmFs6Yb0hrD9SkUNPc4xDbOGxVaVTe4Q=)
                          2: YF_8BljowlmU3n9MOrd56EKDy3I.roa (hash: 5hFRnx4Cut7X+n+05i8/H1CgpRmoRUaN3KMI2gJMlwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:58:96:68:85:a4:6b:24:de:87:bb:a8:3d:17:a5:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075dc3f225722b809abe98778c3bfd7009e1cf4f
        Validity
            Not Before: Apr 19 00:00:18 2025 GMT
            Not After : Apr 20 00:00:18 2025 GMT
        Subject: CN=8758fe1145a691bd72e7e8d7c2dee1c114f964b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0a:9a:eb:51:c8:b7:01:08:32:49:b2:11:d6:
                    94:1e:58:91:b9:59:9e:06:3c:e5:07:e3:e5:db:4d:
                    7e:28:dd:4a:45:6a:aa:09:cc:55:09:7e:2e:b7:77:
                    20:7b:ea:a9:3b:13:e7:6a:74:db:ce:94:d8:ec:88:
                    2d:49:ac:e3:db:55:f9:62:ff:5a:d6:1d:a0:6a:8a:
                    46:a8:4e:42:9e:35:bf:45:ff:41:48:a1:c2:a3:da:
                    05:cb:db:c6:f7:94:02:6b:69:1d:4f:78:34:42:ce:
                    f3:ed:50:97:c4:5e:73:1e:70:01:24:8c:f3:54:9d:
                    b7:38:17:61:50:28:e1:31:d2:0e:d7:2d:bc:34:24:
                    5c:78:8f:c3:d3:65:32:98:bf:82:71:96:32:9f:98:
                    1f:61:a4:b6:65:bd:c8:08:55:3d:f0:09:00:b9:bd:
                    db:9f:9a:0c:b2:db:19:de:b1:c2:ec:ef:f1:03:9b:
                    37:f0:05:d6:2a:c2:8f:e1:d0:6b:af:89:3f:bc:5f:
                    ae:c4:d4:31:83:6d:66:be:f0:f3:03:85:6a:c8:0a:
                    6f:ec:2d:32:20:ad:98:23:8a:98:54:d2:13:96:86:
                    1c:3b:02:86:b6:96:26:22:d1:ea:b2:a2:89:4c:e2:
                    7b:92:7f:11:7e:ff:36:99:24:63:da:e3:e0:26:fb:
                    27:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:58:FE:11:45:A6:91:BD:72:E7:E8:D7:C2:DE:E1:C1:14:F9:64:B0
            X509v3 Authority Key Identifier:
                keyid:07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:80:fb:6d:b6:e6:1b:b2:0d:9b:5b:9f:df:66:3e:d6:7c:03:
         33:f0:bf:69:17:5a:7a:ca:fb:d6:b7:da:74:4e:dd:59:a3:50:
         e7:c4:16:4b:83:b1:8d:b2:25:b3:3f:3a:50:0e:ae:1b:66:18:
         6e:e9:c8:b9:44:a3:96:8c:2c:43:13:19:87:2c:c0:33:ec:9f:
         e6:fb:f4:33:85:41:40:75:ca:ed:93:ab:e2:a9:a7:7f:40:45:
         56:8a:87:66:c9:9c:31:06:94:98:ea:10:d3:bd:f3:b4:85:8f:
         b9:2a:a3:19:5a:f5:e8:a3:89:86:e1:1c:9c:8b:c1:ad:16:c3:
         fd:5e:6d:3f:0e:a6:ad:84:91:67:29:e3:62:08:80:65:3e:4e:
         98:88:74:d4:47:e3:01:dd:93:13:1d:27:a5:36:d9:ed:20:84:
         08:e1:4d:d3:f5:c3:e9:5a:01:37:38:40:e4:fd:e1:6e:50:4c:
         c5:89:87:44:36:c6:a2:80:7b:f6:2e:93:5f:32:6f:30:ab:31:
         b6:5b:4c:a0:e8:0b:00:d7:1b:9d:69:9c:bf:69:8c:2c:0c:b3:
         d3:de:1c:d6:a9:d5:3b:92:44:54:fc:f1:13:7a:fd:ff:b6:0a:
         38:04:56:48:b7:7a:ba:73:70:9f:70:dd:b9:c0:63:70:84:3f:
         e8:3c:97:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:17:49 2025 by rpki-client