Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
File:                     43hlh61HIFqBEo5XjJDK7h5Igos.mft (raw, json)
Hash identifier:          T+YjaBYw74tDLBC5Y7u+zFULFKTDm/E0RtML3t7E32A=
Subject key identifier:   D3:91:C8:85:C2:80:9F:47:F7:2A:3A:56:FA:1B:74:3B:26:3E:E6:1B
Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
Certificate issuer:       /CN=e3786587ad47205a81128e578c90caee1e48828b
Certificate serial:       01964F35CEEEA8C084DC67181DC6731DEA14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
Manifest number:          142A
Signing time:             Sat 19 Apr 2025 18:00:48 +0000
Manifest this update:     Sat 19 Apr 2025 18:00:48 +0000
Manifest next update:     Sun 20 Apr 2025 18:00:48 +0000
Files and hashes:         1: 43hlh61HIFqBEo5XjJDK7h5Igos.crl (hash: 1882iUdzVmB7ZgnFFa5kSs/u7ymJi803y38lzNudAeQ=)
                          2: LktO0B8qjGLInxw3N5jX_ouyGv4.roa (hash: 0acgVKGcL/QrYT0G9rMKO5SvHbTzsdzBy14zEKR/PS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 18:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:35:ce:ee:a8:c0:84:dc:67:18:1d:c6:73:1d:ea:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b
        Validity
            Not Before: Apr 19 18:00:48 2025 GMT
            Not After : Apr 20 18:00:48 2025 GMT
        Subject: CN=d391c885c2809f47f72a3a56fa1b743b263ee61b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bc:6b:0c:31:8d:d1:db:bb:87:a2:22:ab:1e:
                    6f:03:81:c0:02:9c:67:c6:06:e6:75:aa:36:41:02:
                    4f:07:fe:5a:ec:8e:ec:69:84:72:73:6d:25:61:85:
                    70:6c:35:f0:0b:c6:f4:2f:cd:00:e4:26:76:da:81:
                    89:c2:f3:62:ee:4c:04:44:a5:1e:85:5a:21:16:22:
                    5d:f8:b1:99:cb:f0:91:13:ff:26:24:bd:4a:84:e5:
                    5e:df:b9:57:6d:8b:64:68:f8:bc:14:26:cc:e9:f7:
                    f8:51:a2:00:4f:bc:4e:ae:84:04:c4:98:ee:b0:3b:
                    be:32:4d:3f:5c:18:97:3a:1c:3e:d1:72:6b:bb:e5:
                    4f:dd:f7:74:f6:85:87:30:7f:8c:ac:09:6b:f1:84:
                    f3:01:41:a6:84:b5:31:d0:8b:37:42:54:15:54:45:
                    71:3f:2f:85:4f:2c:d2:a5:ad:de:42:ee:b5:8a:87:
                    ec:0b:8b:4b:c7:9b:35:52:6a:10:42:c7:9f:de:65:
                    21:3c:ba:7f:86:6d:08:be:ec:02:ee:5e:b5:35:e8:
                    e9:11:dd:d6:df:6d:05:65:f5:e9:06:94:27:21:fd:
                    1d:d1:6b:69:cf:12:0b:fc:9f:c9:5e:ce:bd:06:9c:
                    ba:b3:6b:0f:d0:bd:f7:84:69:0e:71:cd:eb:52:5b:
                    01:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:91:C8:85:C2:80:9F:47:F7:2A:3A:56:FA:1B:74:3B:26:3E:E6:1B
            X509v3 Authority Key Identifier:
                keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a5:63:b1:24:02:9f:3b:0d:8b:5f:8c:6c:26:f9:0a:b5:9e:
         bd:5b:0f:c7:dc:31:6a:28:33:dd:75:bf:b4:b1:e6:68:31:3c:
         99:97:56:76:98:b1:cd:1b:92:82:18:04:56:02:28:23:f8:55:
         8e:06:2e:3e:7b:a7:f5:fb:b5:c9:f1:8c:0c:08:d7:52:75:4f:
         f9:23:6b:b9:ca:83:de:b8:f5:2d:24:a3:37:f3:33:42:22:30:
         3a:fe:14:e2:71:b1:31:97:ce:9a:ad:80:46:28:e2:19:66:fe:
         39:54:0d:db:b5:6d:b8:1b:91:da:2d:59:1f:f8:fc:c1:03:11:
         2e:1d:44:6f:95:82:a2:c0:b5:b5:11:10:4a:53:58:1d:48:19:
         f1:ec:71:ba:ac:ab:aa:8e:a9:4b:e2:92:0d:89:ed:b4:05:35:
         4e:c0:60:f1:cd:4a:63:4e:37:1d:e5:1b:9b:b9:fb:27:af:c0:
         02:23:69:0f:ce:bc:56:a8:8f:01:48:69:6b:48:2a:35:91:5f:
         12:7d:ac:97:0c:c8:f8:a8:ce:23:99:19:55:8a:ef:ad:d1:7c:
         6b:72:e7:8a:bf:c5:a1:97:4b:b1:60:32:6a:87:68:49:0d:13:
         aa:36:f1:91:5b:ae:f9:20:61:a2:91:df:4e:1d:a3:52:12:0b:
         1c:35:30:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:26:42 2025 by rpki-client