Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
File:                     18cz6fYTT3RJxBpe6_WDzjW1QmA.mft (raw, json)
Hash identifier:          rIgEuYeTgDBjw0SR1RqDUgNyVCOF48jzc//YnNF/qxE=
Subject key identifier:   A8:B5:87:2D:EB:36:20:C9:AE:10:93:5F:53:BB:A7:F7:35:62:5D:3D
Authority key identifier: D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
Certificate issuer:       /CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Certificate serial:       01964A7D01F267ED659C8E2766A5A7980E76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
Manifest number:          0AF5
Signing time:             Fri 18 Apr 2025 20:00:28 +0000
Manifest this update:     Fri 18 Apr 2025 20:00:28 +0000
Manifest next update:     Sat 19 Apr 2025 20:00:28 +0000
Files and hashes:         1: 18cz6fYTT3RJxBpe6_WDzjW1QmA.crl (hash: WdW+9bOb05V9E31sJDe5M9baM80F3Oroor1TUU5bUWQ=)
                          2: Ykk-D7iJ26tOcqYs9Voa9OtrX8c.roa (hash: BzYAqVCWtu3EBRZpVM9KZ2KVYbyGK5c4dT3hbIbWT74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 20:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:7d:01:f2:67:ed:65:9c:8e:27:66:a5:a7:98:0e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
        Validity
            Not Before: Apr 18 20:00:28 2025 GMT
            Not After : Apr 19 20:00:28 2025 GMT
        Subject: CN=a8b5872deb3620c9ae10935f53bba7f735625d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:16:46:67:a4:85:31:57:58:93:63:f1:21:4c:
                    5c:73:6a:a5:36:02:a5:27:93:36:d9:0b:18:90:f3:
                    e8:da:a8:86:7d:51:ac:9c:bb:9c:20:cf:6c:dc:4d:
                    60:a7:3c:89:6e:06:37:64:c7:6d:4c:17:fe:c0:bf:
                    5e:27:4e:6e:6c:1a:8e:87:fc:26:9a:0e:36:ee:42:
                    ff:fc:87:f2:5d:28:5a:2b:9b:0c:21:e6:10:3b:2f:
                    55:d3:e7:97:a2:8a:fa:bd:10:e4:89:fb:8b:c2:cb:
                    f2:19:2f:23:54:8b:de:5a:be:54:03:43:27:9b:ec:
                    a2:ad:24:90:08:6c:74:fa:49:84:ae:b5:0f:04:ce:
                    3e:d5:a4:7d:f3:1e:1a:4c:d3:92:59:af:99:53:32:
                    d9:37:26:10:8a:f3:09:3e:81:9d:66:a2:95:68:7e:
                    81:0b:29:93:64:2a:ec:cc:60:56:75:1a:b3:6d:e2:
                    3f:91:e9:77:6c:ad:6e:32:af:fa:eb:32:2a:24:fb:
                    4b:86:d9:a5:55:7e:4f:05:76:99:8a:a1:c9:7c:d5:
                    60:87:a4:d1:87:c7:51:e8:b6:eb:dd:05:60:93:3e:
                    73:37:9b:d6:33:4b:e0:7f:24:3c:39:f5:53:12:8f:
                    e1:b2:cf:d2:94:f6:48:70:b6:d9:1f:91:fd:49:f6:
                    f4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B5:87:2D:EB:36:20:C9:AE:10:93:5F:53:BB:A7:F7:35:62:5D:3D
            X509v3 Authority Key Identifier:
                keyid:D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6d:52:e2:ce:2c:2d:b9:da:5f:41:18:78:e0:ea:1a:58:f6:
         77:1f:eb:ef:21:a7:54:4d:88:e5:ca:b9:b7:35:4b:8e:10:40:
         f6:96:fc:fe:a2:11:ab:2a:b7:54:df:10:75:46:e2:88:e2:3d:
         06:3e:8a:27:91:96:e0:dd:6d:27:5c:8a:d9:7c:1e:1a:7c:df:
         fa:69:b3:75:ca:44:83:df:de:27:c2:8b:02:f6:2c:96:d5:71:
         7b:e0:88:8b:b2:90:1f:fa:25:0a:bf:ef:9b:5b:d9:f0:17:c2:
         04:97:ff:ba:92:94:25:f4:2c:c0:bd:ad:c8:69:03:2a:57:b4:
         3c:d3:ea:21:c6:bd:37:e0:08:b6:72:7f:8f:3a:ce:bb:13:c2:
         65:c0:5e:b2:39:46:90:28:1c:41:4d:79:3a:b7:98:a7:58:79:
         c8:b2:bb:fb:41:c4:d7:dd:ce:ef:bd:b2:dc:59:54:84:bf:64:
         56:8b:5f:ab:d2:b3:62:98:68:d5:40:73:79:a4:2a:80:f5:4d:
         9a:86:d8:76:1a:5d:03:3a:73:d2:62:29:94:2a:89:3f:2b:c9:
         84:41:bd:7d:45:3a:b2:db:bc:16:74:60:f6:b3:34:3d:b3:54:
         2b:9b:c3:43:14:57:0e:73:97:a3:63:62:83:b6:8b:28:87:9d:
         a0:6d:14:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:17:19 2025 by rpki-client