Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
File:                     Eo0NA9Adij4t-t3y29j5fgkPgOk.mft (raw, json)
Hash identifier:          DARNfyQeYyKg9HFupeWUL6Y70L/6T/urfrcD5aVa/4g=
Subject key identifier:   99:AB:2F:19:79:30:6E:19:90:40:44:4D:06:28:14:D6:15:9D:1A:D9
Authority key identifier: 12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
Certificate issuer:       /CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Certificate serial:       01964D7F18EC49E04D5773AA9C859C9626E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
Manifest number:          0308
Signing time:             Sat 19 Apr 2025 10:01:37 +0000
Manifest this update:     Sat 19 Apr 2025 10:01:37 +0000
Manifest next update:     Sun 20 Apr 2025 10:01:37 +0000
Files and hashes:         1: Eo0NA9Adij4t-t3y29j5fgkPgOk.crl (hash: xm8xw04dv1aZjlil+FVO/u0Jv0lSLKWDunDjI5gFdrg=)
                          2: Yg36LjRXCXSCdmDkuzx_Yh_nOXc.roa (hash: Bv3OWsc+AnulFasemob+5BPRBgZPZ3l/tFY/Jb5RKa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7f:18:ec:49:e0:4d:57:73:aa:9c:85:9c:96:26:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
        Validity
            Not Before: Apr 19 10:01:37 2025 GMT
            Not After : Apr 20 10:01:37 2025 GMT
        Subject: CN=99ab2f1979306e199040444d062814d6159d1ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7e:66:6d:84:37:d5:c0:8c:37:d9:2c:5d:b3:
                    5b:50:14:a1:da:23:df:fa:1c:c1:4d:ba:a8:dd:72:
                    12:b5:f0:0b:aa:6c:4b:00:88:0c:50:63:5d:04:b6:
                    d0:46:d5:22:13:ad:2c:41:ff:0a:b9:2e:32:cc:ee:
                    f1:b8:32:05:3f:a1:b5:a9:44:3e:98:0c:85:ee:4f:
                    9e:e5:e8:46:7b:4a:d4:cb:c1:2b:36:9c:e0:82:91:
                    a8:ea:7a:89:27:90:a5:21:88:81:8c:f0:98:75:12:
                    c4:33:27:64:df:f8:21:70:a1:2b:e2:30:79:f9:11:
                    be:6d:f2:66:67:ac:6a:81:38:f1:09:21:54:54:9d:
                    46:37:43:84:b8:a1:c1:9f:75:a0:4d:dd:fa:3d:75:
                    65:17:72:5c:03:ff:8e:c8:92:c3:8a:5c:e4:30:d1:
                    be:f0:9c:40:43:b2:55:15:a4:15:a1:7f:2f:7a:30:
                    08:5c:11:1e:8c:ef:0f:b2:e4:6b:36:39:ea:69:a7:
                    37:60:d2:95:9d:43:e6:54:c5:5a:43:95:87:c5:ba:
                    77:2d:a5:bf:8c:86:80:87:ad:ef:5a:f9:f8:d8:e2:
                    02:dd:4c:84:1e:20:74:dd:8a:12:5e:73:bf:9b:26:
                    36:07:00:35:50:7a:9d:91:60:4b:5e:87:eb:96:f2:
                    6c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AB:2F:19:79:30:6E:19:90:40:44:4D:06:28:14:D6:15:9D:1A:D9
            X509v3 Authority Key Identifier:
                keyid:12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:f0:d6:a9:85:1f:60:60:a4:73:71:74:2f:f6:e2:59:36:9a:
         f7:56:81:43:bd:9e:35:83:a6:4a:84:8f:3d:8a:07:d7:30:f8:
         5e:d3:c6:f9:65:7b:d0:45:06:82:4e:cd:3c:65:a7:ca:6c:61:
         82:dd:33:b7:df:7d:cf:8a:33:fc:07:bc:01:08:f0:2b:31:ac:
         4d:d2:b3:1b:64:c2:40:b3:62:a7:65:0a:36:a3:f9:83:b7:e1:
         85:2a:21:6b:b8:9b:41:4e:5b:6c:7e:51:8d:78:62:8a:c1:8a:
         86:b7:7d:45:b7:7f:13:88:51:8f:61:da:c8:ed:f9:6b:f7:82:
         fd:b5:db:19:dd:31:11:a5:a1:b1:ff:03:c0:53:dd:0e:1d:7c:
         83:95:dc:d9:de:9e:90:6b:91:bc:88:06:77:5c:d9:70:9f:13:
         7b:e5:97:76:f2:7d:af:f0:dd:58:fd:52:1f:27:43:9a:79:15:
         8a:2e:1c:98:35:2b:9a:47:1c:bc:77:b1:95:c3:c1:cc:82:b4:
         cf:2b:72:90:98:92:4c:bf:3f:cf:51:a4:69:bb:9d:25:db:62:
         11:fe:3c:f1:2d:bb:6f:fd:34:9b:94:f2:04:d1:3b:66:7f:d2:
         b5:e2:84:c7:76:92:ea:a9:e9:0a:d8:85:46:4a:97:e6:ae:99:
         f1:db:b8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:08:50 2025 by rpki-client