Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
File:                     kbP11vQ-gwcfp35tPru3k1L5YbU.mft (raw, json)
Hash identifier:          Ipp/qYY2A3mG4pciXXm/LIw/Qv+2Lvt+xj7P6JUSza4=
Subject key identifier:   77:D4:FD:83:30:BA:12:7B:A9:D9:CF:85:15:D0:6A:21:D2:FD:DC:50
Authority key identifier: 91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
Certificate issuer:       /CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Certificate serial:       019645C4A1E8006495B38B00F3347938FA69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
Manifest number:          0DD2
Signing time:             Thu 17 Apr 2025 22:00:36 +0000
Manifest this update:     Thu 17 Apr 2025 22:00:36 +0000
Manifest next update:     Fri 18 Apr 2025 22:00:36 +0000
Files and hashes:         1: AHAEcpQC5M7HA3lpCyAUPO_2dfI.roa (hash: QyNnsqD7JTUcYd/+hLfrA6pGFz4v5bZK87dfCrHLd18=)
                          2: kbP11vQ-gwcfp35tPru3k1L5YbU.crl (hash: SmlyWJinlpWeEsRWkmPGX5Q3tmmFepIUJCRghRyK370=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:c4:a1:e8:00:64:95:b3:8b:00:f3:34:79:38:fa:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
        Validity
            Not Before: Apr 17 22:00:36 2025 GMT
            Not After : Apr 18 22:00:36 2025 GMT
        Subject: CN=77d4fd8330ba127ba9d9cf8515d06a21d2fddc50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ac:80:74:6c:71:a7:3d:1c:44:36:ee:a4:19:
                    88:b1:2d:c7:84:db:59:34:5e:27:b3:c0:fc:e2:8b:
                    22:0f:31:c9:03:bd:00:f6:7a:e5:78:9e:8d:54:38:
                    a2:9d:97:4f:0a:75:a0:c8:6f:82:42:b4:7e:10:be:
                    01:14:f4:88:0a:37:be:a5:b5:a8:e8:34:2a:86:0f:
                    1f:69:11:4a:53:40:1e:58:c1:77:37:e9:13:4e:0c:
                    4e:7b:5b:fc:36:33:88:22:42:83:6d:f1:89:2c:60:
                    b5:64:38:8e:b9:e4:4c:28:c1:fe:0b:83:9e:f8:7c:
                    99:7c:c1:ee:5d:2c:c8:0a:bf:52:99:d6:fc:26:dc:
                    ae:71:c3:15:77:c5:8f:94:7c:c6:36:42:ef:97:85:
                    de:d2:f5:31:2e:8d:3b:c9:e0:af:47:c0:ed:71:75:
                    49:0b:b0:9a:72:b0:b1:08:b6:79:71:a5:ae:5c:5e:
                    e9:16:a6:19:65:99:eb:97:f3:4d:19:57:ed:3c:a7:
                    cc:66:75:d4:b0:80:52:d4:da:f9:2b:40:a9:f8:4c:
                    3c:56:6b:d9:d1:08:14:3c:16:7e:a4:83:23:91:f6:
                    95:5f:78:46:53:29:84:ee:a9:f2:35:cc:ee:19:4a:
                    9f:91:c4:83:22:cc:04:04:eb:99:23:38:01:45:34:
                    27:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D4:FD:83:30:BA:12:7B:A9:D9:CF:85:15:D0:6A:21:D2:FD:DC:50
            X509v3 Authority Key Identifier:
                keyid:91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:05:3d:80:b8:fd:09:77:fb:65:2c:df:31:4b:2a:4f:5b:54:
         22:83:d7:80:2e:a0:ba:28:df:31:0b:0b:df:55:c1:be:46:7f:
         8a:24:59:c5:61:a7:83:57:5f:1c:35:26:ad:28:20:36:7b:e2:
         22:91:9e:86:1f:de:03:91:f4:9d:d4:58:85:63:15:5c:c5:2c:
         27:b5:10:65:85:3d:d8:26:c9:96:e3:4e:0a:de:47:a9:af:8d:
         e2:f4:81:59:3a:61:51:6c:c7:95:bd:19:31:0a:78:9c:2c:a4:
         ee:bd:a9:c4:1a:e5:da:56:d0:2d:cd:7a:97:66:fa:b2:b8:69:
         fa:19:a4:83:eb:f0:76:a8:92:66:a5:d8:26:bf:91:3b:2d:03:
         90:51:d1:9f:55:a5:3a:f3:a5:5b:3c:7c:c9:e0:48:88:12:22:
         3e:cb:fe:dc:c6:d9:c8:73:af:0e:a3:22:a2:fc:ee:98:23:2f:
         e9:6a:8f:5e:9d:53:29:a5:ca:08:cd:cf:2e:a4:52:63:94:32:
         80:59:63:9f:4a:28:0a:c5:a3:63:cb:fd:0f:3c:4a:f2:f4:24:
         94:ce:a1:2c:d7:52:2f:b8:04:dc:68:f9:f0:da:f0:f2:0b:0e:
         5b:f8:24:f6:18:ee:7c:9f:6f:74:d4:dc:3c:e0:80:a6:a2:f0:
         8c:de:88:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:37:46 2025 by rpki-client