Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
File:                     DnSXlvuOtxaowjxHZJ0jvz0-apg.mft (raw, json)
Hash identifier:          hpohldKzZ7SFZv64X23gmIy32jX7yZqCOyZLbUkmQ0A=
Subject key identifier:   2C:4B:70:74:A4:8C:BA:74:21:09:62:B0:C8:A2:AF:50:BE:B7:8D:2C
Authority key identifier: 0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98
Certificate issuer:       /CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98
Certificate serial:       019750EA63BD75D5AC0598020873987322FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
Manifest number:          0147
Signing time:             Sun 08 Jun 2025 19:00:27 +0000
Manifest this update:     Sun 08 Jun 2025 19:00:27 +0000
Manifest next update:     Mon 09 Jun 2025 19:00:27 +0000
Files and hashes:         1: DnSXlvuOtxaowjxHZJ0jvz0-apg.crl (hash: /yfzE1ygz5KQyJdCBck3o9wqqyJRQVXkchwKCGrAMbc=)
                          2: KVIjbEYwlYHNE7SjeBSZ9snwsuM.roa (hash: jHpTUbyUDvIBB9d7GvdlvIiOW08/ogM82drw/TrRWfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:ea:63:bd:75:d5:ac:05:98:02:08:73:98:73:22:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98
        Validity
            Not Before: Jun  8 19:00:27 2025 GMT
            Not After : Jun  9 19:00:27 2025 GMT
        Subject: CN=2c4b7074a48cba74210962b0c8a2af50beb78d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b1:e1:cb:41:b5:fc:c0:ae:8a:9f:40:94:1f:
                    ff:58:4f:d3:39:cb:a3:c3:55:51:6b:5f:6c:e6:93:
                    72:b3:41:1a:c9:01:cd:38:de:50:45:f6:39:40:0f:
                    cf:a4:f8:33:2e:00:fb:69:ae:b8:a8:a4:0d:68:d7:
                    b5:b2:e2:8b:ca:bf:73:e2:02:7d:4f:e5:ff:e5:04:
                    65:97:23:46:c1:15:f1:44:4b:bd:ba:ba:65:17:ba:
                    e6:c9:ac:fb:40:0c:07:f7:a3:85:6f:8d:99:f7:7e:
                    bf:b1:b4:50:9a:3c:86:04:99:d2:63:9b:83:83:c2:
                    2f:9b:c8:ab:84:fb:bf:94:3e:f4:68:3c:b8:db:bf:
                    69:e3:23:44:09:77:0d:99:69:3b:61:2c:1c:85:a9:
                    f7:d3:2c:79:35:e7:ea:9b:3d:79:5b:e9:5d:50:3d:
                    ee:ac:eb:1b:d0:88:2e:e2:61:f7:da:1a:0b:6b:e0:
                    68:ed:3b:3e:98:3a:a3:39:44:35:dc:44:3b:41:fc:
                    e4:47:f0:2e:8b:05:fe:fa:6e:d5:6b:45:ee:95:2f:
                    61:d3:65:00:b4:2c:a5:0e:e1:af:9f:a0:b9:1f:48:
                    5d:3a:f8:70:50:ea:a6:3c:6f:ff:a2:cb:3f:d1:8f:
                    33:ba:20:a7:04:53:17:56:0e:7d:e0:84:21:4a:ba:
                    1e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4B:70:74:A4:8C:BA:74:21:09:62:B0:C8:A2:AF:50:BE:B7:8D:2C
            X509v3 Authority Key Identifier:
                keyid:0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e5:70:c7:91:de:4b:ff:8b:3e:78:6a:fd:91:3c:85:94:d7:
         db:c7:d0:60:2f:89:b4:08:3d:8a:bb:54:79:27:72:03:f6:b5:
         f4:df:4f:a3:cf:d4:c8:d8:80:63:df:00:b8:c2:25:5a:18:17:
         68:ff:e4:e0:67:ed:6d:bc:62:8b:95:74:98:c2:ec:0f:a4:a2:
         bd:b5:41:bb:e9:23:06:4f:a2:87:0b:ac:51:36:9c:9b:15:1d:
         8b:06:37:9c:14:1b:6c:54:3f:c4:7b:3a:7d:e1:d8:9c:5f:11:
         6c:49:35:3e:6d:82:43:c0:04:74:f7:12:a3:bb:20:a4:c6:81:
         9d:56:be:fe:fd:62:97:a7:f6:ff:7a:b6:be:e1:db:ba:48:96:
         6e:b8:ec:72:ef:2a:5b:5c:20:de:f4:52:19:7b:2d:26:f7:17:
         30:36:17:14:76:c7:98:46:33:d4:63:aa:63:17:4c:36:4f:ed:
         6d:0e:24:1e:f3:cc:08:8f:fa:26:7a:f9:7b:8b:e3:b2:64:36:
         ce:10:05:5f:13:e0:ab:d2:2e:52:a7:6a:3a:fa:08:7a:bf:77:
         c9:87:f7:1f:7f:1b:22:0b:20:d1:d7:65:2d:27:f8:a6:84:be:
         05:c8:2e:24:c0:e9:e9:59:1a:ff:8b:94:a3:99:3e:db:61:da:
         26:d6:95:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:21:50 2025 by rpki-client