Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
File:                     4qv2099Tm7fBaE-09GF50NoGsIM.mft (raw, json)
Hash identifier:          8llT57kEv731sEUo3DNd94KOyxwFgYuR3bgvwOIFjqM=
Subject key identifier:   D2:95:B1:49:2E:7D:44:5A:0D:11:06:02:30:34:4D:49:3F:D0:44:B2
Authority key identifier: E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83
Certificate issuer:       /CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
Certificate serial:       0196B6D99CE3ECE95BA219FE283F82E4D01D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
Manifest number:          0C11
Signing time:             Fri 09 May 2025 21:00:36 +0000
Manifest this update:     Fri 09 May 2025 21:00:36 +0000
Manifest next update:     Sat 10 May 2025 21:00:36 +0000
Files and hashes:         1: 4qv2099Tm7fBaE-09GF50NoGsIM.crl (hash: dIi3E0rQfocJpdW9R/Oke2ezAyVgO+Y2PvVksBJCqr0=)
                          2: ILMIPoeAh6Mp9Q-FEoKjBIMPdAM.roa (hash: 5aktyEB76Rn5TuWGXiVEAOmlZjNF43pV1TNogR1WVfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 17:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:d9:9c:e3:ec:e9:5b:a2:19:fe:28:3f:82:e4:d0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
        Validity
            Not Before: May  9 21:00:36 2025 GMT
            Not After : May 10 21:00:36 2025 GMT
        Subject: CN=d295b1492e7d445a0d11060230344d493fd044b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:33:cd:c2:23:a6:e6:44:26:19:5c:34:9d:d9:
                    4c:30:0d:ae:6e:c6:60:cc:5f:81:33:3c:ef:cb:bb:
                    68:0c:bd:b8:9d:08:c5:ab:50:1c:7f:f2:40:ec:fb:
                    2b:fd:f0:b1:70:9b:b2:2b:d9:0d:53:97:b4:81:89:
                    f5:dd:66:ca:85:88:21:c2:34:b0:1f:58:2f:08:c0:
                    86:8b:18:3d:a3:f3:a3:3d:9a:65:fb:bb:1b:b6:73:
                    fc:ff:e4:f2:9c:cf:19:01:c5:bd:56:60:8e:8c:91:
                    b1:ec:38:e3:4c:b2:26:bb:4d:3b:bd:7f:4b:1d:a9:
                    95:d3:e8:85:b0:87:f2:8e:84:e9:d8:5a:0f:47:99:
                    e9:90:ae:a4:be:c0:e0:6f:e0:19:75:6e:06:f5:b6:
                    4d:2c:d3:80:15:28:4d:4d:4f:f9:f8:8a:67:6c:4b:
                    16:b9:6a:3d:b3:dc:a1:c3:48:50:f3:e8:a7:b2:0c:
                    ce:28:f0:f8:15:1d:aa:95:85:72:ff:04:f6:2e:3b:
                    61:05:70:40:d2:4c:97:d2:ef:0b:17:2d:23:e3:7b:
                    23:60:2a:1e:3e:a5:d1:36:c5:aa:85:25:f7:37:02:
                    f6:3a:65:39:fc:ca:cc:76:a6:f8:d9:4f:02:e7:ed:
                    c9:1a:c3:56:e9:bf:b2:53:1d:1e:13:88:d2:38:05:
                    6d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:95:B1:49:2E:7D:44:5A:0D:11:06:02:30:34:4D:49:3F:D0:44:B2
            X509v3 Authority Key Identifier:
                keyid:E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:15:8d:2d:5f:22:c0:41:c1:a5:4f:4b:c8:a9:26:65:d6:16:
         96:a8:98:67:cb:9f:a1:8c:21:f2:80:16:b5:db:f5:47:78:58:
         89:80:ec:e4:e0:55:13:b6:7b:dc:0c:83:21:52:ac:93:cd:a8:
         95:42:cb:6f:37:29:50:77:f3:45:0d:99:24:31:29:6f:3c:83:
         85:b1:28:9f:15:24:63:57:0d:13:b8:8a:8f:65:fe:15:90:40:
         c5:f3:4d:62:49:dd:85:6c:48:4c:5b:c4:41:4b:be:a5:40:98:
         d3:9e:23:45:9d:5c:09:83:e7:71:d4:88:fb:ce:16:28:ff:09:
         1e:11:26:cf:95:68:de:0f:74:91:4d:95:02:9f:8c:99:0a:00:
         b5:bf:03:b6:63:1a:e4:78:74:5e:a7:b0:fd:fb:e0:3e:08:ad:
         38:f4:5c:0f:e0:9a:8b:58:53:a2:44:b0:7e:4c:9d:17:2a:11:
         08:90:37:7f:68:23:cc:d4:98:c6:ab:c9:e4:a5:17:3b:fe:64:
         d1:37:d5:f6:f8:80:41:ac:54:f8:73:df:ed:63:70:30:b5:79:
         b3:46:9f:08:fe:fe:60:de:77:de:8c:91:8c:48:6c:9c:82:37:
         8c:da:47:1d:ea:f9:10:de:a0:1f:af:46:4f:41:64:31:c7:31:
         df:0d:95:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 00:43:33 2025 by rpki-client