Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
File:                     02v9kovMtCrZxGilUqtzk_3YcJU.mft (raw, json)
Hash identifier:          JP2H9FiehW4dVnezuOute+ire7+rgBEvP40Ah3U36Bg=
Subject key identifier:   04:DF:FB:87:2D:68:0D:5D:68:3F:7C:7D:1D:E6:DE:89:46:52:33:B7
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Certificate issuer:       /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial:       0196BD494D1D5621A734A31DCEA2B64B2CD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
Manifest number:          08F4
Signing time:             Sun 11 May 2025 03:00:19 +0000
Manifest this update:     Sun 11 May 2025 03:00:19 +0000
Manifest next update:     Mon 12 May 2025 03:00:19 +0000
Files and hashes:         1: 02v9kovMtCrZxGilUqtzk_3YcJU.crl (hash: EwiicybCfLPonSyMQj8x7Zw/cFFBpXCguqpmf6B8eP0=)
                          2: MHr8PGZP4WdCJVRk1ABwnxF7Fcg.roa (hash: 6TKkNt/HHcapeVfZJIi0l5UGXRs34MQGe7K+m4zvMs4=)
                          3: glUIEM3aMRzTUWeLJXm7pNU7Hcc.roa (hash: dnZcMSrdJKJGGZKaN5OJM5oZr/gbEmBmefYKs8aAaDo=)
                          4: sUMt2I0qsDCXGGhD6_L1M2esRvU.roa (hash: P9ByjtRUC161Qd26Fzc7AA5m4JXTB5Ed5GY59AzQlSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:49:4d:1d:56:21:a7:34:a3:1d:ce:a2:b6:4b:2c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
        Validity
            Not Before: May 11 03:00:19 2025 GMT
            Not After : May 12 03:00:19 2025 GMT
        Subject: CN=04dffb872d680d5d683f7c7d1de6de89465233b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:da:f8:fe:9b:fd:05:13:27:6b:3e:2e:d6:05:
                    8b:dc:a9:5b:e6:66:1a:2a:02:84:6b:2e:7f:c8:24:
                    35:a9:17:b0:eb:c8:5d:61:b7:d2:1f:d1:80:57:34:
                    d9:d2:0e:0a:49:16:e2:8d:16:71:83:7e:6b:d4:b3:
                    a5:d0:2c:69:f0:f2:d4:8b:7f:be:c7:29:4f:a7:77:
                    9a:97:31:66:a4:38:8b:a5:6e:73:6c:1e:0c:00:ac:
                    ba:2f:77:7e:9a:a1:b4:35:4b:24:fc:5c:b2:04:7e:
                    81:4c:be:25:59:c9:51:67:2f:a2:56:09:ce:47:3e:
                    44:b4:c3:a9:f3:b3:a6:fe:c5:5a:0f:6b:61:59:22:
                    97:11:0b:5b:f1:28:28:d4:f9:c6:55:28:52:d2:a8:
                    1a:c1:83:3b:85:39:f6:f2:b4:ad:aa:98:06:a8:12:
                    24:db:e5:88:e2:21:28:b7:a4:c1:d8:1d:ff:1d:c9:
                    8e:72:24:fa:d7:80:f5:18:ec:e1:89:a4:e3:c3:07:
                    91:6c:f9:17:e5:8c:56:51:23:8f:d9:c9:ff:4b:e5:
                    dc:40:05:7f:8e:38:d7:56:40:11:99:75:f4:08:49:
                    ac:69:11:66:12:17:b7:58:68:3e:20:18:24:be:d2:
                    a2:00:77:14:7c:9d:29:ef:4f:af:f2:56:60:7a:13:
                    8c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DF:FB:87:2D:68:0D:5D:68:3F:7C:7D:1D:E6:DE:89:46:52:33:B7
            X509v3 Authority Key Identifier:
                keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:6c:2e:82:f8:1e:92:22:cb:e5:0f:1c:62:6e:78:20:1a:e1:
         3b:50:87:c1:ea:79:18:90:a4:66:85:3b:39:28:9a:1c:32:03:
         65:60:73:2d:70:bb:b3:d8:5e:85:02:64:ed:e5:17:10:60:3a:
         1d:ab:da:e1:d8:05:d2:8b:5a:7e:d9:20:b5:a3:67:62:a7:f8:
         24:76:41:d9:7f:46:a2:70:ac:0f:62:22:bc:cb:a5:d8:30:1a:
         36:07:e8:32:65:8e:eb:d6:66:27:1e:8e:ba:70:31:5d:22:83:
         fe:61:f2:1b:cc:93:97:cb:63:a1:54:51:c0:f5:b8:23:1f:de:
         ff:7a:57:52:13:91:38:cf:86:5c:ae:ec:89:d1:aa:85:68:91:
         17:f1:e4:93:cc:25:67:eb:17:0a:3f:c3:a0:9a:57:6f:d6:26:
         15:62:9d:b1:e6:7f:d3:e3:10:38:ea:b6:1f:08:01:93:01:9e:
         1d:d9:e0:52:22:f6:ca:cb:49:68:7c:99:43:5f:57:73:48:37:
         70:42:4a:ac:dd:31:84:0a:fb:ae:8e:ac:41:48:2c:fd:9f:cf:
         05:2c:fc:c8:7d:b9:d2:f8:93:1b:32:7b:6d:8a:22:11:6c:52:
         ac:f0:ea:6b:3f:bf:f1:5b:0d:3a:e8:06:a0:a3:bc:28:9f:cf:
         78:e1:a2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:29:37 2025 by rpki-client