Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
File:                     4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft (raw, json)
Hash identifier:          Q1iGA5NIkucq3m6T/++6B6EakVqNt6r1dWfSaK/78p0=
Subject key identifier:   DB:C2:6A:2A:2E:6E:41:A4:DE:81:60:8F:CA:ED:95:26:F9:52:11:71
Authority key identifier: E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
Certificate issuer:       /CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Certificate serial:       0196BD8029E99C0FAD2C82E2A3F5B135AA0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
Manifest number:          0B7C
Signing time:             Sun 11 May 2025 04:00:15 +0000
Manifest this update:     Sun 11 May 2025 04:00:15 +0000
Manifest next update:     Mon 12 May 2025 04:00:15 +0000
Files and hashes:         1: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl (hash: HObSjixTxFNnIJ84EcPVtdUBmZ7JTWtGby3X4GWI0lg=)
                          2: f9bSypnQ1K1dn8AOmITCAE2WfeM.roa (hash: laJDW9FEQ26/eBw7OzSphhRdw2m3zDOPQril8cOuxC0=)
                          3: qF1Sjwc0E4igMvbiTG0GFEV_V8w.roa (hash: C2rdzoCh63UKjy4imOMfxu3Z/XTp23zoXQCrUfaLgrk=)
                          4: wr0uj1SbyF4a3afbyHifWHkLV18.roa (hash: whbGKVVedV+YGL/Rez8V9NgGyEYM+j686HKrZpVv8SA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:80:29:e9:9c:0f:ad:2c:82:e2:a3:f5:b1:35:aa:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
        Validity
            Not Before: May 11 04:00:15 2025 GMT
            Not After : May 12 04:00:15 2025 GMT
        Subject: CN=dbc26a2a2e6e41a4de81608fcaed9526f9521171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:eb:36:1e:e5:94:24:31:fd:a0:2a:0c:b2:43:
                    79:5b:28:42:af:b2:b1:0f:9f:96:0a:06:11:c3:f1:
                    2e:10:f4:ef:da:64:b2:2a:c4:65:f3:ad:49:84:2a:
                    2e:61:10:20:f3:cd:0e:02:ef:20:bc:5f:fc:d3:2e:
                    77:e1:b9:de:4a:f5:9d:8a:21:c5:01:fa:59:7f:08:
                    89:25:88:4b:b6:50:1e:f2:fa:8b:b2:76:1e:e4:43:
                    1c:9c:2c:5d:91:fa:3b:c2:df:23:8a:f5:19:b4:00:
                    83:c2:ac:ed:44:db:42:94:4b:0f:ad:28:f1:d7:a8:
                    71:06:79:32:28:0e:13:3e:aa:a3:66:3a:9b:69:93:
                    71:c6:48:f5:f7:77:70:41:41:7c:57:0a:92:da:cb:
                    3e:27:77:75:82:8d:4f:21:53:9f:2c:6a:41:6d:43:
                    62:42:67:40:c0:84:ce:1c:66:dc:07:c4:07:9f:14:
                    5d:93:7a:d4:29:e7:89:bf:4a:34:43:ed:75:f7:b5:
                    52:f7:ba:83:45:a1:de:23:eb:ba:3c:82:bb:60:99:
                    78:d4:8b:e7:ad:91:f5:bf:7e:02:74:90:f3:35:19:
                    45:67:94:d7:0d:c3:c8:9b:8f:8a:07:62:43:79:71:
                    e7:62:b7:ba:ab:a8:8f:8f:93:f3:6b:32:ef:16:95:
                    4c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C2:6A:2A:2E:6E:41:A4:DE:81:60:8F:CA:ED:95:26:F9:52:11:71
            X509v3 Authority Key Identifier:
                keyid:E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:23:a4:fb:eb:da:82:c1:79:bc:7d:69:5f:3c:7f:3a:aa:74:
         44:4a:ad:0a:59:f9:0d:aa:c2:ad:cb:cd:8d:4c:4a:cf:b0:d0:
         bf:b0:0b:9e:11:8a:57:57:5a:56:6a:f2:83:f7:e5:b2:ca:17:
         91:17:bb:e8:a6:6e:a1:19:2e:65:f3:0d:d4:eb:bd:bb:8b:0f:
         5f:ed:21:26:c2:20:8b:1b:bd:1c:d9:9c:ff:db:e0:3f:c8:8a:
         11:13:bb:34:f3:26:89:44:b7:41:14:45:3b:9d:68:8e:26:4c:
         4e:9a:65:64:bb:bb:33:d6:63:32:47:3e:92:88:36:f9:c1:2c:
         c7:62:49:d6:47:87:0c:73:aa:6d:07:63:87:61:a6:dd:96:2a:
         48:6a:84:f7:55:3c:60:2f:a2:60:c2:ae:6e:5e:e2:e0:e2:b3:
         a8:29:9a:c0:9a:96:bc:44:8d:d4:45:5c:f9:bd:57:3b:d0:5a:
         0c:79:bb:1b:70:2b:34:f9:20:26:5a:ef:89:2c:59:73:0a:32:
         e5:68:c2:e3:dc:4f:2c:7b:c5:a1:83:21:eb:72:47:be:5a:30:
         3d:b8:98:81:11:a2:87:4d:9d:4f:29:22:13:cf:6b:27:26:92:
         62:4f:e4:40:ed:c0:82:f0:8a:07:c9:15:6a:a0:1d:1f:75:6f:
         25:b2:5d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:26:04 2025 by rpki-client