Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
File:                     37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft (raw, json)
Hash identifier:          fdchXSHfm3res043Wo9MlvODF/rSI0Wi2E4/vFHZwiE=
Subject key identifier:   1C:84:60:92:A0:62:5B:85:4C:1D:40:F8:9B:B1:2B:51:17:71:42:F0
Authority key identifier: DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
Certificate issuer:       /CN=dfb8d9140502c9e035305189bf658234db14f54c
Certificate serial:       0196B8FEE89ED6C90594B179B1A0873EA5F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
Manifest number:          08CF
Signing time:             Sat 10 May 2025 07:00:35 +0000
Manifest this update:     Sat 10 May 2025 07:00:35 +0000
Manifest next update:     Sun 11 May 2025 07:00:35 +0000
Files and hashes:         1: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl (hash: y+xZB7d4Z1Hqbt/Z98nPOyx6yAUxTy1UDbe5daNhwes=)
                          2: kI_UKMcmunYMY9TjK1VDTbIdCXE.roa (hash: /3d7l1sDA4ix/P9CQv22eTNSFswBDUH2vFeOZFQU5WA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:fe:e8:9e:d6:c9:05:94:b1:79:b1:a0:87:3e:a5:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb8d9140502c9e035305189bf658234db14f54c
        Validity
            Not Before: May 10 07:00:35 2025 GMT
            Not After : May 11 07:00:35 2025 GMT
        Subject: CN=1c846092a0625b854c1d40f89bb12b51177142f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ce:89:86:26:2f:61:03:ef:64:7a:b7:ae:e8:
                    52:22:98:63:61:98:1c:99:37:7d:f7:12:8a:24:c6:
                    c7:11:dc:7b:78:49:41:74:0c:fa:9b:de:71:92:39:
                    e5:48:41:c6:1e:a9:70:62:ca:f6:de:b3:bd:b5:88:
                    8d:e6:5e:c9:0d:bb:b4:fb:1b:a9:f9:95:44:e7:57:
                    e2:7a:cc:b9:ce:cb:70:a9:99:c4:45:7e:18:b8:f0:
                    95:01:a2:52:88:2d:20:cc:cc:90:20:35:8a:88:36:
                    6f:41:65:a0:24:d7:94:9f:ea:86:4e:0a:6b:25:6c:
                    2b:9b:0a:38:86:68:23:5a:59:ec:e0:1d:e8:77:cf:
                    32:ca:58:04:b3:d1:fc:ef:2a:c8:3b:d7:28:d5:de:
                    05:0a:3d:6a:7d:a5:5b:a0:13:b3:0a:c1:e7:4f:7a:
                    eb:b6:e8:5f:56:6d:1c:61:eb:95:88:b6:79:a5:3d:
                    a8:49:27:fb:b4:77:a6:8f:7f:e2:8b:87:ef:e8:68:
                    62:61:50:0f:c4:4f:3f:43:68:fb:84:f8:91:13:02:
                    e8:ef:03:fd:e8:fc:d5:64:bb:63:c2:e2:fd:ad:27:
                    eb:1b:ba:09:92:42:9c:52:b7:05:53:24:13:52:c3:
                    f2:6e:52:8c:36:b8:75:2f:aa:6d:86:34:aa:6f:24:
                    ac:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:84:60:92:A0:62:5B:85:4C:1D:40:F8:9B:B1:2B:51:17:71:42:F0
            X509v3 Authority Key Identifier:
                keyid:DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:01:9f:b8:19:22:ea:4f:02:6b:bd:c4:0a:6a:c0:ad:8c:9a:
         fc:22:c7:b5:bc:94:20:1e:08:10:c7:5e:46:0f:a9:88:99:52:
         a0:d2:d9:10:ae:f9:0b:8a:c2:33:5f:1b:4c:8e:aa:39:dd:c4:
         2a:7c:bc:ba:e4:0d:6f:d1:b6:fa:ab:ae:f7:26:c1:36:ce:4c:
         7c:c6:20:54:40:3e:6c:10:67:ae:c2:a4:0d:73:9d:eb:00:db:
         d1:38:f5:ed:fd:14:4a:0d:e6:00:5d:99:fc:1a:e1:32:51:35:
         23:59:cb:37:e9:59:6c:06:d5:7d:28:8a:91:ff:12:24:55:3a:
         04:43:a2:5b:55:7c:30:ab:ba:dc:4c:da:9f:97:4c:1b:ad:a8:
         6e:ec:da:fa:16:c7:7f:9c:4d:a5:63:52:a1:9f:8e:86:8b:f9:
         69:b5:1a:f1:c0:83:e7:22:4d:17:a1:65:e8:57:08:17:f3:42:
         77:79:1f:49:7b:f7:5c:b3:8f:ed:4c:00:80:d1:3a:ba:0d:bd:
         8c:70:40:db:c1:30:b5:0f:bd:e6:44:53:35:f0:06:10:03:c1:
         b1:63:9d:91:27:4a:5d:21:18:2c:cc:68:03:77:d4:a8:73:77:
         74:54:b1:ea:10:f3:4d:2c:4e:8e:5b:b3:5c:11:15:ed:2a:16:
         fe:e2:1c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:25:30 2025 by rpki-client