Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
File:                     4qKrCidaLQTx4mNassd-s65gOMw.mft (raw, json)
Hash identifier:          bRy1KKRMqRIdgt6ZqyrZORwiL221XGOdILWBB82DfzI=
Subject key identifier:   DB:A3:38:0D:AC:A8:B8:C8:F4:13:4E:4A:DF:95:7B:DE:A7:11:62:DE
Authority key identifier: E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
Certificate issuer:       /CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Certificate serial:       0196C9844CF2121EBE71D388B196F37D0599
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
Manifest number:          087D
Signing time:             Tue 13 May 2025 12:00:12 +0000
Manifest this update:     Tue 13 May 2025 12:00:12 +0000
Manifest next update:     Wed 14 May 2025 12:00:12 +0000
Files and hashes:         1: 4qKrCidaLQTx4mNassd-s65gOMw.crl (hash: 3k3e0iwzKSqJ43+ewXSufcmWawWeLzpPRDmyUj3qHqQ=)
                          2: r-_fYxsQeAAnWT8K8BN3aabue4c.roa (hash: vX8iAlHxAeCaWnzF37mIFqPFZYMuvvYEyZXEicfJpc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:84:4c:f2:12:1e:be:71:d3:88:b1:96:f3:7d:05:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
        Validity
            Not Before: May 13 12:00:12 2025 GMT
            Not After : May 14 12:00:12 2025 GMT
        Subject: CN=dba3380daca8b8c8f4134e4adf957bdea71162de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5e:81:02:00:81:dc:06:13:e3:85:5d:18:53:
                    19:59:80:62:16:5a:15:fa:df:bd:af:4d:d9:aa:1c:
                    a3:bd:13:b5:26:f9:50:b1:4d:60:ad:78:b9:00:3c:
                    82:f2:ec:f2:0f:33:ba:26:28:65:f4:7c:a1:ab:fd:
                    ba:3f:de:44:9d:ab:55:04:4e:5b:a6:10:e3:99:f4:
                    9c:28:f0:59:88:60:19:7e:87:1f:2b:00:f9:29:45:
                    a8:db:cc:9c:6e:df:3d:9d:74:bf:62:de:b9:e2:df:
                    11:60:07:ac:78:e6:cb:15:55:41:1b:b4:5c:8f:40:
                    4f:26:a9:ac:fc:c7:83:d4:5a:90:a8:fc:f8:10:6f:
                    e5:f9:a5:ff:38:3a:82:1d:f7:31:b7:1b:ad:c8:c3:
                    81:71:90:6c:ce:0e:13:22:33:3e:6f:6f:49:4c:d4:
                    01:f9:a5:70:31:ff:c7:1e:34:ee:26:20:7a:a8:0f:
                    77:e1:1e:8b:19:1e:94:fc:06:50:98:4b:9b:48:b8:
                    ba:52:02:e5:11:83:0f:83:1a:ff:18:15:14:8e:fe:
                    8a:11:8b:28:f0:76:f3:b5:af:2d:d2:36:5f:f8:37:
                    26:63:34:9b:26:40:e7:6f:f6:6f:f1:4d:fd:f5:87:
                    8e:00:be:5b:a5:e3:c9:58:9b:7d:d3:42:b4:8b:28:
                    68:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A3:38:0D:AC:A8:B8:C8:F4:13:4E:4A:DF:95:7B:DE:A7:11:62:DE
            X509v3 Authority Key Identifier:
                keyid:E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f6:37:15:d1:17:ac:96:30:bd:e9:f6:f1:46:77:a4:02:c1:
         6a:22:42:1d:12:ec:20:f0:d7:38:48:e0:f4:be:71:b1:2d:00:
         8d:ea:90:8c:39:f8:28:72:5a:38:11:4e:69:f7:5b:d1:48:c4:
         e1:e3:1c:cf:bd:66:9a:4f:9d:1e:15:f7:df:fe:88:71:4f:5f:
         95:4f:6c:d2:64:3e:8d:49:de:98:e1:34:8b:38:81:94:f6:6f:
         78:12:48:06:e9:d2:58:38:12:8a:3e:20:87:b8:dd:23:20:ce:
         ce:14:d7:fc:26:85:6a:5b:9a:24:d4:17:66:40:ff:c8:c9:63:
         0b:cd:df:18:0a:6d:44:f5:a3:18:95:b4:c9:da:1f:a6:27:2b:
         30:5d:f8:16:df:a7:4f:4e:34:d1:a0:4f:5f:52:ab:30:9d:80:
         a8:96:c3:44:e6:6e:11:2a:35:35:ab:23:b2:ff:d8:5e:f9:f5:
         a9:8f:f6:9a:ed:f0:97:35:11:32:5f:79:c1:76:8e:f5:d4:6a:
         52:31:82:6e:3a:71:f8:7e:fa:14:24:82:36:21:48:e5:53:34:
         8e:4e:6e:dd:51:a2:5f:f3:66:14:c1:fb:e8:c8:7f:11:a6:bd:
         64:02:24:ce:dc:ce:cf:e5:55:43:fe:66:3f:4f:f0:60:ba:2b:
         49:ca:1e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:37:22 2025 by rpki-client