Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
File:                     b4bJ980XO7zR22Hg8bTr4FwbnKE.mft (raw, json)
Hash identifier:          iSSN3pSirbpaQ6mANZN53Kpkku1rK8MC5dVeEiVTScU=
Subject key identifier:   0A:5F:8C:6F:30:42:C6:A8:A3:D7:AC:5B:85:93:B2:45:5D:A2:A5:02
Authority key identifier: 6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
Certificate issuer:       /CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Certificate serial:       0196BCDB9E8C41D28948552E144BF572CB99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
Manifest number:          0F44
Signing time:             Sun 11 May 2025 01:00:31 +0000
Manifest this update:     Sun 11 May 2025 01:00:31 +0000
Manifest next update:     Mon 12 May 2025 01:00:31 +0000
Files and hashes:         1: 7BXDP2MXXtjiuKfCj7kGQbobaJg.roa (hash: dX4O/Ud+qTWtCLczeQoZeg+HV0IvLYclumW7g97KhD4=)
                          2: b4bJ980XO7zR22Hg8bTr4FwbnKE.crl (hash: aMIMzk7fPVaqemfwAEI1OEhPw6r/bC8ekb0KwxLZV1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:db:9e:8c:41:d2:89:48:55:2e:14:4b:f5:72:cb:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
        Validity
            Not Before: May 11 01:00:31 2025 GMT
            Not After : May 12 01:00:31 2025 GMT
        Subject: CN=0a5f8c6f3042c6a8a3d7ac5b8593b2455da2a502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:85:33:77:71:fa:17:9c:f2:f4:0f:1f:a0:c8:
                    96:6c:3b:3b:c3:7e:73:2c:48:0d:21:86:e5:f2:04:
                    a6:b1:fe:b1:e9:f1:ef:ec:4f:8c:b0:2f:a8:48:b8:
                    dc:d8:74:cf:5c:33:be:c5:e5:19:67:4c:56:28:dc:
                    66:de:59:2d:3c:01:51:91:4d:b6:8f:f1:d1:81:b1:
                    8e:18:cc:f7:15:1e:be:04:77:3f:8a:6b:8e:91:49:
                    bd:41:e9:e8:65:09:ad:ca:7c:21:d0:a1:0c:cf:95:
                    e9:86:19:bd:67:ee:03:2c:e6:ea:8d:a2:55:5a:5d:
                    45:55:13:5a:79:fe:9c:51:31:cd:0b:4c:db:90:60:
                    f4:46:c3:c0:e8:1f:12:6d:01:c7:bf:1c:89:28:4c:
                    29:5b:27:9b:00:ba:4e:6f:18:fa:29:cb:25:90:84:
                    0a:10:8f:51:ef:a0:03:e3:a6:f3:e6:2e:87:82:d6:
                    03:e6:72:74:92:f5:10:c3:01:e6:63:ec:ed:bd:4a:
                    de:48:f0:86:14:ec:a6:1f:c3:62:35:08:3a:5c:02:
                    85:4d:bc:69:d0:58:61:b2:26:23:46:25:e3:2a:35:
                    b3:d3:e4:75:41:f4:42:da:95:d3:fb:78:f6:3e:de:
                    0d:dd:1d:00:1f:e2:3d:32:5c:41:e2:93:73:65:47:
                    16:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5F:8C:6F:30:42:C6:A8:A3:D7:AC:5B:85:93:B2:45:5D:A2:A5:02
            X509v3 Authority Key Identifier:
                keyid:6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:4e:38:b9:bb:0a:06:74:11:d8:71:68:d2:e6:a8:27:ba:20:
         42:b8:f6:60:2f:ae:04:a8:83:18:6e:14:eb:c8:60:1e:06:b5:
         c2:f1:3c:81:55:f4:c0:91:66:e1:87:83:f7:ce:9b:71:83:72:
         8a:8c:74:bf:74:2c:71:b1:b3:81:89:8e:b7:70:05:bb:cb:ff:
         16:33:1c:40:77:4c:4e:4c:c3:d3:3a:7b:98:66:cb:49:4e:c7:
         2b:22:0c:fd:cf:5c:dd:f5:64:00:6f:8f:d1:83:b4:16:13:09:
         ef:d6:f3:7b:26:8b:63:5c:4b:1e:e9:9b:02:94:bc:42:7f:30:
         23:ce:34:54:3d:80:42:31:f8:a4:28:11:cd:56:8f:7f:df:5e:
         04:f2:b4:a5:55:1a:fa:25:15:68:ad:8c:18:05:b9:e5:17:9c:
         55:49:88:12:eb:0b:57:2e:e5:9b:21:fd:d4:b0:c8:63:15:cd:
         03:76:8b:e4:60:9c:1d:83:6c:01:58:1d:5c:ce:8b:d1:50:74:
         d9:18:24:61:95:e7:33:ae:8e:45:66:68:3e:c9:b2:cd:c7:5a:
         8a:1b:8b:62:b9:2c:e6:df:13:f2:26:e0:b2:db:bc:b3:9d:31:
         f4:d3:68:d6:3b:10:e1:6e:91:03:8b:d8:80:e9:46:95:af:73:
         35:66:c6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:10:48 2025 by rpki-client