Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
File:                     81ROkj2IO6zkqj9-9wByr-NRHyg.mft (raw, json)
Hash identifier:          oJ0DkVyOYJ1RHeG7ptHjVYB7jw1w7ibIqOSNyj7DyYg=
Subject key identifier:   C7:2A:E1:7D:1E:EB:FE:4D:C2:F3:47:07:EE:AE:CC:AB:C1:48:F0:C9
Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
Certificate issuer:       /CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Certificate serial:       0196C9BB944EEAC6C3187A11BA60A811D4A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
Manifest number:          0279
Signing time:             Tue 13 May 2025 13:00:35 +0000
Manifest this update:     Tue 13 May 2025 13:00:35 +0000
Manifest next update:     Wed 14 May 2025 13:00:35 +0000
Files and hashes:         1: 81ROkj2IO6zkqj9-9wByr-NRHyg.crl (hash: ltB6SqOgm0DjWInbhDCFIo8o0AgJeoW2ed4WC76As/k=)
                          2: Gv4EnRb88MY5aVLEY17_OZ0Wl08.roa (hash: WkS34pHH/XzAUtEopuzXUXT2LtpQyPdLz2PYfITDjLQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 13:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:bb:94:4e:ea:c6:c3:18:7a:11:ba:60:a8:11:d4:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28
        Validity
            Not Before: May 13 13:00:35 2025 GMT
            Not After : May 14 13:00:35 2025 GMT
        Subject: CN=c72ae17d1eebfe4dc2f34707eeaeccabc148f0c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:17:80:af:56:c5:07:7e:d5:b3:b2:67:fd:6d:
                    fe:82:cb:44:89:e0:75:74:77:d3:6b:f0:32:87:6c:
                    18:b0:9a:bd:38:6d:c4:66:ef:49:e4:7e:6a:04:a1:
                    39:57:19:bf:e9:8d:ef:cd:3f:1c:2c:12:0c:1e:42:
                    85:b1:07:8e:d7:64:43:08:d1:ad:d7:d3:b8:48:ae:
                    cd:0c:55:27:28:c2:00:44:da:fd:b9:33:8e:33:9f:
                    2a:e9:47:d8:4a:de:77:fc:ce:c1:72:c9:ce:9f:a2:
                    94:0d:20:ea:05:cf:69:b4:51:24:31:38:3a:08:b0:
                    39:0a:f2:6a:e7:25:8e:48:2d:3a:61:d3:7b:08:84:
                    53:20:98:3d:c5:53:2c:7c:45:80:25:7b:9a:ec:e8:
                    13:31:19:7d:e3:fa:3e:75:89:c7:ab:a7:13:d2:87:
                    b4:a7:1e:f1:aa:16:75:16:2a:4b:e4:8d:52:d1:00:
                    21:06:95:cc:8b:5d:66:78:cf:3d:fa:0d:de:b5:73:
                    cf:b8:88:b1:6d:17:f3:49:b0:84:41:bc:fd:ce:eb:
                    53:0f:11:51:47:f4:2a:98:03:39:36:85:30:35:fe:
                    47:53:fc:7e:63:f1:2d:26:08:c1:85:50:7a:0e:07:
                    f0:53:fb:29:8e:03:3b:4b:dd:92:9b:f7:4f:58:e4:
                    39:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2A:E1:7D:1E:EB:FE:4D:C2:F3:47:07:EE:AE:CC:AB:C1:48:F0:C9
            X509v3 Authority Key Identifier:
                keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:8b:ef:87:63:39:70:8c:30:e2:28:a3:53:ba:ab:25:d8:5e:
         6d:ed:ff:f2:0e:35:70:a9:63:88:79:1a:a5:f8:e1:99:1d:21:
         ec:26:56:02:b8:e7:f0:85:de:c4:26:40:af:74:7c:ca:aa:99:
         a6:f9:a0:07:2e:75:de:27:21:f6:52:b7:9a:de:6c:83:02:3a:
         08:c4:ba:b1:eb:81:e7:28:ff:12:d0:59:ec:28:ef:8e:3d:b6:
         e3:5b:69:f5:c3:eb:1a:bc:6c:e3:f2:39:3a:1e:99:38:20:2d:
         a3:35:63:5f:e7:57:77:a7:d8:8a:ac:5a:6a:98:bf:26:1c:b2:
         0c:a8:45:6f:c3:1e:70:40:0d:c4:56:bb:62:b3:2e:bb:c6:b5:
         d1:fc:ce:d1:f2:d6:c6:9d:71:6a:b9:5e:9e:6f:c4:55:7c:41:
         e1:ff:4d:60:16:cf:72:7b:d7:cc:ff:32:95:13:3a:ba:d7:a9:
         cd:ae:69:73:1d:28:92:bd:7b:fa:78:a9:6a:fd:2e:30:9f:25:
         b9:2f:45:a7:f8:56:1b:fa:b7:24:b2:b9:33:87:f6:cd:1d:dd:
         1d:65:ba:70:0a:0f:0f:e2:4f:0f:fe:a0:10:2c:88:66:f7:c9:
         c9:c4:d7:3d:c5:27:01:f0:3e:5a:b0:17:de:7d:e3:fb:e5:14:
         ad:d6:f9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:57:07 2025 by rpki-client