Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
File:                     4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json)
Hash identifier:          npdNQ1eF6+dQ5/fBHR1zZtf1g67WUnOLcLxOOm+8U4s=
Subject key identifier:   E2:64:F8:25:FF:17:69:41:0D:A5:A0:24:26:DA:5D:B9:41:FB:EC:46
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Certificate issuer:       /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial:       0196BC000DD78BA383885EE8F6E94C9C9E76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
Manifest number:          0EF1
Signing time:             Sat 10 May 2025 21:00:42 +0000
Manifest this update:     Sat 10 May 2025 21:00:42 +0000
Manifest next update:     Sun 11 May 2025 21:00:42 +0000
Files and hashes:         1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: OVTn3pgE+UvPRgUgwYx4BS0rOSYV5zmAMDuZvMPob2o=)
                          2: v-UIauQZjW8hDMdx3w3tSE6IDRc.roa (hash: uCYTkmd7Ahc37aZdyBrq8T1Px2W2MX7+A97XE/19qf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:00:0d:d7:8b:a3:83:88:5e:e8:f6:e9:4c:9c:9e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
        Validity
            Not Before: May 10 21:00:42 2025 GMT
            Not After : May 11 21:00:42 2025 GMT
        Subject: CN=e264f825ff1769410da5a02426da5db941fbec46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:c2:b4:d1:d7:9c:3f:f2:29:d2:1d:5a:b0:
                    1f:ab:0d:ae:f6:ed:c4:d0:2b:5d:ce:fc:28:a8:5d:
                    20:98:97:c1:6d:1f:a4:af:ac:31:bf:5f:37:4d:aa:
                    d1:86:2f:24:6b:d6:c4:23:1a:8a:c7:6e:c6:82:eb:
                    2e:43:4b:64:eb:09:12:7e:3a:e7:eb:de:7c:c3:75:
                    54:58:5a:17:f5:84:79:60:cf:74:e4:a2:bb:61:49:
                    fd:7a:da:53:62:f6:13:40:9c:3b:ff:bd:83:a9:16:
                    67:46:20:81:9a:86:3f:ff:36:1a:cc:38:c3:d7:b2:
                    93:5c:6f:46:d9:d9:7a:37:64:2d:98:df:c0:3e:d1:
                    1f:80:ad:5b:b1:3c:98:d4:a7:68:6f:12:e4:86:4d:
                    e3:a9:d8:31:ce:03:0b:17:21:e4:7e:e2:97:74:b0:
                    df:ec:c0:13:da:ee:74:c6:b5:de:4a:f7:c3:d0:1e:
                    52:9b:09:75:96:24:91:bc:0d:7e:ad:00:d1:f4:be:
                    69:4e:99:25:84:f0:e2:07:97:c2:2d:4c:df:7a:a6:
                    89:32:c3:fa:d0:85:92:27:2c:9b:70:a1:49:40:ff:
                    60:cb:7c:1f:76:d4:da:cc:90:d8:8f:38:d1:02:7d:
                    ab:c9:e1:08:05:97:e1:85:da:06:83:ed:b8:42:d5:
                    5b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:64:F8:25:FF:17:69:41:0D:A5:A0:24:26:DA:5D:B9:41:FB:EC:46
            X509v3 Authority Key Identifier:
                keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ed:ca:93:18:a0:55:86:e1:84:04:b8:ea:46:6a:ee:16:6e:
         c4:cf:2a:98:61:9c:43:b5:25:d5:bc:22:c2:41:9e:f9:f1:37:
         fb:ac:80:cb:ea:3d:d2:08:8c:fe:71:dd:5f:84:0b:95:2b:a6:
         9a:f1:61:7a:0e:96:cf:8f:4e:4a:13:e2:f4:ae:a3:b5:3f:01:
         64:41:be:4a:d0:a9:1d:5e:5c:14:50:2e:4f:37:45:a0:70:4d:
         17:5d:d9:64:22:4d:c1:aa:f4:2e:52:fb:7f:ce:ec:84:0a:7c:
         af:31:bc:28:80:ab:8f:d4:ff:fd:26:94:36:78:a9:b5:47:d5:
         b0:46:7e:15:ed:e0:62:84:11:17:3e:15:33:59:25:b0:45:6c:
         85:fd:73:22:1d:80:dc:c7:c4:81:8a:c7:f6:e3:57:a2:47:56:
         8f:b4:5f:19:b2:60:33:f1:94:04:fe:ef:3d:58:6d:8d:40:f9:
         74:c5:03:8e:fa:e5:b8:fc:1c:fd:8e:ac:b1:b6:61:b7:a3:45:
         91:50:61:24:a0:87:5f:08:50:be:b4:56:e7:b4:f4:5b:f6:3f:
         f4:81:a6:b9:e3:60:8e:a8:16:29:35:6c:75:8e:75:4f:9f:8a:
         8e:b8:4c:fc:76:06:2c:15:e8:95:31:cf:03:a0:c8:04:6d:c5:
         bb:46:42:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:17:16 2025 by rpki-client