Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
File:                     S-G7vlQAedK38nC5LOrzsqgW6Po.mft (raw, json)
Hash identifier:          TEv5NgTKUTuUJyQkqXuY7mPA0qigjvSOO2tc1U/fgug=
Subject key identifier:   30:E7:DA:F6:F3:80:48:73:FB:BB:79:1D:2A:BD:55:DD:E5:9D:C5:7E
Authority key identifier: 4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA
Certificate issuer:       /CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
Certificate serial:       0196BC3708419C012E67D429F7E499C562C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
Manifest number:          0B4F
Signing time:             Sat 10 May 2025 22:00:45 +0000
Manifest this update:     Sat 10 May 2025 22:00:45 +0000
Manifest next update:     Sun 11 May 2025 22:00:45 +0000
Files and hashes:         1: 9hr0RxcMrr0PdZUeFGL7xFCCX6M.roa (hash: c+l8O2VvW8FmRNHxjGZmeZsqcY4y9njJ0XhuiOI82Ig=)
                          2: S-G7vlQAedK38nC5LOrzsqgW6Po.crl (hash: jYcokaxb1/57fqzzTYJP/lD5Um7GYUpvNqaEyOiPq/w=)
                          3: Wo69R9wkZdSu2YDZamu1cwfnvYY.roa (hash: M7Dkgn12kNJ0G/XHeqGYMOBhXYTKj/x9/fg1DkcC9rY=)
                          4: Yz-y591eNOrcrLSkt7bX4CY92Hg.roa (hash: oW3oUBZKt4uL8vuRz0uNo1Cj56FiYIaWKe1rVvQOsZY=)
                          5: sxzxRsYpVJ4N1lToM8Cy5xPqMsU.roa (hash: g5PD0lSPsiV5TiY4CJ8jfV/ckG/Bc1/ChU4XFCIeK1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:37:08:41:9c:01:2e:67:d4:29:f7:e4:99:c5:62:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
        Validity
            Not Before: May 10 22:00:45 2025 GMT
            Not After : May 11 22:00:45 2025 GMT
        Subject: CN=30e7daf6f3804873fbbb791d2abd55dde59dc57e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5f:29:b0:f5:c7:ae:77:4d:78:16:11:f8:d5:
                    37:8c:2e:93:0f:38:79:46:c6:7e:8f:68:55:3f:cc:
                    1b:81:9e:49:74:c6:2b:26:2a:eb:32:1d:ce:6e:cd:
                    c1:9e:0f:59:04:b7:96:f5:92:fa:75:37:46:0f:9b:
                    fd:d1:96:f7:48:68:d4:3b:d0:49:2e:7b:81:88:f1:
                    6e:c0:30:61:7b:fe:3e:f2:f0:af:3b:ef:2b:3c:e1:
                    a6:ab:57:78:e4:97:74:29:4f:5d:86:6a:65:41:49:
                    d8:3c:f0:ea:ed:e5:4a:85:48:f8:9e:8a:2e:a1:48:
                    27:cc:9e:f2:83:e1:95:77:c3:9e:0a:40:f1:25:9b:
                    52:12:f7:2d:4b:e1:12:55:12:09:38:1d:0b:b1:e0:
                    30:d7:44:24:d6:37:aa:b5:69:76:2f:83:2e:94:64:
                    b6:e2:84:5f:bc:c0:4f:ef:ea:ad:97:aa:9a:f4:e9:
                    c9:d0:dd:5c:8f:73:58:1a:97:fa:4e:57:61:a4:c6:
                    fc:85:6e:62:cc:01:0d:78:4a:90:38:8c:1b:fe:72:
                    d6:7e:67:20:55:76:23:be:28:90:2a:f6:39:01:65:
                    29:9b:5c:ef:8a:e6:fd:c0:30:51:88:50:46:dc:d5:
                    b9:e9:e1:1e:08:9c:af:cc:34:30:30:37:8f:4a:f2:
                    3e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E7:DA:F6:F3:80:48:73:FB:BB:79:1D:2A:BD:55:DD:E5:9D:C5:7E
            X509v3 Authority Key Identifier:
                keyid:4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:7a:ec:5b:48:e4:12:84:fc:45:86:5f:00:0a:4c:2d:e8:38:
         dc:c0:34:cd:ba:9b:03:ad:ab:7f:20:ea:d0:0d:ae:a3:0b:f5:
         3c:67:3b:56:b7:e7:f9:b2:cc:5c:a6:13:06:7a:16:ad:9a:f1:
         29:5f:e2:91:31:83:7f:c3:8d:b5:0c:c0:85:eb:12:d9:6a:eb:
         97:5d:15:cf:0f:b4:2a:0e:b3:91:e4:49:4e:eb:98:44:92:d5:
         27:52:4e:9a:9c:ed:02:25:fb:e5:cd:76:3a:d3:1c:00:87:1a:
         58:f3:86:ea:a2:e9:4e:50:c9:23:9a:d0:3f:75:f5:e8:b9:ff:
         8e:28:bc:4d:b7:06:47:48:91:1f:64:af:2d:9b:6f:5e:a7:ec:
         3b:1c:c1:87:20:f9:3d:28:fa:e6:b9:22:23:a2:e2:99:47:ed:
         90:9e:e9:2f:d8:2a:ce:a1:7b:dd:c6:1d:5a:4f:db:4a:82:83:
         67:91:27:c2:af:68:15:1e:b6:8e:e0:cb:06:bf:4d:d6:c4:1e:
         74:53:b7:92:16:de:de:57:a3:a7:e4:a4:a1:c1:9f:47:3d:03:
         57:77:bc:ab:42:96:02:84:37:d4:e6:51:3c:bb:18:44:ab:8e:
         b7:84:b0:e2:14:2a:28:cf:df:d2:3e:14:c1:75:ad:22:05:2d:
         54:6f:df:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:42:09 2025 by rpki-client