Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
File:                     IPY4EHq7hK5vsDzB2yz9G8RIf40.mft (raw, json)
Hash identifier:          hWtkx6vILA+20FtVDJRT52scZEQbjBHOM6BDul9mlro=
Subject key identifier:   71:E4:09:D2:96:EE:A2:F6:C1:89:1E:ED:11:50:DE:0F:84:A7:41:98
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Certificate issuer:       /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial:       0196AC1F47961C39794E2A6A3373F4980677
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
Manifest number:          0EFA
Signing time:             Wed 07 May 2025 19:00:53 +0000
Manifest this update:     Wed 07 May 2025 19:00:53 +0000
Manifest next update:     Thu 08 May 2025 19:00:53 +0000
Files and hashes:         1: IPY4EHq7hK5vsDzB2yz9G8RIf40.crl (hash: b/NjJZ3udP8R/sCY+GSa9c9eGRQ0wwyiwX/9W4x4OCw=)
                          2: JK5dBkqsG4C8M2ttw7JiFgUdZew.roa (hash: vMhSi46i8JCqRLgPeW41NRu360WeGbF0LT7pGWnTq7U=)
                          3: VNrppWVy36SKNgtS_F1qaT2zJHY.roa (hash: 9DXGS+oBa4dlfj3+GMMrbil8G+vwg9kQTst1kCj/GhM=)
                          4: sLy4f0J28AKLnDg3qJ8vxAYCBx0.roa (hash: beKd4jqG4/esSSfPF84tT28gcKiXZoavsjTYolwvANc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 19:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:1f:47:96:1c:39:79:4e:2a:6a:33:73:f4:98:06:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
        Validity
            Not Before: May  7 19:00:53 2025 GMT
            Not After : May  8 19:00:53 2025 GMT
        Subject: CN=71e409d296eea2f6c1891eed1150de0f84a74198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:07:db:b9:e5:25:cd:c7:10:c9:a3:ff:b3:6f:
                    24:75:08:3f:fb:30:48:96:a3:f5:57:9f:20:17:b9:
                    f8:6e:0b:b8:46:01:f3:ba:a7:bf:10:30:8d:05:2e:
                    e4:75:ef:bf:b8:df:e8:b0:fc:2f:61:26:6e:81:99:
                    f3:ca:d0:ca:43:4a:26:28:92:d1:00:55:59:11:d3:
                    a5:76:2e:a2:31:11:0f:f4:bd:ad:df:b0:4f:e6:5b:
                    c7:13:0e:3b:41:ea:7a:8d:a3:b5:af:49:3a:b3:c9:
                    f0:65:e3:e5:95:05:2d:13:4b:ad:54:f8:1e:b7:00:
                    34:f9:c5:4e:40:b5:e1:e3:d5:68:c4:e4:52:9a:31:
                    49:b2:8e:54:49:1b:d3:ad:9a:11:5e:23:3e:56:fa:
                    fc:c9:ab:23:1f:51:67:31:0f:53:a8:64:38:78:5b:
                    75:56:a4:ff:f8:4e:f1:3e:a9:13:49:9a:59:98:58:
                    99:ba:b1:bd:00:e0:5a:00:a6:97:b4:68:46:79:e8:
                    5a:02:4b:db:f0:51:9d:0e:b9:8f:1d:ab:85:0a:96:
                    6c:44:50:8b:d3:7b:92:54:bb:94:a2:9f:8a:d8:96:
                    3d:d3:f1:56:d7:84:d1:50:07:02:64:03:2c:84:a7:
                    1e:08:8f:4b:1e:e4:5d:e2:06:ba:03:38:1b:c5:69:
                    15:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E4:09:D2:96:EE:A2:F6:C1:89:1E:ED:11:50:DE:0F:84:A7:41:98
            X509v3 Authority Key Identifier:
                keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:70:7f:c7:55:99:2c:9c:1f:ba:82:b8:ec:13:53:2a:28:1d:
         53:03:aa:e7:94:42:95:9a:72:19:ca:fd:90:e7:70:b9:26:28:
         67:27:94:0b:f6:7b:2f:dd:9f:8e:7e:7c:86:cb:a3:aa:15:8d:
         41:c1:f3:ee:3e:08:f1:df:70:b2:e3:fa:cd:35:c7:d4:7f:56:
         80:24:22:f8:f7:b7:e8:84:97:9c:bc:ab:23:d3:c5:22:2c:3c:
         02:c6:88:e6:12:cf:64:b7:7a:52:a5:d6:34:6a:ef:7f:78:bc:
         7d:d7:db:50:4e:85:d3:8b:d2:1d:40:8e:0c:6e:e9:7c:83:bd:
         b0:ac:18:e2:21:e4:60:8c:81:10:50:71:11:de:76:66:bc:b8:
         b4:15:82:e9:b1:10:30:2b:42:cc:f8:20:aa:58:04:8d:3e:9c:
         44:69:25:f2:aa:b3:87:2a:dd:74:2f:73:1f:90:9b:a8:77:5b:
         e2:b4:81:6a:cf:56:21:58:98:59:f6:bb:04:59:e5:ce:f6:f7:
         9e:db:82:bc:1a:d3:ef:2c:90:69:95:25:af:0c:9a:00:4d:19:
         67:28:db:b8:c2:4c:e6:29:a3:a3:d4:de:0c:77:3b:23:c4:32:
         bd:25:62:d3:63:0a:02:c2:12:d1:cf:0b:48:41:b2:e1:43:7a:
         20:39:71:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:30:33 2025 by rpki-client