Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
File:                     4b3MskUKGgU8icwhPkrpuGR4LeM.mft (raw, json)
Hash identifier:          MWAU9kZqNe0mrQxjIvwRl/oF5Sss0UrFsJQk/y7EntY=
Subject key identifier:   F0:17:E2:0D:31:91:8C:D6:EF:2A:92:50:CE:7D:51:FD:21:38:F1:DE
Authority key identifier: E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3
Certificate issuer:       /CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3
Certificate serial:       0196B7EC801EA15ECFFAE52BC4FD979D5CE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
Manifest number:          0E19
Signing time:             Sat 10 May 2025 02:00:51 +0000
Manifest this update:     Sat 10 May 2025 02:00:51 +0000
Manifest next update:     Sun 11 May 2025 02:00:51 +0000
Files and hashes:         1: 4b3MskUKGgU8icwhPkrpuGR4LeM.crl (hash: E/jT7SpWfktP/bA112VW2M09X7Uf00d9JRR+pW1p0qY=)
                          2: 7uR_yiVUsKXN9cQ9UEqMaOjd_ow.roa (hash: OVRCNzp/6ULY8TXLR8C+JnnDlpd68DlkSuJjHaG4io0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:ec:80:1e:a1:5e:cf:fa:e5:2b:c4:fd:97:9d:5c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3
        Validity
            Not Before: May 10 02:00:51 2025 GMT
            Not After : May 11 02:00:51 2025 GMT
        Subject: CN=f017e20d31918cd6ef2a9250ce7d51fd2138f1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f4:bb:cb:57:8d:b5:05:d9:7c:dd:97:be:7a:
                    55:d0:6d:59:bb:6a:48:da:ba:ad:67:dc:8d:1f:99:
                    5e:66:47:e6:9f:ae:9f:28:ea:f7:db:c6:cf:01:62:
                    5e:9f:66:80:2f:18:a9:5d:5c:ac:cd:c0:d9:41:9a:
                    47:6c:d3:e9:8e:fa:40:0a:91:a3:21:01:dd:51:12:
                    96:e0:78:e4:e2:32:39:c4:dd:5c:a7:c1:75:a7:9b:
                    7a:54:b6:76:ea:b3:a9:f5:c0:dd:4d:c9:9f:5e:d8:
                    e0:a3:69:98:de:b3:74:9c:7c:dd:8d:55:94:62:14:
                    ce:2d:e1:39:e1:4b:fd:34:6d:15:d7:65:01:92:7d:
                    df:37:bd:cd:e1:cc:ed:b8:9a:fa:e4:e4:35:65:a2:
                    21:7d:0e:4b:fa:67:46:7a:98:bd:4e:f1:43:73:bc:
                    b4:94:4f:01:26:bd:39:2d:5d:92:78:45:9e:b3:c1:
                    e3:27:8f:d4:e8:eb:3b:10:cd:70:81:07:23:32:78:
                    09:b6:0a:2b:cb:cb:b6:cc:77:72:16:52:e4:f4:5a:
                    2b:04:29:be:db:25:b0:87:1a:09:50:78:3c:0c:24:
                    56:d2:08:2a:13:c1:2c:32:16:8e:61:fb:72:ee:38:
                    8e:b6:30:ae:7f:dc:02:63:9f:c0:08:f8:b6:35:5d:
                    f9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:17:E2:0D:31:91:8C:D6:EF:2A:92:50:CE:7D:51:FD:21:38:F1:DE
            X509v3 Authority Key Identifier:
                keyid:E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:57:a1:6b:3b:0a:c9:ad:89:f0:1b:59:91:78:87:a1:16:20:
         d2:76:52:26:e7:62:60:68:90:29:9b:96:b2:a8:c3:aa:ad:d5:
         d6:c6:7b:05:34:2d:37:1e:50:1c:7a:21:61:d9:28:57:1b:0c:
         46:fc:19:b1:ee:a6:10:af:f6:57:22:05:14:5e:57:47:61:f1:
         91:bb:a5:4f:27:51:bb:bd:f4:aa:da:ee:6a:7d:60:e4:16:54:
         37:3b:73:eb:07:7e:f8:8b:e2:a0:43:9e:2d:5a:4b:45:6c:38:
         9d:e8:2a:89:1b:b4:bd:cf:4f:56:b3:29:ef:68:bf:f1:8d:8f:
         bf:28:46:05:f4:4a:ce:2b:80:af:33:0b:76:ec:98:b7:74:22:
         84:29:d3:f4:e7:96:b3:8b:f9:4f:d3:ca:1e:b5:ac:ad:fb:da:
         de:1a:fb:ae:db:7a:d9:67:13:20:a8:d2:e0:9d:f9:60:d6:51:
         ab:32:4f:e6:ef:bd:47:57:ca:fc:72:49:7e:79:55:8d:fa:87:
         0e:06:c7:21:4b:ee:98:8f:43:46:f9:f5:2f:ab:42:f2:70:c0:
         5b:92:73:97:c4:4a:01:ea:f8:c0:0c:a1:d9:cd:c9:2b:c1:89:
         df:e9:51:e0:d5:36:37:08:13:20:b5:54:f3:cc:56:37:82:4a:
         ee:3d:51:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:04:39 2025 by rpki-client