Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
File:                     E_8jyrp-AfaB5z36sXQ_9keN3O0.mft (raw, json)
Hash identifier:          SC7QvvTksfKtzEhFg+sP3nmFoqrWgH8VE2WEdFeENOE=
Subject key identifier:   4C:C0:0A:C1:F6:9B:56:FC:98:99:68:B8:6B:10:35:53:F5:0B:FB:18
Authority key identifier: 13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED
Certificate issuer:       /CN=13ff23caba7e01f681e73dfab1743ff6478ddced
Certificate serial:       0196A61D0E7A4AC38928ABAD3366FE313E6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
Manifest number:          0299
Signing time:             Tue 06 May 2025 15:00:44 +0000
Manifest this update:     Tue 06 May 2025 15:00:44 +0000
Manifest next update:     Wed 07 May 2025 15:00:44 +0000
Files and hashes:         1: E_8jyrp-AfaB5z36sXQ_9keN3O0.crl (hash: eGGlWiP8yYt9bNdpjSEUSOsDvBvIwMPsEGdrXCJtZkU=)
                          2: lJDuBJQ2g-pa95d14zb3BmzZ6y0.roa (hash: PkfDtleZ8MxNB+BT5gtlIpBNxKZcU3c8R+9W8avuRDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:1d:0e:7a:4a:c3:89:28:ab:ad:33:66:fe:31:3e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ff23caba7e01f681e73dfab1743ff6478ddced
        Validity
            Not Before: May  6 15:00:44 2025 GMT
            Not After : May  7 15:00:44 2025 GMT
        Subject: CN=4cc00ac1f69b56fc989968b86b103553f50bfb18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0f:70:ba:41:f1:8d:60:ea:f7:88:d1:43:a9:
                    d4:b1:60:c1:30:f2:f9:26:ba:fb:96:1d:21:92:06:
                    9b:1f:1b:1d:97:5c:ee:b7:f3:9c:b7:92:89:c0:09:
                    2b:2f:0e:af:7e:eb:d5:28:8f:cf:1e:bf:0a:92:5f:
                    2a:4e:22:d3:25:79:6e:e8:2b:28:8c:7b:d2:c0:09:
                    69:e3:b4:60:8d:c1:03:45:53:90:00:b6:dc:a3:5b:
                    38:73:e9:11:06:93:e4:f5:14:d1:c2:e6:26:84:71:
                    48:e0:9a:9a:09:72:02:97:a4:fb:09:85:a0:24:52:
                    b4:85:10:bd:84:7b:95:73:8c:9b:3b:a6:52:4c:ae:
                    5b:32:3f:8f:b5:ba:48:2b:28:d3:ab:45:dd:d0:5a:
                    1b:e6:8d:18:44:91:3b:48:63:3f:fc:d4:de:63:ac:
                    67:a7:3b:a2:63:d7:d8:4f:0f:8f:f0:57:89:58:90:
                    cd:6f:a7:9d:6b:37:7a:e7:4d:73:4f:0b:38:b6:69:
                    77:9b:08:c6:0b:5a:99:55:a2:52:7c:ba:6d:d3:57:
                    78:89:f1:dc:15:b6:c9:cb:c8:82:29:84:8d:ea:2f:
                    06:d5:bd:c5:42:1f:e5:76:d8:13:ba:9e:31:cb:84:
                    b3:d2:2f:8f:87:00:a4:35:3c:50:60:46:86:61:86:
                    b4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C0:0A:C1:F6:9B:56:FC:98:99:68:B8:6B:10:35:53:F5:0B:FB:18
            X509v3 Authority Key Identifier:
                keyid:13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:82:37:1c:78:2b:80:2f:56:5b:6c:c1:80:61:ba:5b:db:c2:
         06:35:f9:3b:b4:e4:ce:00:4d:28:e1:c3:a1:ba:9f:b8:4c:db:
         5d:3a:a1:f5:57:09:28:b4:cf:79:1f:1a:5e:e8:a7:f7:58:76:
         61:2d:26:ab:a7:63:18:89:d8:02:f8:63:3b:88:93:f5:db:2f:
         f5:61:8a:b5:37:29:59:45:24:e4:6c:49:53:ab:72:4f:c7:ec:
         19:a5:1a:89:e5:94:6f:8b:63:86:13:ec:31:a4:88:55:ea:c4:
         65:eb:83:d0:78:49:ec:f3:c5:e3:80:d2:73:5e:45:9a:af:d2:
         f4:eb:79:2b:10:80:dd:88:66:d6:b4:fb:0d:9f:9c:c5:a1:19:
         23:56:ca:6b:16:6b:cd:00:da:09:f8:9c:77:75:88:9c:79:43:
         77:32:a7:71:67:5c:b1:1b:74:e5:b4:25:0d:e9:19:de:2c:71:
         24:0e:ea:71:9a:9a:d0:f7:b4:8e:c6:f4:48:e7:35:ff:1c:0b:
         f3:24:5f:a9:16:45:ca:28:41:63:da:f8:4d:e5:64:29:e3:99:
         df:11:7a:5b:e6:5e:7f:01:fa:01:17:7e:97:8b:47:ef:c2:4c:
         ea:48:0d:ac:5a:e8:0f:7a:33:75:87:a9:d1:3d:9e:31:5a:9b:
         3d:08:74:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:39:34 2025 by rpki-client