Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
File:                     1-J4in4YLBY0j_SiikmFhuHhjMMY.mft (raw, json)
Hash identifier:          yaVa6p77bgu9De52a9K9jCNyn6EqDBkPXvi69CYDjZA=
Subject key identifier:   20:2A:27:08:BC:C7:AF:3E:A5:3A:22:E7:80:B5:F7:B0:05:F1:B1:0F
Authority key identifier: F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
Certificate issuer:       /CN=f89e229f860b058d23fd28a2926161b8786330c6
Certificate serial:       0196D43F7A09712E83EB7C075C18C8BE4B94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
Manifest number:          0E04
Signing time:             Thu 15 May 2025 14:00:51 +0000
Manifest this update:     Thu 15 May 2025 14:00:51 +0000
Manifest next update:     Fri 16 May 2025 14:00:51 +0000
Files and hashes:         1: 1-J4in4YLBY0j_SiikmFhuHhjMMY.crl (hash: 9dE3RvAj25qaje81vi8x7nXEo95xJZ8Ygte8BoquM2o=)
                          2: Aa6sIwlX6_w5uXf2zsts3DwkhU4.roa (hash: LlENaZaigA7zDM+CDaj8xvJ6snfd5fy4W4jHwPOvoos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d4:3f:7a:09:71:2e:83:eb:7c:07:5c:18:c8:be:4b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f89e229f860b058d23fd28a2926161b8786330c6
        Validity
            Not Before: May 15 14:00:51 2025 GMT
            Not After : May 16 14:00:51 2025 GMT
        Subject: CN=202a2708bcc7af3ea53a22e780b5f7b005f1b10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2a:03:1b:25:b5:90:e6:99:8d:ca:b8:03:8f:
                    5f:2c:65:bc:da:b3:83:82:bd:30:3d:41:29:af:30:
                    d1:cc:8e:01:fa:da:6a:da:12:d6:fb:71:af:a9:c0:
                    a9:51:19:35:6f:46:7e:ee:dc:e1:0e:e4:3f:58:9d:
                    ef:e2:77:69:f7:f7:a4:98:ab:08:cc:9a:72:4a:8f:
                    34:79:3f:66:45:3c:c3:b3:f5:2a:69:97:e1:f5:ab:
                    d7:58:56:c8:e0:d1:82:8e:be:c8:6f:5a:10:51:ca:
                    56:56:de:fa:5a:d3:d8:51:96:98:d3:25:c2:f1:16:
                    51:12:c4:7d:61:45:4e:66:a9:b5:a6:a2:0c:f0:b2:
                    46:d9:9d:dc:00:f8:bf:a7:31:7e:42:22:ea:af:ab:
                    fe:0b:6c:db:b5:62:1d:bf:75:38:bc:39:9a:52:89:
                    75:fb:40:eb:e8:7c:f6:b0:9d:e8:38:54:25:1d:30:
                    41:43:ee:f4:84:47:bd:8d:86:4b:56:2f:0f:32:d6:
                    94:cb:75:d6:45:84:c7:61:ab:50:a4:ec:64:1f:ff:
                    7f:d1:d4:3f:16:90:03:ff:f9:d8:29:27:0d:c8:89:
                    28:46:f0:21:af:00:ca:50:67:e4:27:da:f7:e8:da:
                    27:fa:30:f3:ea:2c:53:ac:a9:d8:62:52:66:2a:7b:
                    16:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2A:27:08:BC:C7:AF:3E:A5:3A:22:E7:80:B5:F7:B0:05:F1:B1:0F
            X509v3 Authority Key Identifier:
                keyid:F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a1:d0:cc:c2:d8:14:b3:4f:49:ed:49:4f:64:a4:c0:9d:94:
         fc:6b:5b:d3:09:bc:cd:cc:00:84:4b:f5:84:c0:eb:27:73:de:
         be:1d:54:e4:4a:64:4a:09:a3:58:5a:45:59:47:a0:34:04:8d:
         5d:2f:02:3a:5b:8d:aa:9c:9b:71:2e:10:5a:2d:38:77:93:63:
         3b:00:19:bd:d9:20:4e:fd:e5:26:7f:ae:a9:32:27:51:d6:b4:
         d2:17:3b:ff:70:da:a0:e1:1a:41:ba:4a:ee:90:ca:b4:a8:52:
         e9:ed:04:48:7f:b4:b9:cf:fa:8c:e3:ff:08:62:37:c6:48:c4:
         a0:95:b7:cc:72:64:27:4a:76:b0:7e:df:d3:e8:57:86:46:10:
         fd:8b:aa:00:d6:61:e2:cb:19:19:5b:c1:9c:d3:a9:1d:da:ff:
         32:ea:7a:43:86:95:06:ad:a7:72:65:89:f1:d9:4e:c8:64:cf:
         e9:69:45:cc:bd:1a:55:87:48:6f:b7:94:d2:40:58:63:28:e1:
         16:90:36:ed:f9:03:3b:ba:a9:d7:d2:89:ac:a5:67:9c:e5:db:
         ce:3d:07:8b:c6:08:83:14:37:a7:a8:20:75:3f:f3:de:7a:67:
         32:58:16:79:a0:5e:f0:c7:f7:c5:0e:4c:af:bc:58:f9:99:cc:
         c6:83:2c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 20:17:01 2025 by rpki-client