Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
File:                     4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft (raw, json)
Hash identifier:          GzvY31t2XXK16qYMOU7E6yL0v3Hr1fpVmFB1WsF3RPI=
Subject key identifier:   44:52:8E:61:B0:D1:2D:72:63:3D:53:F4:80:05:1F:2C:36:3E:CF:EB
Authority key identifier: E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
Certificate issuer:       /CN=e23a74630a8424ccd5f5bb0f60220894527d732c
Certificate serial:       0196C2A72829FB0A0F57966EF8CDA6086B62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
Manifest number:          0FCE
Signing time:             Mon 12 May 2025 04:00:56 +0000
Manifest this update:     Mon 12 May 2025 04:00:56 +0000
Manifest next update:     Tue 13 May 2025 04:00:56 +0000
Files and hashes:         1: 4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl (hash: Nhb2hYGYy6oCq7ZeM78pqx8fqk6pd9gO6YBw3vTHX48=)
                          2: MQ8RZspaKkEig8cCCF7-zec3ZHI.roa (hash: TWPrc2azmEsVYvz4zvYsbEnxkist2uhLkvy3lSkFipY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 04:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:a7:28:29:fb:0a:0f:57:96:6e:f8:cd:a6:08:6b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23a74630a8424ccd5f5bb0f60220894527d732c
        Validity
            Not Before: May 12 04:00:56 2025 GMT
            Not After : May 13 04:00:56 2025 GMT
        Subject: CN=44528e61b0d12d72633d53f480051f2c363ecfeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:86:3e:dc:71:47:1b:62:93:76:00:aa:a6:10:
                    a4:88:d1:47:c9:db:34:56:85:26:ce:fa:e3:c4:a7:
                    1c:29:10:fb:7a:8f:ba:51:e5:b0:56:49:1d:50:8e:
                    d5:61:94:06:cb:5b:2b:1b:b9:3b:ab:f0:bb:fd:19:
                    40:bb:87:74:fb:a6:61:fe:87:d4:bf:3f:02:ab:ba:
                    66:a7:aa:96:af:c0:63:7d:19:a1:5b:26:08:8c:7d:
                    25:f4:aa:a5:69:ea:44:c8:4a:5f:36:a6:fb:9f:16:
                    ff:e6:77:da:08:cb:9c:fa:67:05:fe:de:c7:96:f3:
                    1c:ce:9a:a4:03:07:b6:85:f1:19:4e:e5:0d:86:3a:
                    a7:c8:a4:41:ce:6a:a7:a0:6a:7e:5c:f8:88:61:9e:
                    3b:2c:49:e1:d1:78:2c:28:1d:68:82:92:04:87:69:
                    ab:2f:73:cd:b1:46:1b:ed:a6:9d:b2:92:ff:3d:6c:
                    7e:fa:71:f9:45:5f:2b:7a:fb:a1:ff:d9:22:b2:b6:
                    25:29:a8:72:8c:50:38:c9:6a:d6:80:81:d7:db:7a:
                    8e:3b:76:5c:26:bd:51:8a:70:47:99:89:fc:8a:4b:
                    6c:b5:c4:c4:ad:b8:8f:89:77:76:11:6e:66:74:f8:
                    9e:a0:79:92:55:b2:6a:a9:35:40:0b:6e:1e:8e:3b:
                    01:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:52:8E:61:B0:D1:2D:72:63:3D:53:F4:80:05:1F:2C:36:3E:CF:EB
            X509v3 Authority Key Identifier:
                keyid:E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f1:c8:b1:d7:67:70:7a:08:4e:95:d4:d2:62:a8:d6:6d:b2:
         86:04:53:21:8d:33:96:28:80:33:7e:e4:e8:eb:59:c4:f7:5b:
         9b:3b:ca:7d:cb:b1:32:4d:20:fd:d8:8d:0e:db:34:75:e8:8c:
         9c:df:f6:7f:06:fa:3a:ba:59:cd:6a:b9:af:c5:27:af:52:0a:
         a9:2c:78:6d:ba:33:5e:65:69:15:f4:8c:4b:cb:92:f8:63:78:
         35:8a:2d:a6:62:b2:60:0b:21:eb:59:ed:3f:85:18:ec:be:9a:
         c2:84:df:b3:0e:ef:78:57:20:94:ce:7c:34:8b:37:87:2e:4b:
         f2:bf:4b:b5:39:7d:ee:a8:dd:be:f3:3a:10:52:5e:60:48:bf:
         7e:f6:43:10:0e:99:de:8f:59:51:7a:da:6b:80:67:ec:f5:35:
         4a:71:14:96:1d:86:5a:1f:8a:2d:46:5c:13:c3:c3:ed:55:f6:
         c0:c7:49:36:81:6b:4d:42:1b:63:bc:73:b1:f4:5b:82:f8:55:
         77:c4:66:3f:c7:ef:22:28:7e:be:56:b4:42:0f:be:95:ce:e3:
         db:cc:eb:9f:1f:9e:2a:ec:f4:9d:f4:1c:f8:7d:ee:32:1b:fe:
         2f:64:ac:e6:97:88:c5:f2:c7:56:f2:c2:25:30:88:3e:61:56:
         42:c0:38:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:46:53 2025 by rpki-client