Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
File:                     18YKVOA8n4Fcwzr9RdPE25r3bxY.mft (raw, json)
Hash identifier:          hqgq6H6TW2U3K4+/gGGl3TT/qE3oosCDvXcGQk2IK0g=
Subject key identifier:   50:DB:3F:59:7D:0B:59:6A:C4:26:A2:83:3C:61:7B:77:0D:68:47:B6
Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
Certificate issuer:       /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Certificate serial:       0196A276D5B2CCC2E98143E9FAFF090775C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
Manifest number:          0C45
Signing time:             Mon 05 May 2025 22:00:18 +0000
Manifest this update:     Mon 05 May 2025 22:00:18 +0000
Manifest next update:     Tue 06 May 2025 22:00:18 +0000
Files and hashes:         1: 18YKVOA8n4Fcwzr9RdPE25r3bxY.crl (hash: yAVmXbxBY3RJ1eueyeady8FWZXY7/1wnPSuXlD8gYho=)
                          2: nxKiXrNdio14ckCG_Sgh0vm0DTQ.roa (hash: 0O+vnPePnv6+wWmJ082MbIlY0Wsbvz8NfNZYidPwzkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 22:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:76:d5:b2:cc:c2:e9:81:43:e9:fa:ff:09:07:75:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
        Validity
            Not Before: May  5 22:00:18 2025 GMT
            Not After : May  6 22:00:18 2025 GMT
        Subject: CN=50db3f597d0b596ac426a2833c617b770d6847b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:08:9b:8a:f5:97:b7:d9:02:37:68:06:59:e6:
                    bb:45:28:e0:2d:11:7e:b0:ab:8a:97:74:64:cd:89:
                    e0:74:5b:86:24:54:e5:ea:29:2d:ee:44:8b:8e:ca:
                    20:73:66:eb:e6:82:61:0d:bf:d8:03:a7:b3:fe:2f:
                    39:91:07:79:f1:65:bf:70:ca:da:79:7f:e7:07:7c:
                    6d:a4:78:c8:4e:fd:e4:26:8c:17:fb:07:08:3f:cd:
                    1a:61:5a:ad:05:14:e3:0a:57:95:03:a5:ef:99:43:
                    ca:e6:6e:5b:13:bf:5e:86:0c:73:27:13:a0:b2:a3:
                    34:7e:4c:a9:7c:c3:e1:bc:2c:80:d5:98:75:d8:7c:
                    3d:5c:52:ab:32:cd:53:54:47:f1:fa:82:15:57:4d:
                    d5:c1:d4:b5:3f:8c:f2:f5:ae:b4:61:2f:1d:32:b0:
                    d6:f9:00:ef:cf:7a:ca:09:62:c9:5e:ca:12:f0:98:
                    f9:97:f3:d1:9b:ed:22:d2:af:f5:ab:e2:c1:11:a4:
                    90:29:77:ec:75:4d:ed:d5:25:72:70:bc:49:73:90:
                    d2:05:63:42:c0:ab:f7:cd:d9:aa:c8:2d:79:f7:13:
                    00:03:a7:b3:1a:60:f9:80:a0:52:9d:4b:ad:b2:2b:
                    22:c8:e3:07:96:61:e5:e6:ed:38:ee:e5:81:a0:d4:
                    27:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DB:3F:59:7D:0B:59:6A:C4:26:A2:83:3C:61:7B:77:0D:68:47:B6
            X509v3 Authority Key Identifier:
                keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d1:4e:8c:90:03:ca:1a:9e:28:e4:d9:54:b4:7b:bf:a2:7e:
         6a:59:22:10:82:8a:8f:36:32:3d:37:49:db:73:fa:d0:e1:46:
         dd:54:fb:83:8b:43:e8:3a:6d:8e:59:eb:90:e7:eb:63:f6:c0:
         b7:a9:b4:69:92:d0:96:b1:e2:67:ad:e8:d2:3f:36:d2:16:f6:
         64:9d:1c:d6:6a:65:2f:b8:bb:11:d7:28:18:0f:ff:42:30:a9:
         2b:8d:eb:31:36:29:c2:15:8c:fc:63:4a:12:c2:93:b6:55:b4:
         6c:27:59:20:37:d0:b5:34:95:24:e4:ef:38:9b:6e:28:9d:a9:
         60:25:01:66:65:6f:86:9c:d3:33:e6:ee:fe:d5:b3:f9:54:92:
         80:11:c8:45:53:52:39:cc:20:6b:fb:37:ce:7e:38:bd:63:8e:
         8f:85:2a:a4:fd:7e:eb:c5:b3:9d:b4:77:f3:3c:c2:98:f6:7c:
         00:76:91:70:f9:b5:a2:2f:5d:5b:d7:9a:57:b3:2b:c0:9a:f8:
         04:58:6c:d2:5d:43:4b:bf:23:23:b0:f0:c0:c6:06:6c:3d:82:
         bb:9b:01:9f:df:ea:d7:dd:83:7d:d1:7e:20:08:77:73:d1:cc:
         39:7f:6c:83:92:24:84:f0:ad:bc:de:ad:92:43:8f:cc:84:2d:
         7b:af:7f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:05:40 2025 by rpki-client