Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
File:                     4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft (raw, json)
Hash identifier:          V3Y96ckUw80RULYZeU+4/kkniqfrC1vQeIsJj3G22rQ=
Subject key identifier:   1E:8F:2C:89:16:9E:B8:25:2E:41:42:4E:35:7E:8B:67:D5:F0:DB:98
Authority key identifier: E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
Certificate issuer:       /CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Certificate serial:       0196AE0D174C57E8D7FE988431F59059DB36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
Manifest number:          0F8E
Signing time:             Thu 08 May 2025 04:00:15 +0000
Manifest this update:     Thu 08 May 2025 04:00:15 +0000
Manifest next update:     Fri 09 May 2025 04:00:15 +0000
Files and hashes:         1: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl (hash: GaSOEdxFPttRUirGDrbrj8cUC/0b9JTKV0okc+8yx6E=)
                          2: lEkuEW8EviMetjsHoH1cfPquirw.roa (hash: a862beX9o/VH2MAJR1fguEQH5T+CIEuXUqOcrtZ0/zw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 04:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:0d:17:4c:57:e8:d7:fe:98:84:31:f5:90:59:db:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
        Validity
            Not Before: May  8 04:00:15 2025 GMT
            Not After : May  9 04:00:15 2025 GMT
        Subject: CN=1e8f2c89169eb8252e41424e357e8b67d5f0db98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:85:16:5b:cf:36:de:81:10:75:ca:eb:0d:2e:
                    e0:f7:65:68:50:9b:e3:01:bd:8f:29:e8:53:68:3a:
                    ec:62:e2:4c:5d:dd:52:52:2d:59:92:ca:86:40:6a:
                    5a:8f:9b:0f:19:7f:81:c5:73:81:32:e8:61:8e:7c:
                    58:9e:0f:20:3b:71:3b:d1:17:7b:2b:75:87:8a:3e:
                    8f:93:2b:67:bc:43:21:b0:77:b9:f2:5c:4a:dc:91:
                    70:3c:e0:26:e5:8a:a2:bf:55:08:8e:ed:14:2f:b6:
                    d8:2d:02:18:20:ca:09:f5:8b:ef:1a:88:1d:ed:b5:
                    f4:d3:05:12:a3:f8:61:7e:ff:62:8f:27:2d:45:e6:
                    41:0c:fd:5a:1a:12:8d:90:89:0a:7f:bf:fe:e5:0e:
                    02:b5:a7:24:f0:00:10:6b:e0:2f:0b:7d:5b:36:e8:
                    d9:b8:f4:e1:39:99:14:f1:ff:03:88:b7:5a:ea:18:
                    af:4c:b1:7a:15:9e:d4:2e:a4:d1:cd:64:6b:20:06:
                    47:df:ff:91:19:6b:36:38:bb:c4:3e:42:0d:50:36:
                    ca:20:2d:53:a9:f2:8b:ee:13:72:3c:69:be:7b:43:
                    81:ba:68:82:be:11:ee:23:42:5a:e5:92:b8:9d:86:
                    26:6c:a1:17:17:db:97:f5:b6:19:5f:1d:cb:9c:e9:
                    9d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8F:2C:89:16:9E:B8:25:2E:41:42:4E:35:7E:8B:67:D5:F0:DB:98
            X509v3 Authority Key Identifier:
                keyid:E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d2:36:f5:3c:8e:ad:9b:a5:64:55:9d:e5:fe:4c:da:ad:02:
         fc:ff:c7:20:9a:8f:eb:fc:e1:2b:4f:27:f5:57:65:9a:d4:8b:
         06:1c:88:74:bb:13:9f:5d:bf:25:c2:49:b4:b5:5c:a4:6e:2b:
         8e:52:17:21:69:1e:1b:fb:64:ca:7f:0c:62:88:5c:44:47:92:
         3b:77:61:34:e6:06:a2:83:6c:e3:ca:c7:e8:08:04:7a:a3:64:
         ca:a6:97:91:c6:93:40:95:b8:95:03:5a:6c:88:ee:b5:ce:91:
         a3:c0:2e:1d:d7:32:02:f7:c2:06:f0:9a:bc:f7:49:6f:03:cd:
         ba:84:c5:7d:93:c6:79:b5:63:78:72:ad:bd:67:ac:da:2f:dc:
         c1:e2:93:20:62:df:ad:8c:2e:5b:18:5c:c5:b5:7d:0f:92:c0:
         21:e0:08:19:c6:c9:12:cf:b7:12:b1:4f:9d:ac:7b:4c:90:31:
         6f:aa:0e:be:c3:67:f5:50:93:2d:4c:68:86:2f:c8:d0:e3:fb:
         14:44:99:51:09:72:fb:b1:24:7e:cf:9e:dc:c5:81:e4:15:90:
         1f:1b:14:59:ae:dd:75:9d:39:16:00:3c:a3:ca:5b:de:44:cf:
         54:79:10:a7:7c:3a:75:9b:55:a3:17:1c:ad:61:84:e8:fc:87:
         25:e7:07:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:25:37 2025 by rpki-client