Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
File:                     pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft (raw, json)
Hash identifier:          7cqnaKFCb+buOzwN8xrTpHaUd4GxhYL/7kKAxAmx6xs=
Subject key identifier:   45:BE:30:89:45:9A:AD:26:BA:48:81:68:5A:D2:39:96:7C:25:51:1A
Authority key identifier: A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
Certificate issuer:       /CN=a4917d885b675672fc8efb89d6e14e23675052d9
Certificate serial:       0196B3D876F0CCBC6FB570A5C4E643F5DAA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
Manifest number:          07AC
Signing time:             Fri 09 May 2025 07:00:29 +0000
Manifest this update:     Fri 09 May 2025 07:00:29 +0000
Manifest next update:     Sat 10 May 2025 07:00:29 +0000
Files and hashes:         1: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl (hash: lOFrZwG4nRInWKSHzh67qIM7qv9p1rls9tf2tA23omY=)
                          2: prQrRYa7iRxtGVoZ-fOmbS6yQ1I.roa (hash: tnsyAKD0R4WdSHhtE37JrhpYKkCqh9rly9GAA3vquY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b3:d8:76:f0:cc:bc:6f:b5:70:a5:c4:e6:43:f5:da:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4917d885b675672fc8efb89d6e14e23675052d9
        Validity
            Not Before: May  9 07:00:29 2025 GMT
            Not After : May 10 07:00:29 2025 GMT
        Subject: CN=45be3089459aad26ba4881685ad239967c25511a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:90:6d:71:de:76:de:4b:65:7b:0c:bd:ff:3b:
                    55:b6:c5:38:c4:fc:87:ac:e4:ee:7d:e8:e5:7d:74:
                    3c:e9:90:34:6e:76:d2:8b:b9:69:46:9c:94:dd:d5:
                    a1:7d:a7:d8:ee:6a:d4:bc:17:57:e3:4c:7e:9d:11:
                    f8:76:41:bd:a0:2c:ef:89:d6:b0:6c:c8:d3:7e:c9:
                    03:26:70:9c:bb:42:33:dc:79:dd:6f:d4:e8:62:ef:
                    d5:0d:42:e1:6a:e1:cc:71:06:50:47:16:b9:18:c5:
                    92:0b:22:8d:e6:83:cf:59:fc:5a:1c:b0:20:8b:7c:
                    cd:91:8b:ae:6c:ef:a3:4b:69:91:c6:d4:6c:f0:c4:
                    cc:10:7a:bd:f8:1a:d5:33:87:41:f7:a4:dc:20:66:
                    9b:88:86:eb:0e:52:85:63:b4:5a:3a:e8:2d:6d:3a:
                    ff:c6:54:c7:cd:55:c0:69:71:02:38:b7:0b:ad:72:
                    28:11:af:10:33:4c:78:0d:4b:c7:1c:43:ed:4e:05:
                    fa:10:14:c2:db:41:a2:8f:04:ba:f4:63:d5:ff:f5:
                    d1:09:a1:1a:02:ba:a9:f8:f4:6f:3f:48:69:13:d3:
                    5d:e2:ba:45:53:50:cb:58:9a:0f:71:36:0f:93:36:
                    cb:7c:8a:95:a8:95:4a:58:8f:1d:05:d7:3c:2d:7a:
                    50:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BE:30:89:45:9A:AD:26:BA:48:81:68:5A:D2:39:96:7C:25:51:1A
            X509v3 Authority Key Identifier:
                keyid:A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ac:e5:e0:4d:59:2b:a4:08:20:d0:f1:ed:4b:89:a7:9a:15:
         05:b5:3a:1a:84:b9:ff:73:26:68:59:50:12:33:4c:5d:f3:03:
         9f:26:23:78:39:f8:1a:e0:9d:9d:21:dc:8d:98:e5:3f:98:60:
         54:e3:f1:c9:05:75:ef:41:fb:1e:1f:6f:a9:e1:59:d8:c8:1f:
         e6:5d:88:1a:87:de:aa:1b:1e:81:81:c0:21:84:43:d2:64:f5:
         b3:8c:6e:91:56:58:ff:d5:63:17:cc:da:48:bf:1b:26:cf:ac:
         6e:5f:ae:a6:07:cc:f6:fe:43:a8:42:9f:1e:a3:43:fe:44:e2:
         8e:e2:3c:3a:4b:1b:f9:e8:d8:f6:24:1e:43:46:14:a9:43:73:
         5b:c8:78:67:b6:dd:69:b1:28:b8:e6:4e:65:b7:76:11:e1:06:
         72:65:72:22:44:63:14:21:17:cc:9a:83:25:96:5d:41:99:76:
         b6:5f:a8:98:03:d8:62:a1:f4:e7:59:24:9a:55:5a:1a:6a:e5:
         37:0b:2b:ae:80:dc:77:ff:5d:fc:fa:6b:af:1a:17:8d:e7:1a:
         bd:06:2b:3f:4d:fb:45:80:63:92:08:6f:17:eb:64:82:a3:b7:
         cb:b1:f5:c4:02:e5:ed:0a:07:99:73:0e:98:4c:df:24:62:bc:
         f1:49:5d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:38:26 2025 by rpki-client