Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
File:                     RFc3PhpobWtZ7oXcN4mdBlMThuU.mft (raw, json)
Hash identifier:          h/61xuOXbV3XmAcsmHIukqNyUp5xI52GfCA2jnsNpbY=
Subject key identifier:   45:48:5A:01:3F:1A:03:6D:03:D3:2C:0C:04:D4:4F:04:2F:D7:3D:27
Authority key identifier: 44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
Certificate issuer:       /CN=4457373e1a686d6b59ee85dc37899d06531386e5
Certificate serial:       0196D1E2AA5461A95202657B6930A4E7C308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
Manifest number:          02BE
Signing time:             Thu 15 May 2025 03:00:14 +0000
Manifest this update:     Thu 15 May 2025 03:00:14 +0000
Manifest next update:     Fri 16 May 2025 03:00:14 +0000
Files and hashes:         1: RFc3PhpobWtZ7oXcN4mdBlMThuU.crl (hash: p5Jw6W1Us5bkp4rbcEip9CPc817tEXP6MYlVCA3Vc2s=)
                          2: XMirD3qG50TrikmGR0PujWf3jjs.roa (hash: iR/AZzWdddK7a5E0N2BfP3yz4LyY5Uji67zQAihWnBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 03:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d1:e2:aa:54:61:a9:52:02:65:7b:69:30:a4:e7:c3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4457373e1a686d6b59ee85dc37899d06531386e5
        Validity
            Not Before: May 15 03:00:14 2025 GMT
            Not After : May 16 03:00:14 2025 GMT
        Subject: CN=45485a013f1a036d03d32c0c04d44f042fd73d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:da:7e:ce:ac:06:4e:8e:1f:59:f1:31:a1:8d:
                    5f:5c:d5:01:aa:64:d9:c4:41:43:40:26:5a:e7:b5:
                    42:c9:66:36:ee:fb:cf:09:61:c7:c8:2e:60:22:b1:
                    6a:82:6a:e7:9f:32:f9:86:42:ea:71:84:12:c3:cd:
                    b9:c4:e4:95:b9:51:7b:ff:48:6f:22:c9:f6:85:a3:
                    76:85:a3:98:28:a8:84:a1:77:bd:00:64:81:9e:d7:
                    72:66:72:1b:08:32:4f:90:93:84:c6:9b:7a:52:8f:
                    bb:78:9b:73:9c:c5:a8:f0:f0:e0:a5:ac:13:60:b3:
                    2a:8b:df:1c:e4:ac:64:dc:51:28:ef:5a:47:8b:30:
                    10:2f:8e:4a:37:66:45:b6:2e:50:4e:3c:cf:73:74:
                    7b:dc:7a:30:2c:ae:13:0e:9d:ee:58:dc:6b:07:16:
                    1b:8a:5c:62:c6:e9:57:7d:6d:42:3c:f1:fc:fc:c5:
                    48:c6:0e:82:92:c5:ce:6f:0f:73:f9:71:54:ed:38:
                    c7:f7:33:00:04:dc:e4:16:65:1f:ec:c4:7f:fb:e0:
                    38:ca:ae:ad:bc:31:b8:b4:f7:90:eb:a0:b9:93:e9:
                    af:80:1a:76:7a:b9:0b:2b:a4:e8:7b:69:38:05:7b:
                    7e:fb:bf:3b:49:d5:b1:f1:e5:19:49:c0:ab:9f:4b:
                    84:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:48:5A:01:3F:1A:03:6D:03:D3:2C:0C:04:D4:4F:04:2F:D7:3D:27
            X509v3 Authority Key Identifier:
                keyid:44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:0f:34:6a:8a:d6:04:18:16:1f:df:46:fa:47:a2:32:ea:d4:
         28:15:42:c5:4a:a1:50:ac:b7:c9:ee:ad:7b:ee:a1:56:de:13:
         76:ad:5c:2c:fd:49:1a:b9:ce:4d:43:b0:2e:20:2b:f8:cb:7d:
         ea:6b:05:51:87:78:89:cd:5b:7a:79:f0:32:80:6a:55:00:68:
         c0:ff:71:24:10:a0:01:c0:6f:70:a4:ec:bc:33:f2:65:63:97:
         f8:ce:fc:89:e2:ac:7b:ed:e0:fd:11:ee:4b:ca:3d:6d:1f:06:
         d1:0f:b7:c4:4b:2d:62:c6:a8:1e:9d:0b:f5:07:82:bb:79:c3:
         2e:3c:e1:cb:f4:6b:fc:3f:e1:dd:c7:3e:2d:8b:e4:b8:44:e5:
         d1:87:ed:1a:c5:cf:21:11:31:bb:cd:77:ee:07:78:cc:80:29:
         3a:7f:9e:80:8c:40:74:f5:f5:81:09:be:b1:3e:de:8e:d3:b2:
         14:9f:79:05:fb:92:f8:73:97:86:39:1e:2a:44:b5:90:68:36:
         f2:a9:5b:fa:bc:68:3f:5a:d7:4f:d4:15:1d:8d:08:ff:50:20:
         a8:02:48:8d:1f:b8:95:5f:ab:a0:cd:89:7c:a3:5f:91:5a:29:
         a7:f8:7d:a8:db:75:e3:3e:d0:84:8f:c1:de:0f:5d:21:0d:ab:
         06:53:ad:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 12:11:59 2025 by rpki-client