Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
File:                     1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft (raw, json)
Hash identifier:          Gn0lMz+SlDR2cDpV5ZyVC0sj80AS0MQ12kwjeRSWK4Q=
Subject key identifier:   CA:F8:23:65:2E:11:79:46:E8:9D:2A:8B:B6:A2:64:45:61:8D:06:FB
Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
Certificate issuer:       /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Certificate serial:       0196ABE8566DCFC85654ECE0C9AC156FEF7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
Manifest number:          06DB
Signing time:             Wed 07 May 2025 18:00:52 +0000
Manifest this update:     Wed 07 May 2025 18:00:52 +0000
Manifest next update:     Thu 08 May 2025 18:00:52 +0000
Files and hashes:         1: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl (hash: 5dSzcnpaUcZlRab8fK6nm70+dSOKZ5i8Vbd2v5wgO/U=)
                          2: C0t1fb68tH4owkDmVZ6xwZW1iYA.roa (hash: Y7ISCB0haKo2tmOyS195RCJ+HbABAyZzsD8GbOG5Lkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 18:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:e8:56:6d:cf:c8:56:54:ec:e0:c9:ac:15:6f:ef:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
        Validity
            Not Before: May  7 18:00:52 2025 GMT
            Not After : May  8 18:00:52 2025 GMT
        Subject: CN=caf823652e117946e89d2a8bb6a26445618d06fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6c:74:6d:01:e1:e6:3d:90:02:94:5a:f2:6b:
                    47:e4:11:8e:ac:cc:17:d1:9c:8c:f1:c4:f6:65:cf:
                    68:34:42:a1:9a:8e:12:73:7f:c9:2a:1f:72:08:b2:
                    48:7c:bd:66:ac:92:4b:58:35:27:cd:a7:b0:dd:50:
                    5e:a8:16:cf:e4:f4:d8:0f:0e:23:ac:e3:d0:0b:b3:
                    49:c6:b1:86:5e:6a:19:95:fc:b5:a8:96:00:4c:c0:
                    41:b4:18:a3:0f:e3:2b:23:20:f0:ca:72:a0:38:6b:
                    fb:1b:e7:43:3f:ff:07:38:ed:94:34:66:91:71:1a:
                    50:8c:3c:0e:32:37:a9:ba:11:a6:6c:7d:f5:74:c9:
                    93:88:18:2d:48:d3:6a:0c:e7:fc:dc:25:d5:16:40:
                    a6:80:60:16:b4:e8:20:f9:92:07:51:13:74:24:8b:
                    39:01:18:fd:7c:5e:c3:8b:c9:d0:32:e0:ae:a1:3d:
                    27:b7:4f:44:92:60:2d:7d:46:6c:58:a1:90:14:81:
                    c2:34:17:7b:89:f1:c2:ad:54:04:23:ef:fe:ba:0f:
                    75:fb:7c:19:19:dc:fd:fe:43:58:d3:7e:5a:69:67:
                    81:b9:0a:9c:ed:8c:43:a7:b3:28:83:5a:4b:10:a3:
                    4d:03:6e:70:17:99:8b:1f:f4:8e:cc:a6:d7:23:6b:
                    de:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F8:23:65:2E:11:79:46:E8:9D:2A:8B:B6:A2:64:45:61:8D:06:FB
            X509v3 Authority Key Identifier:
                keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:01:1c:1b:6e:ea:21:13:4d:db:13:6e:6c:98:41:9f:bc:1d:
         a8:fe:8f:af:6c:a7:b5:b6:bf:39:93:dd:5a:46:84:f5:29:17:
         c9:86:7c:41:86:84:3d:bb:65:b5:08:f2:c1:eb:66:4f:80:ee:
         12:98:a5:34:1b:c3:c8:9e:1b:ca:01:89:e3:25:11:58:b7:31:
         2e:20:df:89:c5:ca:8f:ae:d3:e7:35:ac:36:1f:ce:fa:36:d0:
         b5:eb:eb:86:39:c1:31:eb:57:ff:ee:06:79:d8:0d:c3:86:c6:
         d1:5e:f4:14:2b:64:4c:c7:c3:d3:80:ad:7e:2a:1e:b2:62:a7:
         8e:4b:77:e5:b3:f0:56:9a:66:56:06:fd:2b:7d:a3:c3:08:94:
         7f:18:98:31:56:0a:d3:09:34:6f:9a:7c:ae:9f:30:96:b9:11:
         68:26:43:01:6c:d4:b9:13:87:46:be:e9:d9:c0:0a:d6:5b:9c:
         fc:4f:a2:4d:fa:b2:17:96:5d:ac:13:bb:86:b8:2d:6b:fa:53:
         30:18:3c:9d:8d:c2:56:f3:c6:d0:b9:95:83:fb:50:dc:ca:cb:
         a9:37:a5:75:55:0b:20:0f:82:91:63:c2:12:e3:50:a2:78:2e:
         e7:c4:f9:d2:ba:74:39:4e:8b:fc:23:bb:ee:a8:9f:88:67:6a:
         ba:37:4b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:29:59 2025 by rpki-client