Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
File:                     9qD_yrRKardihf2LFfuprgRywAo.mft (raw, json)
Hash identifier:          GBZChHqw3WySN+LlZfjgHg3PNXM00xVO3gv1RRblVps=
Subject key identifier:   80:CC:50:43:B8:EB:3A:50:41:2F:10:98:F6:EE:56:19:61:BB:F9:A7
Authority key identifier: F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
Certificate issuer:       /CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Certificate serial:       0196C871CB6603BC1E5F0E699F04B1788CBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
Manifest number:          153B
Signing time:             Tue 13 May 2025 07:00:22 +0000
Manifest this update:     Tue 13 May 2025 07:00:22 +0000
Manifest next update:     Wed 14 May 2025 07:00:22 +0000
Files and hashes:         1: 9qD_yrRKardihf2LFfuprgRywAo.crl (hash: 7n4VXNq6CtuSDN2WKUM/urMK7utFXgDx7Y6yxGSvcMI=)
                          2: XPkwDLJHT478MATdbgeUa5gcEiA.roa (hash: DoMDYSGNMC9OU+9UBRPPXJnhTtSu9q09Id+HJ989GvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 07:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:71:cb:66:03:bc:1e:5f:0e:69:9f:04:b1:78:8c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
        Validity
            Not Before: May 13 07:00:22 2025 GMT
            Not After : May 14 07:00:22 2025 GMT
        Subject: CN=80cc5043b8eb3a50412f1098f6ee561961bbf9a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:06:8f:3b:65:39:cd:7e:58:c9:18:a5:17:3a:
                    ea:8f:30:ea:9d:d9:56:d1:fd:46:62:c4:de:66:60:
                    14:52:02:dd:74:44:98:0a:2f:7e:7a:76:74:5f:e9:
                    30:69:f3:51:ca:40:de:6c:f7:16:c3:bf:be:ef:21:
                    a9:b6:4e:6e:2f:d7:17:5f:36:b2:6d:ab:ee:e6:c5:
                    21:4a:49:03:c3:9f:c3:f2:91:7b:47:56:f6:62:02:
                    f3:43:ea:35:f4:5c:a5:28:82:b1:38:6e:b9:c7:07:
                    8d:79:8b:cf:32:cb:98:09:bb:83:ae:59:ac:5f:b0:
                    a7:43:f3:2f:69:07:d5:7e:85:77:5d:3f:f9:43:a4:
                    c7:87:4b:0c:dc:14:9f:f0:15:bc:cd:2f:b4:89:91:
                    ed:92:5c:8b:3e:3f:b4:ee:bd:ca:52:1e:54:cb:5f:
                    1d:b5:01:d8:6c:d5:1d:06:6e:94:0b:e8:af:57:b1:
                    0f:7b:95:55:08:00:fd:48:5c:1c:7a:50:2f:f9:a3:
                    2f:36:61:2d:62:77:ef:75:48:80:5f:24:19:2e:bf:
                    f8:e1:c0:de:f2:82:c5:93:9d:d9:3c:8d:fa:69:bb:
                    0a:a2:d5:b3:b2:6b:cf:59:7e:14:ed:0a:df:79:fe:
                    67:d5:e8:84:5d:16:f6:a3:76:30:41:38:9e:d2:d3:
                    11:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CC:50:43:B8:EB:3A:50:41:2F:10:98:F6:EE:56:19:61:BB:F9:A7
            X509v3 Authority Key Identifier:
                keyid:F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:fd:e8:7e:a7:62:8e:96:55:0b:d6:a9:d5:44:77:25:b6:3c:
         d1:e3:9e:67:9c:57:5d:91:ad:7e:1c:c5:4e:40:22:da:dc:07:
         a9:14:9c:4a:41:74:0a:75:ad:9d:73:59:45:23:fd:c0:60:a3:
         d9:c2:fc:10:94:aa:37:b3:8b:5f:2a:d5:66:b2:5a:d5:5d:92:
         44:f9:4f:40:6e:5f:d6:f2:59:41:46:90:3e:8f:32:e4:c2:0a:
         35:f9:76:15:89:dd:e6:8a:46:09:2e:2a:98:aa:bc:fe:a4:ff:
         36:f4:44:75:b3:01:4b:e8:bc:9d:5d:67:f2:92:81:c0:33:56:
         78:04:33:ce:9d:3c:08:ff:eb:bd:33:49:3e:bc:4a:d7:6a:7d:
         46:6d:15:54:66:30:65:87:57:be:da:16:9d:2d:03:6b:cf:74:
         bf:ae:13:74:84:cf:30:bf:6e:e1:ec:be:53:58:d1:30:f4:6d:
         fa:3e:41:11:0e:f3:8a:8f:4f:9e:99:2f:d5:19:31:6e:29:3a:
         da:13:d0:73:c9:9c:0c:28:5e:94:95:66:30:db:16:e5:81:31:
         84:ad:cb:b1:4b:ca:6b:2d:19:69:70:2e:ed:ac:9c:ea:63:ac:
         cd:67:42:7e:76:b1:96:01:53:7c:58:88:5b:b7:e9:2b:ae:bd:
         e7:f3:88:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:50:26 2025 by rpki-client