Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
File:                     t6j-qPyoAMH8Se8thckuMjdSsO0.mft (raw, json)
Hash identifier:          SVUZ4u0f42FyyWcqFA+l7L11clN/EIIFQd0cyhub44k=
Subject key identifier:   CD:A8:D4:CC:37:EF:23:B5:C0:FC:78:EE:22:58:4A:EC:7A:15:66:19
Authority key identifier: B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED
Certificate issuer:       /CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
Certificate serial:       0196A5786F0B505C40D54A14C6BEDF2CEE7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
Manifest number:          14F5
Signing time:             Tue 06 May 2025 12:00:55 +0000
Manifest this update:     Tue 06 May 2025 12:00:55 +0000
Manifest next update:     Wed 07 May 2025 12:00:55 +0000
Files and hashes:         1: 5TC6JtPaOArue3YcZw58kMkX_gQ.roa (hash: 8vxNN4NZRh1zE+O+pnXNTkgLjPcYvbg7k5S7vJax1zs=)
                          2: t6j-qPyoAMH8Se8thckuMjdSsO0.crl (hash: uB/Sg9Y3qV4Vm97C+p+1q6JjYFgfzNgWp1G+oCCjt/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:78:6f:0b:50:5c:40:d5:4a:14:c6:be:df:2c:ee:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
        Validity
            Not Before: May  6 12:00:55 2025 GMT
            Not After : May  7 12:00:55 2025 GMT
        Subject: CN=cda8d4cc37ef23b5c0fc78ee22584aec7a156619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a5:7b:df:f7:f0:1d:24:df:27:92:7a:96:c3:
                    7d:b7:31:55:99:f3:05:af:23:64:3d:3b:13:26:08:
                    0c:f0:0e:65:03:97:06:cb:9b:e3:ee:10:c5:18:74:
                    e7:dd:a9:63:63:05:01:18:48:63:95:23:03:66:8a:
                    60:16:aa:13:3d:09:07:81:90:b7:7d:1b:85:5c:fb:
                    25:b4:8e:66:55:b8:4f:68:cc:9e:80:b4:20:cc:7d:
                    ae:83:85:d2:b4:6c:1b:7e:5d:4f:10:72:e4:cc:1a:
                    d3:84:ac:f5:c8:39:1a:1a:77:89:37:d2:4a:5a:a3:
                    69:8e:d9:29:fc:75:62:41:07:e9:94:23:29:12:c0:
                    b4:b2:c4:e2:e3:48:ab:cb:97:00:24:b5:84:4a:be:
                    9d:76:75:1b:20:55:79:9f:52:22:b5:18:1d:b2:1a:
                    b6:68:f8:19:24:ce:ad:15:8d:b6:ac:80:5e:1e:40:
                    c4:89:ec:d4:f1:bf:3b:f6:12:4b:d6:ff:5c:af:45:
                    ee:ff:c2:10:8d:d1:64:b5:84:65:f3:71:30:46:16:
                    0d:6c:fd:e0:e7:e6:21:6a:a7:5d:1f:ca:ff:81:2a:
                    ce:e5:44:2d:69:30:d4:18:34:f8:65:9a:87:52:2e:
                    3c:3c:b5:32:c6:d5:ac:cc:93:11:30:e7:36:0e:d3:
                    b5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A8:D4:CC:37:EF:23:B5:C0:FC:78:EE:22:58:4A:EC:7A:15:66:19
            X509v3 Authority Key Identifier:
                keyid:B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:82:f0:b3:d4:ba:f1:32:7e:6e:15:83:c5:b0:47:ff:ce:59:
         d4:38:06:20:4e:5e:5c:8b:24:66:dd:86:4d:5e:fe:bb:79:e4:
         f9:4f:11:d0:8f:65:86:49:63:14:2f:a0:92:8a:83:30:7d:d7:
         cb:1d:30:60:62:68:47:96:4c:79:c8:78:c7:67:1c:c7:60:84:
         2a:38:96:4d:8f:a0:10:64:5e:c1:47:86:ee:13:fb:24:e4:19:
         db:30:0d:ea:9e:3d:b4:ed:47:cc:b7:ab:65:76:5d:87:a6:b9:
         0f:d5:ad:ed:62:13:a4:da:a8:62:4f:ca:9b:2b:b0:9e:c4:fd:
         b1:51:26:5e:c0:19:86:e1:22:7a:a1:79:8d:8c:7f:e1:1a:14:
         20:29:af:e8:11:15:52:2b:52:02:1d:99:fe:fe:ed:39:51:cc:
         a3:62:1e:ff:74:01:b1:72:99:dd:70:05:ba:9f:aa:46:ae:26:
         27:8f:76:7f:23:f3:0e:fa:41:6b:8b:f0:be:59:3d:4c:df:dd:
         32:b2:ab:60:c9:42:98:ab:80:40:31:ac:b2:4b:e1:a0:3c:78:
         91:d9:74:b9:91:06:4a:2f:55:83:0f:11:c6:74:11:b7:69:76:
         90:4f:92:08:11:82:0c:f9:f9:96:74:29:df:23:26:43:e3:0c:
         2b:0f:02:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:20:13 2025 by rpki-client