Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
File:                     1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft (raw, json)
Hash identifier:          L19VWet1JUEj/rp44TY5BssddGosHS8AR4EPWcTniz4=
Subject key identifier:   A1:5C:3F:7D:98:A4:A2:40:A4:CB:86:A4:01:60:8C:BD:94:C5:81:FD
Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Certificate issuer:       /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Certificate serial:       0196BF6F07D8F5A9BE0DAF015D6258E91BE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
Manifest number:          0A55
Signing time:             Sun 11 May 2025 13:00:46 +0000
Manifest this update:     Sun 11 May 2025 13:00:46 +0000
Manifest next update:     Mon 12 May 2025 13:00:46 +0000
Files and hashes:         1: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl (hash: gEDx4hfT1mKGv1cpEAU28BJTwx2zptcoQhEIe8vWgP4=)
                          2: EMHZK5FmGs3e4ft5zOEqyrPAX3k.roa (hash: SAEFhbIVJ1yY+JX9erZchhAcSGngszOxyT0JSaQzoqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:6f:07:d8:f5:a9:be:0d:af:01:5d:62:58:e9:1b:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
        Validity
            Not Before: May 11 13:00:46 2025 GMT
            Not After : May 12 13:00:46 2025 GMT
        Subject: CN=a15c3f7d98a4a240a4cb86a401608cbd94c581fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:70:5d:e3:56:10:d9:d6:7b:1b:2a:6a:62:ae:
                    3c:3b:14:be:d8:0a:f2:73:82:c1:3a:15:47:c7:66:
                    f7:b9:80:93:2e:ef:f3:12:6f:0d:f6:d0:cc:2a:18:
                    e5:17:2a:56:7d:0b:7a:68:19:7a:b4:d6:45:99:37:
                    a0:9c:6c:12:96:74:44:c3:b2:b9:0e:25:a9:be:db:
                    31:f4:cf:68:e0:31:2e:34:25:2b:c2:27:a9:3f:1c:
                    c2:f0:8e:13:94:4f:6c:92:2b:71:e4:c8:dc:4a:34:
                    c9:2e:95:f0:15:57:b5:b6:e7:84:b5:29:c1:58:74:
                    0e:85:b7:c6:18:ef:09:72:36:b2:5f:f1:9a:75:7a:
                    f8:90:9d:94:26:5a:ab:40:fc:7c:46:32:50:e2:a0:
                    0a:d7:cb:b6:ed:95:2f:a4:9d:4b:e1:f1:09:82:9c:
                    78:e7:12:14:3d:c6:7a:5a:16:71:58:88:2e:a5:54:
                    83:c0:ce:97:bc:57:43:f6:e8:e9:7f:a7:10:34:6b:
                    bd:1c:6c:5f:8a:cf:ad:88:51:f2:4b:91:06:8b:a2:
                    e8:a3:11:b6:26:5c:8a:29:8f:2d:b8:d8:05:1c:c4:
                    68:1c:17:aa:06:52:9f:1b:d4:78:07:b1:80:cc:7e:
                    3d:5c:fc:87:54:d7:9b:0d:69:02:73:30:f2:76:15:
                    ca:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5C:3F:7D:98:A4:A2:40:A4:CB:86:A4:01:60:8C:BD:94:C5:81:FD
            X509v3 Authority Key Identifier:
                keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:8b:7a:06:da:0c:56:b0:81:91:e1:8b:4f:69:71:ec:b1:39:
         05:09:f1:bf:51:5c:10:0e:ac:aa:9d:74:c4:c5:0a:d5:b2:f3:
         f4:f1:f3:31:2e:da:1c:38:3c:7d:cd:31:d7:6e:b1:88:bf:94:
         d6:1d:36:ff:3f:da:bc:2e:a5:cc:97:81:29:b3:d1:92:33:aa:
         42:34:59:4d:2d:c2:c1:e9:92:99:8a:1b:35:5f:27:bc:49:63:
         3e:17:bc:fc:ba:cc:e8:4a:d1:83:57:f2:46:9c:b0:4a:70:b9:
         94:bf:7c:fd:2a:ed:f3:ac:61:fe:76:59:b5:68:02:ea:17:df:
         70:a3:3a:dd:df:9e:b1:b4:16:72:02:d4:91:eb:e5:08:1a:ff:
         0c:37:2f:5d:f9:66:12:75:35:54:27:8c:41:c8:fe:7d:f5:dc:
         8a:fe:9c:3b:c3:26:f7:92:a3:c3:0e:3e:26:59:de:9e:ba:a5:
         ac:f5:86:a0:7e:2f:6d:93:45:39:82:04:49:2e:ab:bc:ec:08:
         ae:ee:9b:02:e0:a3:a9:3e:82:7e:a7:49:2a:36:c5:ee:5e:24:
         0f:71:3d:5c:d1:e3:d7:de:d2:ad:1f:0d:22:28:56:4a:7d:2b:
         da:a0:f3:9c:f2:f4:57:85:ff:fa:50:ad:d7:6c:dc:77:10:7a:
         ac:0e:c4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:43:16 2025 by rpki-client