Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
File:                     7aJsQI_Ge3UnNMyZfzYw269vYG8.mft (raw, json)
Hash identifier:          p++oTqnGFWFNsJuSpQUNW5XedJ1fverp4HM86xHXoQM=
Subject key identifier:   E9:9A:B6:48:09:54:AE:D2:1A:7D:D0:44:BA:E5:13:35:E5:88:A7:A8
Authority key identifier: ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F
Certificate issuer:       /CN=eda26c408fc67b752734cc997f3630dbaf6f606f
Certificate serial:       0196CB7336870569802DEB552A3FF10DB3D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
Manifest number:          09B3
Signing time:             Tue 13 May 2025 21:00:47 +0000
Manifest this update:     Tue 13 May 2025 21:00:47 +0000
Manifest next update:     Wed 14 May 2025 21:00:47 +0000
Files and hashes:         1: 7aJsQI_Ge3UnNMyZfzYw269vYG8.crl (hash: QyWhkMPlQSbs/KM4at/0wa13TjSyA914zdKicbeP66Q=)
                          2: JN4F6grFlB3Dj8-hg1uFDcOXCEE.roa (hash: K8bXo6vEOSPG5pKmJ8Ir19tJNgI9+I5+FHzJIbxUZek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 21:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:73:36:87:05:69:80:2d:eb:55:2a:3f:f1:0d:b3:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eda26c408fc67b752734cc997f3630dbaf6f606f
        Validity
            Not Before: May 13 21:00:47 2025 GMT
            Not After : May 14 21:00:47 2025 GMT
        Subject: CN=e99ab6480954aed21a7dd044bae51335e588a7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:81:45:73:c3:8a:3f:2a:86:17:38:3c:7b:
                    9b:6c:e5:38:cd:7f:8c:a4:67:b3:49:15:fd:cf:ee:
                    ae:66:13:77:42:ee:54:e5:69:c2:89:2e:c5:dc:f9:
                    63:78:dd:1f:a2:bf:5d:c1:fe:fc:e0:ab:44:31:c8:
                    94:b5:8e:69:6b:37:88:54:0f:f2:cc:0a:0d:78:31:
                    81:b2:7e:95:76:41:8e:b0:02:6a:60:15:60:22:b7:
                    3d:38:bc:44:6d:34:0f:72:15:9d:76:55:33:73:2d:
                    25:e5:3b:20:67:87:fb:2a:50:da:d7:f6:e6:8d:85:
                    cd:9e:ed:3c:6b:2d:86:36:44:e0:72:21:87:3a:9c:
                    18:29:49:55:1f:05:c1:2d:c3:5e:d1:d1:2e:3a:3b:
                    46:7d:2f:e3:76:26:dd:14:61:af:76:f9:f1:e3:6f:
                    38:29:2b:ff:24:4f:21:13:45:f0:e6:54:78:f5:19:
                    18:62:7b:56:66:38:f7:c9:99:db:ab:c4:c1:e5:ba:
                    e8:b8:74:8a:a5:18:9f:88:1c:28:76:08:fb:94:14:
                    2b:06:19:d5:62:30:60:3e:ef:9f:36:c6:c8:c3:38:
                    a3:f5:b8:de:91:83:57:c8:2b:7b:30:b6:f6:73:23:
                    b3:c2:ff:04:ab:4a:e8:02:1b:56:bd:81:dd:46:5a:
                    f0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9A:B6:48:09:54:AE:D2:1A:7D:D0:44:BA:E5:13:35:E5:88:A7:A8
            X509v3 Authority Key Identifier:
                keyid:ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:83:61:69:35:3e:0a:e3:ca:4d:73:64:48:4f:2d:08:bf:1f:
         5c:10:71:5a:a4:cc:18:0c:e3:99:84:70:be:c8:85:7a:ca:a9:
         98:51:37:e2:6a:ac:1f:a4:6a:14:b5:c9:75:de:c5:c3:54:01:
         12:38:7b:0c:e8:58:7f:e1:3b:4e:24:65:ad:6f:a2:33:8f:eb:
         f5:d3:01:d4:c1:ca:7e:f4:32:03:fc:6a:de:42:8f:c6:2c:e2:
         29:d8:53:b0:d3:6b:c8:4f:65:49:ad:49:82:19:f7:23:6e:74:
         37:13:66:28:e0:18:4c:e5:42:02:b3:8f:76:43:6f:d1:34:f7:
         99:e9:b7:f4:a9:1a:a1:56:e6:89:36:0f:46:c4:6d:5e:a0:65:
         04:33:ae:e7:3f:86:b2:e3:11:96:94:c1:02:b5:7b:94:ed:41:
         7e:2b:f5:de:61:5b:b4:55:24:a0:d5:ab:39:ca:ce:28:d8:97:
         ff:67:b7:5b:c6:ee:94:aa:2a:7b:04:68:d4:b4:87:a3:28:9a:
         f8:99:ba:86:37:47:1a:b8:9f:33:90:87:5e:6d:84:ce:73:97:
         62:5b:31:c6:2d:a7:f4:1e:ee:bf:36:6a:20:6f:b0:58:ee:c6:
         c5:69:75:4b:bd:b5:06:be:a6:32:61:70:34:d8:34:8b:32:0f:
         59:3d:3b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:42:17 2025 by rpki-client