Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
File:                     p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft (raw, json)
Hash identifier:          8BNPkrr64Zto6mVVGaxF0u2vtWZJInAxbDCPaB2jHoY=
Subject key identifier:   CB:47:AF:F9:94:FB:19:B8:D9:D7:2F:74:8E:DC:A0:63:0C:95:C2:CA
Authority key identifier: A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07
Certificate issuer:       /CN=a7a70627bb45cd6c71f22019226a6a1895222f07
Certificate serial:       01969DBEAC46E861E9A0509A9B52D37F96DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
Manifest number:          048F
Signing time:             Mon 05 May 2025 00:00:40 +0000
Manifest this update:     Mon 05 May 2025 00:00:40 +0000
Manifest next update:     Tue 06 May 2025 00:00:40 +0000
Files and hashes:         1: EnZTRjVsyeH5YvN_IXdrjMInto8.roa (hash: dGNdfgQT3ZLKhZ/v9I6RHyrRDvkswkwt2I+OFKs6hJw=)
                          2: p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl (hash: 1LqAAfPYu6gdnws1hHNPfPXrI1rUZ5qyWVRHN2z8XOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:be:ac:46:e8:61:e9:a0:50:9a:9b:52:d3:7f:96:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a70627bb45cd6c71f22019226a6a1895222f07
        Validity
            Not Before: May  5 00:00:40 2025 GMT
            Not After : May  6 00:00:40 2025 GMT
        Subject: CN=cb47aff994fb19b8d9d72f748edca0630c95c2ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:52:2f:69:28:65:33:61:7c:ce:0d:e0:7a:ed:
                    a9:d8:0c:e1:ac:f6:4f:7b:b0:ff:6c:6e:e5:25:1f:
                    40:fb:bb:f6:ca:e7:88:26:0d:5b:7e:85:1a:8c:73:
                    94:a3:44:81:6f:3e:e2:a9:6a:35:6b:81:9c:4d:11:
                    f7:b1:7e:62:2b:6a:5d:59:60:85:74:ef:bf:a0:fc:
                    10:56:30:2c:4a:d9:8a:6b:91:79:fe:8e:3a:aa:71:
                    59:f3:06:a9:c0:fe:8f:0b:e0:1e:cd:62:07:fe:01:
                    da:04:ab:10:99:fe:e1:13:5a:c2:40:33:eb:af:99:
                    71:7f:d1:6b:17:50:be:04:f4:4d:2a:aa:f6:c3:bc:
                    a0:73:ac:3e:92:d9:86:fd:3d:f9:8c:d7:62:26:02:
                    28:da:33:a7:d5:5e:1d:51:78:6d:26:68:df:84:e5:
                    7c:11:d6:08:ea:62:b1:c0:8a:98:27:0b:86:28:f9:
                    1f:7a:1d:a7:10:75:96:c1:85:58:ff:24:29:89:ae:
                    15:09:e1:48:ca:e5:bf:c9:ff:d3:c0:a0:d7:00:c2:
                    ae:cf:f8:d1:50:aa:ad:63:f1:2a:31:a9:87:a3:26:
                    aa:77:d1:39:c3:c5:4d:3d:58:e6:db:45:66:8d:03:
                    f7:1c:53:bf:e3:6d:3a:61:05:4c:3c:82:e2:16:cc:
                    b7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:47:AF:F9:94:FB:19:B8:D9:D7:2F:74:8E:DC:A0:63:0C:95:C2:CA
            X509v3 Authority Key Identifier:
                keyid:A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:27:19:89:44:6a:a0:07:31:da:30:db:6e:6e:02:34:47:2a:
         99:80:35:a3:7c:0a:7c:54:b2:94:50:e3:49:a6:54:21:8d:a8:
         26:3c:8a:db:4f:3c:8d:36:42:24:6e:04:d3:fa:d5:6e:4b:09:
         91:ea:71:7a:a4:99:55:df:8b:44:3e:12:07:b2:ed:bf:c3:e0:
         0b:59:20:45:c6:c1:cf:90:90:d9:e5:49:38:8f:89:46:1c:b4:
         26:6d:43:60:a4:17:68:ac:7e:d9:b4:05:e4:d8:d5:22:17:3d:
         46:f4:a7:b4:30:94:d8:30:0d:e6:d4:e9:6e:1a:8d:3d:86:10:
         4f:16:e3:71:99:a5:08:41:f4:6e:89:23:10:ef:b4:1a:bb:23:
         3b:cf:4a:3c:f1:e0:47:57:22:72:a3:96:c0:f6:43:df:4e:de:
         cb:0c:aa:ec:eb:c4:86:05:f4:10:5f:af:be:94:7b:f7:55:c0:
         68:ee:6d:8d:9e:69:c2:cb:9b:6f:5d:29:12:f5:bb:ba:ce:c6:
         b0:d7:d5:bf:9a:6a:ec:46:a8:9d:a8:f7:6e:fc:87:a2:2c:c3:
         6d:99:4a:92:a8:c4:f7:d3:29:e4:9f:c5:17:4b:50:c9:a7:83:
         a2:e4:50:12:9d:e9:9a:ee:8f:8b:6d:a9:4d:83:9a:da:57:07:
         5f:dc:fa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:45:03 2025 by rpki-client