Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
File:                     q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json)
Hash identifier:          zgvOXtYcfSRavL1XZJjgEhGvoLY059uJfgRNnZvAqlQ=
Subject key identifier:   DB:5B:47:E9:15:14:04:A2:A3:67:D6:4E:EA:02:BD:19:89:1D:67:86
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Certificate issuer:       /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial:       0196C9F2E96B7168A9002F9A9DC9BBB24AF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
Manifest number:          0535
Signing time:             Tue 13 May 2025 14:01:01 +0000
Manifest this update:     Tue 13 May 2025 14:01:01 +0000
Manifest next update:     Wed 14 May 2025 14:01:01 +0000
Files and hashes:         1: DcoOphnBv0Z-r0DRs1Wzn6GO5g8.roa (hash: /C9jr7QH16ykeDGqHdZ0LLAVK74Wkvu3hj1t3uV43yA=)
                          2: Nq6xP1ML7pMOmt1I4z-fGnkBjbQ.roa (hash: eP8YWZy4BtRcpeOrILokYjbMpuSFUnV4sCVcpAqWhwM=)
                          3: XmMK1HZ3DcPkTMV2el117ysMhn8.roa (hash: 4EKgTSdeFZXBlalCvjDw36pJD0WP5d5sVK8uLLXyrbI=)
                          4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: asF4OLDAdO59JFxcfuJfl3Vl24TGnaK3AsqD/cgR96o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:f2:e9:6b:71:68:a9:00:2f:9a:9d:c9:bb:b2:4a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
        Validity
            Not Before: May 13 14:01:01 2025 GMT
            Not After : May 14 14:01:01 2025 GMT
        Subject: CN=db5b47e9151404a2a367d64eea02bd19891d6786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:26:8a:2c:f0:66:0c:90:fe:d7:bf:bd:16:7c:
                    b4:92:98:a8:4c:1d:df:31:a6:24:04:3e:d0:8a:44:
                    1b:be:39:82:b1:0b:75:51:f6:49:ba:e9:b7:24:ae:
                    e8:83:d5:e2:9b:f8:3f:42:e8:91:62:1b:0d:89:72:
                    18:f8:97:01:77:f5:f5:93:d6:42:9d:38:cd:83:43:
                    e6:69:08:cd:e0:d1:3f:fd:84:bd:1f:c5:17:61:f1:
                    17:31:c6:33:d9:32:b7:20:39:ca:b9:27:b5:64:18:
                    f6:9f:28:83:0f:8c:54:50:9b:b5:7b:cf:78:dd:4e:
                    ff:d0:b5:26:6d:8d:dc:4c:61:7d:fa:3f:7c:35:64:
                    3f:30:92:c9:91:08:e8:dc:a5:f1:00:1c:01:e6:81:
                    de:62:6a:32:ae:3b:9d:61:08:0a:44:24:31:80:eb:
                    db:98:f3:5f:b3:a9:91:db:a9:c7:1b:09:46:92:f2:
                    bd:f5:8d:2b:3e:6c:2e:6b:06:d4:5b:de:01:fa:38:
                    91:bc:2d:61:51:34:1c:79:2f:c4:23:da:4f:76:4c:
                    22:31:70:23:16:d6:21:ab:31:df:6c:c6:37:ff:54:
                    56:cb:1a:8a:07:20:c6:2d:71:07:e2:18:6a:6f:9f:
                    13:95:e1:e4:df:08:67:8a:2c:bf:d2:ab:d5:68:7a:
                    ac:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5B:47:E9:15:14:04:A2:A3:67:D6:4E:EA:02:BD:19:89:1D:67:86
            X509v3 Authority Key Identifier:
                keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:98:a4:60:ba:ff:e4:80:f7:f6:91:a6:d0:1d:39:74:3a:f3:
         1d:0e:3b:89:97:11:96:55:96:ea:a3:a6:01:0c:10:55:7d:28:
         cf:54:5a:11:23:a8:e8:a5:39:7c:03:a3:15:c8:49:33:74:d5:
         cb:94:fe:cf:05:6a:52:7e:5a:eb:85:3b:25:64:a0:a8:dd:c8:
         d7:21:07:c3:9f:b2:19:8c:d8:26:49:00:72:58:40:64:c8:12:
         3c:7e:ce:56:8b:b2:e6:0d:f5:51:e3:51:f4:97:2c:4c:5a:ea:
         63:4b:9b:d8:d2:b0:7a:97:cd:93:17:f0:2f:61:71:da:6c:54:
         07:29:13:9f:8c:4f:6f:74:78:ee:86:62:73:f4:8b:d9:9f:99:
         d4:ec:0e:95:d3:d0:38:fb:17:95:8a:64:4c:c1:30:62:09:c9:
         13:a2:66:ba:63:dc:39:23:7d:29:92:3d:59:65:34:68:0f:b0:
         ea:33:f0:22:c9:f6:ea:b3:e8:2f:ad:05:14:7e:64:91:9d:1b:
         95:ce:f6:fa:84:6b:07:aa:67:d1:f4:2f:1c:f6:e1:f3:13:04:
         2d:ec:1f:df:3a:87:e0:45:1b:1a:c2:22:d9:74:5f:dd:9a:6e:
         5d:0c:b6:c3:f9:84:23:3a:14:18:b9:63:30:f8:f2:5d:99:f0:
         51:2c:d2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:31:03 2025 by rpki-client