Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File:                     4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier:          NXjBrT2v8ehSan9b5NFscc6W8y8BlOeWHgG0kv4MWw8=
Subject key identifier:   2C:6E:E3:0B:8E:5A:92:F9:24:EC:4D:FC:98:AD:FB:3F:AC:D9:EE:2B
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer:       /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial:       0196D7AE0009FFDF8E4857F2C3D0BD174314
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number:          0A99
Signing time:             Fri 16 May 2025 06:00:26 +0000
Manifest this update:     Fri 16 May 2025 06:00:26 +0000
Manifest next update:     Sat 17 May 2025 06:00:26 +0000
Files and hashes:         1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: sOFw/Qt0Xt6JxPqocafGhntuzM1ebwSrgFZaqYg0pa8=)
                          2: PBq5zLGD_CUeX0SfhuWUFrucnGw.roa (hash: rPbgNnUy1CwR89NF9bSl2HtGtuQRXqqe8MrxpHJ/Dco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d7:ae:00:09:ff:df:8e:48:57:f2:c3:d0:bd:17:43:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
        Validity
            Not Before: May 16 06:00:26 2025 GMT
            Not After : May 17 06:00:26 2025 GMT
        Subject: CN=2c6ee30b8e5a92f924ec4dfc98adfb3facd9ee2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e0:bd:8c:cc:d5:99:d5:ba:05:71:ff:ff:48:
                    f3:a4:d7:ae:78:35:e3:37:e1:5f:de:da:ec:80:fe:
                    b4:85:3b:70:88:7e:d7:1a:f3:f7:37:07:bf:2b:55:
                    aa:4c:58:7a:9f:6e:52:c7:3d:b6:51:0c:9c:2f:89:
                    41:9b:83:26:3a:ce:03:4a:2f:8d:0c:56:a1:76:f6:
                    54:62:bc:29:1c:fe:d4:74:d8:a0:11:bb:74:f6:67:
                    3b:17:eb:6e:10:7e:d6:a4:cc:11:fa:f3:f5:98:e0:
                    f6:a0:6a:31:0d:a8:23:79:92:15:72:aa:33:4c:6f:
                    a9:26:61:03:c3:b7:56:db:3d:51:63:13:52:6a:54:
                    89:d4:c8:7b:cb:26:49:3b:2f:7f:6d:5c:b1:8c:ea:
                    dc:b6:1c:cc:40:c3:bd:8e:ad:19:f6:a6:b3:03:31:
                    38:4f:1f:d6:d1:d2:d1:0d:23:ca:a4:62:09:2e:42:
                    18:35:d0:e9:09:37:10:45:98:d9:c0:ca:28:fa:1c:
                    18:53:1a:3b:c0:38:4e:89:62:42:ea:47:a2:fe:44:
                    ae:0d:ed:a6:43:cd:3f:ff:ce:be:b1:87:94:5a:bd:
                    5b:95:1f:26:09:3f:de:a6:ff:5b:43:37:6b:5d:c5:
                    ff:ae:54:93:28:7e:ea:05:e2:76:1f:be:d9:90:06:
                    61:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6E:E3:0B:8E:5A:92:F9:24:EC:4D:FC:98:AD:FB:3F:AC:D9:EE:2B
            X509v3 Authority Key Identifier:
                keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:63:98:aa:13:ee:38:80:38:b5:72:30:bb:38:09:60:a7:f3:
         8b:3d:e7:d8:57:60:5d:4d:a3:be:7b:85:81:3c:41:16:51:18:
         d7:64:8d:10:7c:59:4c:ee:63:fb:41:66:b2:0b:fc:6b:c2:46:
         3a:52:7f:a8:a1:8e:b5:e4:85:fd:fb:96:9d:4b:8e:97:e8:5e:
         60:92:df:93:50:e9:48:e7:da:ea:79:cf:c9:37:31:9f:f7:fe:
         a0:10:94:88:e1:a7:e9:c3:16:7f:4e:8a:c8:eb:67:7a:96:51:
         c6:85:69:4c:41:b9:70:0c:54:e3:91:fd:d3:7c:f7:a7:2e:e4:
         3d:0d:49:67:19:3b:29:5d:c1:41:b7:6e:c8:ff:3a:47:d0:27:
         1b:91:74:9d:db:59:8b:e4:81:a1:8c:21:09:a6:ed:31:a3:3d:
         62:14:49:7c:fe:70:5d:70:b2:50:12:2e:58:fb:a9:bd:85:38:
         68:0d:ed:33:0a:79:b6:7b:44:77:1a:bf:38:c4:8c:4c:0e:71:
         40:d8:b1:4e:75:5f:6c:d2:7f:69:33:95:38:c0:ca:01:6c:1e:
         e1:bb:6f:e3:ed:d9:7e:2f:46:6d:99:ba:b9:c9:97:c3:8b:75:
         18:02:c8:de:0b:c3:7e:4a:55:e6:60:5d:cf:29:38:f6:32:c1:
         a0:04:29:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:11:53 2025 by rpki-client