Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
File:                     V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft (raw, json)
Hash identifier:          SQ9iSE9snundd4nv48XfKg2OS8gDW7FnE/I3WL2XNBA=
Subject key identifier:   09:94:84:25:60:75:CA:EA:5D:0D:D4:AC:8D:D5:9F:6B:79:6D:63:B2
Authority key identifier: 57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29
Certificate issuer:       /CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29
Certificate serial:       01969F0834802554F9DDE3B9FB2237CB0F1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
Manifest number:          14B6
Signing time:             Mon 05 May 2025 06:00:37 +0000
Manifest this update:     Mon 05 May 2025 06:00:37 +0000
Manifest next update:     Tue 06 May 2025 06:00:37 +0000
Files and hashes:         1: V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl (hash: n1Ym5MuqVcP5grJtS8p4erb6sgC6EKK8Y29XESMgo4M=)
                          2: We1vlMV5F0WOOHhpojHWiZ1mpOk.roa (hash: kb4mbEAAu4J7YcsoL9X19jWq28MWG1KM2kpIpY/qIwQ=)
                          3: uXQZBDj9ZtkXG_83Mo1I8Z6Fydw.roa (hash: SGdXI5i5fIsWQdG6sYWkGmfc2P0KTqH/WAPHrOQF1V8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:08:34:80:25:54:f9:dd:e3:b9:fb:22:37:cb:0f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29
        Validity
            Not Before: May  5 06:00:37 2025 GMT
            Not After : May  6 06:00:37 2025 GMT
        Subject: CN=099484256075caea5d0dd4ac8dd59f6b796d63b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9b:40:5e:a3:73:b0:d7:d1:8d:d1:60:55:f4:
                    c4:7c:9c:48:be:aa:75:d9:82:9c:a1:cb:45:25:c5:
                    99:b7:a8:ee:c8:4e:dc:83:1d:49:46:97:43:1a:92:
                    62:fd:d9:a9:6c:09:b1:1f:f0:82:44:72:26:5a:47:
                    f5:0f:76:8f:4b:02:6d:ff:2d:7e:92:01:f7:d6:bc:
                    53:d4:0f:4b:ea:98:3b:00:8a:7c:e3:a6:17:5e:51:
                    a5:07:8c:c1:d1:39:7a:4e:51:32:9f:78:74:9e:9e:
                    ef:74:b4:56:b0:4d:b7:eb:ad:01:aa:72:97:de:f2:
                    72:37:36:0f:11:d0:20:49:f0:42:e6:0e:60:54:b3:
                    2b:3d:31:2d:5a:59:50:16:bf:aa:e2:fd:53:cb:18:
                    95:64:c6:ee:bb:ba:69:7c:b9:93:59:a3:82:ee:78:
                    d0:1b:58:6f:bb:15:20:e6:6f:ad:d7:41:cc:96:ff:
                    d5:7e:ae:87:85:00:61:be:02:97:63:ea:fe:12:50:
                    24:86:27:e8:a3:85:1b:80:13:db:16:ea:8c:00:2e:
                    cf:92:86:e8:1e:9c:9a:48:fb:6b:f5:70:d8:73:fc:
                    06:ad:f7:fd:15:91:0b:44:55:90:fc:19:88:f4:fe:
                    75:fe:eb:9a:bb:d0:6d:fd:ee:f6:5f:50:9d:70:f9:
                    06:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:94:84:25:60:75:CA:EA:5D:0D:D4:AC:8D:D5:9F:6B:79:6D:63:B2
            X509v3 Authority Key Identifier:
                keyid:57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d4:e8:ba:8d:4c:2c:c1:8e:20:9a:99:da:c5:9f:55:c5:01:
         ae:1c:a1:d9:16:9e:c1:7d:f6:3a:61:fa:57:ed:a6:da:ae:38:
         44:74:4f:2a:6b:63:46:a6:d3:a4:e2:4d:b6:d3:11:37:2f:b4:
         5d:d1:ba:0f:f3:ba:2a:76:33:19:f3:3c:a0:06:6d:17:2b:0a:
         5f:ff:bb:e6:04:a4:c3:eb:af:ff:4f:5e:cb:e6:d8:66:6f:7d:
         f9:31:40:8f:03:d3:b7:24:6c:20:5e:70:d1:28:2e:1d:7a:84:
         1b:1c:86:da:0b:4b:c4:6c:ca:f9:0f:02:9c:36:3e:05:25:5c:
         33:5b:ae:f4:bb:0a:0a:c3:9a:36:f7:2b:a1:3f:05:d2:ff:36:
         c9:71:08:4c:48:86:d7:20:23:11:d8:e0:4d:ad:3e:2d:e4:23:
         bb:ea:2a:20:23:8c:c8:9b:d0:cd:62:ec:4a:c2:9e:ef:96:7e:
         28:44:8e:66:bc:e2:2d:cb:b1:80:58:df:13:24:ef:48:d1:71:
         70:1d:da:d5:f8:86:ee:f6:82:7f:5f:1b:8d:75:a1:72:a8:c4:
         30:2e:91:96:87:6e:ec:88:f5:e4:a6:96:27:d3:7c:60:72:89:
         b1:b5:c4:d6:6d:7b:04:a5:00:3e:04:fe:9a:ac:49:98:51:77:
         4c:87:da:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:57:15 2025 by rpki-client