Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
File:                     a4us2V8fS9Z1Un0ybSmZVoYsMho.mft (raw, json)
Hash identifier:          KeFUffgi1WBp+6xIfoi6X1DaHlioAEFwaraIbJMUMIw=
Subject key identifier:   1E:AD:CC:EF:E6:9D:46:50:7A:97:08:11:C0:34:3D:12:A6:EB:5B:7F
Authority key identifier: 6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A
Certificate issuer:       /CN=6b8bacd95f1f4bd675527d326d299956862c321a
Certificate serial:       0196C04AFBB7212D47CDFFC7CFDC538BC37C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
Manifest number:          0FD6
Signing time:             Sun 11 May 2025 17:01:01 +0000
Manifest this update:     Sun 11 May 2025 17:01:01 +0000
Manifest next update:     Mon 12 May 2025 17:01:01 +0000
Files and hashes:         1: a4us2V8fS9Z1Un0ybSmZVoYsMho.crl (hash: Yi4FLomcwNprp/PQDOAqJ/JM/VCztRZ/1wzA61B65vA=)
                          2: pWHDIdvugLu8Y51LeZtocP5HOcI.roa (hash: fyvGZubWInNshv6PvFcn8DVCaqecv6kcINe/lSRIemw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:4a:fb:b7:21:2d:47:cd:ff:c7:cf:dc:53:8b:c3:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b8bacd95f1f4bd675527d326d299956862c321a
        Validity
            Not Before: May 11 17:01:01 2025 GMT
            Not After : May 12 17:01:01 2025 GMT
        Subject: CN=1eadccefe69d46507a970811c0343d12a6eb5b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:98:a8:ee:5b:e1:12:83:6b:ff:7b:fe:0c:78:
                    5b:3a:6b:5a:49:52:cb:50:7d:03:ac:13:0e:a3:f7:
                    b7:f1:01:aa:34:35:7e:ec:04:e2:f3:d9:ee:2c:88:
                    b9:06:3e:d6:98:97:63:aa:3f:eb:be:22:df:86:2e:
                    0e:96:45:21:9e:a5:68:c5:b8:d6:bc:2f:bd:75:f1:
                    2c:89:13:27:87:b3:b2:c6:9d:f0:17:65:0b:15:ee:
                    d2:cd:09:58:56:e0:44:67:72:ac:fe:f3:37:e7:59:
                    a4:ff:e5:d9:16:99:5f:16:dd:97:f9:11:88:f3:c8:
                    73:a6:ea:81:8f:d7:6f:e7:ba:db:c2:ce:ec:b1:21:
                    fd:41:34:16:fa:0a:44:35:89:fc:0b:18:ea:4c:52:
                    56:cc:6a:aa:e0:ef:49:5a:37:7b:53:5e:57:00:02:
                    b5:fd:3b:7b:bb:43:87:9f:e6:e2:8c:3b:c3:c2:85:
                    98:d9:8f:c2:48:f8:78:98:50:df:2f:41:1f:f3:69:
                    bf:ac:73:42:7b:f6:14:e9:a3:ac:1d:9a:16:10:7d:
                    92:93:bf:6f:94:e1:57:b8:8d:a9:24:03:61:e1:fa:
                    9e:f4:03:90:a2:c6:6c:d5:7e:2e:d1:50:25:92:3f:
                    e1:8d:b4:d7:26:59:a4:db:38:90:b9:69:82:38:e3:
                    e5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AD:CC:EF:E6:9D:46:50:7A:97:08:11:C0:34:3D:12:A6:EB:5B:7F
            X509v3 Authority Key Identifier:
                keyid:6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a2:da:bc:07:3d:55:3b:f4:8b:8a:91:aa:8f:21:39:f3:52:
         50:4d:42:ce:57:99:3f:6b:fb:75:a4:f1:47:a4:10:af:a6:3b:
         7d:f3:2a:c8:d7:e5:46:6c:7f:ca:88:28:c1:84:8b:4e:d2:e6:
         f3:a4:38:8c:e9:6f:69:cd:0e:00:b1:c1:11:7a:c1:10:3c:e9:
         85:2f:cf:8a:a6:b9:98:d3:3f:03:36:f3:a9:76:82:86:e7:ae:
         44:14:4d:29:86:30:2c:22:bf:2e:7c:fe:90:5b:c7:0d:9f:79:
         2a:a4:f3:87:e4:35:9b:35:18:63:96:9c:c3:9e:19:35:a1:b5:
         2e:5c:77:71:60:07:4e:44:d9:00:a8:9b:b1:28:52:b0:8f:d0:
         69:62:8e:b5:1d:8c:3a:14:0a:0a:06:12:b1:39:c6:8b:4f:b3:
         0c:cb:30:a7:d5:d5:af:a1:d2:0c:ae:fc:a5:72:c9:ab:bb:f8:
         74:10:08:93:ad:7e:05:9c:5a:9d:9c:68:82:23:3e:37:19:3d:
         14:cb:a0:7a:29:ff:6b:d6:38:c2:59:fa:62:37:f7:41:b0:37:
         32:de:13:40:aa:3a:8d:31:41:18:4a:e4:6c:90:37:95:d5:1e:
         b6:fc:b8:7f:55:fd:65:50:65:27:c0:1a:fc:66:43:5c:d0:48:
         1d:0e:d6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:16:59 2025 by rpki-client