Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File:                     0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier:          46kpqOjDwCpqxQyZ3UBF+laHi1WvUTNmYeOCOo8LPbQ=
Subject key identifier:   A6:C0:AB:23:5B:85:87:A0:02:87:D5:D0:19:96:BC:08:47:60:C9:42
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer:       /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial:       0196C6BA7414B7D0B8C39404C1A7150E5CDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number:          0CC6
Signing time:             Mon 12 May 2025 23:00:30 +0000
Manifest this update:     Mon 12 May 2025 23:00:30 +0000
Manifest next update:     Tue 13 May 2025 23:00:30 +0000
Files and hashes:         1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: OlYkybuE4G/OIP5aFsX+O1+IeEiFW/PhJk1uuK3g0dA=)
                          2: 2cTr93XSpmWbM-qTTud8CZ5Sh1I.roa (hash: Ox67FMktxFvYuYpHVpuT5WkOs/dH1k6Q6zB500ivOTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:ba:74:14:b7:d0:b8:c3:94:04:c1:a7:15:0e:5c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2abab75e746db1ecaa998759900399485093027
        Validity
            Not Before: May 12 23:00:30 2025 GMT
            Not After : May 13 23:00:30 2025 GMT
        Subject: CN=a6c0ab235b8587a00287d5d01996bc084760c942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8a:e3:8f:c3:f0:26:66:6e:24:75:02:ab:f5:
                    3e:e9:20:93:eb:c0:0d:d6:1d:66:38:69:b1:d1:61:
                    1a:6e:c7:66:87:26:d5:78:54:54:ad:cb:eb:b4:76:
                    55:c9:fc:96:63:9e:94:e2:1a:c9:62:ad:fe:2f:d8:
                    6d:a2:6f:32:16:2f:fc:9b:6c:8f:1c:a0:d5:a9:8d:
                    33:9c:5c:1a:d6:f2:19:4e:ad:ec:23:40:94:99:be:
                    3f:5a:8b:ec:15:f3:b2:85:eb:4c:9f:ff:49:e5:28:
                    d4:6f:88:45:6a:80:e1:ce:d4:11:41:76:73:1c:21:
                    c8:86:e6:ce:a1:3c:16:ff:9b:aa:43:e8:93:76:f3:
                    ec:35:63:78:c9:9a:54:54:a3:94:05:81:09:66:ae:
                    4a:85:49:da:96:6c:a5:b3:8d:17:83:a7:7c:6e:0f:
                    ef:eb:cb:0e:b3:0b:78:26:27:46:26:59:1e:47:c7:
                    75:b1:d5:34:75:19:83:65:a6:ce:92:d3:cb:50:f6:
                    bb:ca:90:12:08:34:e3:c1:c0:4f:8a:2e:e7:b2:bf:
                    27:46:72:75:e5:06:de:ab:39:aa:ac:cc:77:cc:2c:
                    5f:15:ff:eb:74:01:a4:ee:d4:a5:ee:21:9a:d7:d4:
                    28:aa:96:e7:3f:5c:59:9e:1e:24:eb:41:b1:f8:10:
                    e5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C0:AB:23:5B:85:87:A0:02:87:D5:D0:19:96:BC:08:47:60:C9:42
            X509v3 Authority Key Identifier:
                keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:09:71:83:8b:3e:11:a5:fd:dc:59:38:a7:9f:83:a9:b8:f6:
         ea:6b:fd:5a:59:67:62:f4:97:b7:64:8f:43:b4:ca:6c:2d:36:
         91:c2:b3:d4:cf:fb:ec:be:f4:d1:44:3f:99:93:08:b1:f4:af:
         1d:92:ef:bb:f3:2f:33:0f:e5:69:b6:f9:14:9a:4f:44:ef:ce:
         2c:5e:ce:19:64:4a:24:df:68:ba:62:e1:03:a1:db:78:1b:8f:
         65:d4:9c:73:42:a6:bd:8b:58:f1:8c:c0:7a:37:53:91:e6:97:
         04:e4:bb:2c:81:84:5c:0f:5f:4a:ad:e9:61:13:29:60:21:e1:
         09:73:2b:44:93:dd:71:50:98:2d:dd:7c:7c:c9:33:bb:bb:77:
         fc:20:6f:f4:bf:e8:13:7a:35:81:e2:6a:c2:57:a0:ea:1d:56:
         f8:31:58:de:fe:8d:70:f5:79:65:ee:95:76:74:77:ec:5d:33:
         e5:48:d0:65:9d:c5:49:10:97:68:5b:1f:bc:00:5c:91:41:cc:
         4c:87:08:db:d8:db:81:37:fe:74:5a:d9:98:9a:fb:20:91:3e:
         74:bd:fe:71:4b:53:1a:f7:80:ea:e3:88:d6:70:fa:59:aa:c6:
         b8:95:3c:4d:03:2c:fa:ea:88:40:72:f5:d7:00:c6:08:d2:a9:
         44:67:80:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:39:38 2025 by rpki-client