Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
File:                     6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft (raw, json)
Hash identifier:          uXyX1Sr7sTlh2BZSvkWLB8IsDJ5cSxII5SWGmZdBJVs=
Subject key identifier:   1A:81:E2:2D:42:23:46:E0:0F:4D:DA:5F:FF:F3:70:37:0D:C1:02:C8
Authority key identifier: E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
Certificate issuer:       /CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Certificate serial:       0196BB92BA745E561299F021CD3F479E8C1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
Manifest number:          0C03
Signing time:             Sat 10 May 2025 19:01:17 +0000
Manifest this update:     Sat 10 May 2025 19:01:17 +0000
Manifest next update:     Sun 11 May 2025 19:01:17 +0000
Files and hashes:         1: 6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl (hash: wQx/IYclyoDThWc0CD6K4d67ykIg9jM10Jws28SOq3g=)
                          2: r3X5pk5U2Z-5txOYvpcZbvrFurQ.roa (hash: 87QkeU5ku+ENNSsEiVa7il+EqGwoFRelcSgk+xC7ai4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 19:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:92:ba:74:5e:56:12:99:f0:21:cd:3f:47:9e:8c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
        Validity
            Not Before: May 10 19:01:17 2025 GMT
            Not After : May 11 19:01:17 2025 GMT
        Subject: CN=1a81e22d422346e00f4dda5ffff370370dc102c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:57:10:6a:98:e8:4b:d9:8a:52:cf:84:b2:81:
                    99:ee:f4:8d:55:1b:44:40:43:6b:b7:78:e1:03:c0:
                    5d:9a:74:16:8f:1c:25:27:88:b0:07:9f:12:fa:81:
                    af:d5:37:e9:a3:7a:af:ab:5d:d7:4c:de:93:6b:3d:
                    21:bf:0d:72:eb:65:91:30:79:e4:f4:9f:2a:c4:2d:
                    0e:16:0d:cf:96:c3:da:9f:ee:d9:ae:90:3f:5e:f1:
                    24:f5:50:10:eb:56:33:c1:1d:68:b7:5d:67:6f:89:
                    b1:68:e9:5d:a4:ce:23:2c:f5:ef:c7:33:b9:09:e8:
                    56:36:1d:22:70:18:4d:22:8c:fc:05:d9:5f:df:6c:
                    f3:44:40:bf:cf:29:83:ba:39:d9:4f:85:c0:14:5f:
                    4e:79:f7:8c:e5:66:35:5e:b6:83:2b:94:d0:4b:d7:
                    6c:41:f2:e4:f7:f2:49:7f:db:74:07:03:5f:a4:a0:
                    6a:90:98:7e:94:8f:67:9d:b1:3a:c0:9a:5d:bd:b5:
                    b9:c1:95:53:e5:6e:60:8a:4c:c9:93:8c:4a:8d:25:
                    a3:ef:a9:a6:cc:1b:80:6a:5d:ee:58:05:12:87:81:
                    a7:65:c6:96:62:f3:a2:e7:f6:aa:eb:34:d3:c5:30:
                    65:7c:00:2e:80:8f:60:b8:f2:e6:a2:25:ad:13:d1:
                    c3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:81:E2:2D:42:23:46:E0:0F:4D:DA:5F:FF:F3:70:37:0D:C1:02:C8
            X509v3 Authority Key Identifier:
                keyid:E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:5a:5e:83:87:78:26:10:af:84:dd:bb:57:99:04:f0:64:27:
         64:71:82:38:25:8b:b8:a6:fb:9b:f7:a4:8b:c0:0a:e3:f1:ea:
         b4:c9:35:3e:8a:91:bd:b4:ba:0b:bf:50:df:d0:a5:41:4a:0c:
         1c:7b:c9:07:f0:48:4b:0d:b3:5b:2d:6d:9a:c9:a6:92:ad:97:
         a2:fe:62:01:02:30:43:c7:dd:a2:36:a6:1e:f2:00:22:95:e3:
         6e:94:26:c6:a8:c2:68:19:e8:4c:0a:1b:0a:a6:43:fe:85:30:
         b9:e8:2a:10:0f:13:7c:77:17:53:9f:4c:4c:46:8c:85:5f:74:
         49:b7:b7:52:71:c3:18:77:8f:86:88:fc:d2:ba:6b:18:3a:dc:
         9b:01:47:77:79:6b:b1:ba:8d:cf:4d:ec:77:0e:61:8a:c0:6d:
         d9:85:fb:c0:4b:89:4b:20:3b:3e:77:20:73:86:63:2f:13:c3:
         aa:24:ff:78:a6:84:e8:1b:a5:f3:cc:a8:14:65:db:17:d9:51:
         47:9a:47:af:09:53:eb:3b:cd:b4:61:04:84:88:e0:9a:91:aa:
         e4:78:4b:34:dd:8e:b0:b7:7f:c6:31:54:4a:4b:cf:08:c6:75:
         25:dc:a8:8f:17:b7:c6:f4:80:bd:b3:63:bb:6f:6c:dc:d7:94:
         f5:45:78:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:46:45 2025 by rpki-client