Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
File:                     SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft (raw, json)
Hash identifier:          4EOB/MB5Ff7Je71B69F8mGixk7J9vnhn1SC7KL3o6iM=
Subject key identifier:   B2:68:4B:8A:A6:37:13:0D:D5:4C:DC:E0:6B:BC:C9:51:44:AF:A2:FA
Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
Certificate issuer:       /CN=4aebd4543df29da64e4232ef3791f534573c12f1
Certificate serial:       0196C3B9C56AFF18771C1C27B37D36D08DAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
Manifest number:          093B
Signing time:             Mon 12 May 2025 09:00:53 +0000
Manifest this update:     Mon 12 May 2025 09:00:53 +0000
Manifest next update:     Tue 13 May 2025 09:00:53 +0000
Files and hashes:         1: SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl (hash: 4F+iODCbGQmVmlzJhCdDGRm/ZedJNkC6uz1qf5KbNFg=)
                          2: gljPZRHD4o8JNjNIJxHbyh4kaRQ.roa (hash: ynLfSUBP+/RK0hSDUfdxyie+FGZVBwWsIpKno/W57hk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:b9:c5:6a:ff:18:77:1c:1c:27:b3:7d:36:d0:8d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1
        Validity
            Not Before: May 12 09:00:53 2025 GMT
            Not After : May 13 09:00:53 2025 GMT
        Subject: CN=b2684b8aa637130dd54cdce06bbcc95144afa2fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:de:46:be:5e:bc:c2:13:7c:b9:91:91:2d:4d:
                    6a:95:1d:a4:d3:7a:16:03:19:d7:59:d6:65:47:09:
                    a7:d8:c7:45:40:86:c8:97:a8:f1:4c:fb:34:d2:a2:
                    cd:a1:ac:ed:82:2e:40:e1:e8:d0:51:72:11:f6:59:
                    e8:06:42:10:a0:c0:dc:a1:89:9d:b4:fb:e9:80:06:
                    1a:e2:b4:3b:65:a0:e1:8c:30:16:bf:e9:a2:3b:65:
                    b1:11:52:66:d6:ae:2b:64:98:52:d7:ec:97:b4:d9:
                    dc:b8:8b:d0:1c:90:fb:15:c6:d7:0c:3c:46:fc:de:
                    74:bc:f6:67:91:8b:87:29:5e:61:d9:ce:18:0b:73:
                    43:32:90:6b:0a:e1:01:00:ac:56:5a:58:9f:16:46:
                    a0:3c:af:09:0e:73:df:22:9a:a8:22:cc:de:ee:e7:
                    74:77:96:2b:94:f1:db:cb:a3:a8:d8:e7:81:68:f8:
                    bb:37:a1:66:16:e0:76:f5:40:fe:b4:ed:c6:15:2f:
                    84:7e:be:76:b3:d3:69:2b:21:7b:48:1a:9f:86:e6:
                    37:24:da:da:fc:f9:50:af:66:b3:a8:1c:c7:0d:22:
                    a3:e8:c5:6e:8e:8d:2b:01:0a:06:9c:8e:c8:c5:21:
                    e5:93:98:1d:2b:26:dd:88:a2:83:dd:5a:20:64:7e:
                    99:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:68:4B:8A:A6:37:13:0D:D5:4C:DC:E0:6B:BC:C9:51:44:AF:A2:FA
            X509v3 Authority Key Identifier:
                keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:92:5e:51:fc:15:10:70:ba:fa:08:c0:f1:48:4a:fc:03:b2:
         2a:9f:d8:40:a7:15:f4:c2:e4:0a:f5:7a:5f:16:7c:f6:0c:ef:
         76:1a:b2:d7:eb:0b:ad:c1:a0:89:0c:0a:a9:4c:5e:bf:ea:5b:
         69:59:93:7d:3a:82:99:1e:a5:d6:6f:10:a2:5f:67:f8:2d:5b:
         e2:a3:38:b6:3a:0e:e7:c2:f5:a4:a4:d5:a1:df:71:59:32:34:
         8f:16:01:82:f3:ba:79:36:1b:d5:6b:85:6b:0a:ea:f8:46:0a:
         1e:55:f7:95:70:19:e8:52:e6:7f:dc:fa:a5:cd:15:00:df:31:
         16:ff:6c:88:a7:8c:9f:21:6c:9a:52:97:4a:0b:dd:8c:93:73:
         34:c2:55:cc:9a:f3:26:2e:3a:61:fa:e5:92:f3:b7:49:6b:3d:
         af:a2:ce:8f:80:af:2d:ab:52:03:8b:e8:60:e8:b1:26:c1:f2:
         a8:2a:a7:42:69:c0:3b:10:f9:1a:06:52:0a:1f:6d:37:35:e5:
         70:a5:09:b8:f0:39:6c:be:5a:89:29:45:a4:c2:3c:d7:ff:f7:
         6a:f7:54:ac:d4:f0:fd:72:8d:b0:c7:73:bb:82:89:d4:06:2b:
         88:d6:fb:b9:08:b4:ec:8a:27:24:ff:d5:c8:a9:3b:fb:67:53:
         32:43:8f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:12:11 2025 by rpki-client