Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
File:                     25ebiYwPWDTLyDimmgXjq-jAKQM.mft (raw, json)
Hash identifier:          owQikzZKd3SWWiFu1eukSfMC6voOv7Q3kz0Im6Vrkjg=
Subject key identifier:   6E:0F:45:2F:7C:9E:5E:1B:93:7B:58:2C:67:31:0F:BD:9A:C0:3D:7E
Authority key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
Certificate issuer:       /CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Certificate serial:       0196C87211C951F4CC6BCF69BFB66E208E42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
Manifest number:          08CC
Signing time:             Tue 13 May 2025 07:00:40 +0000
Manifest this update:     Tue 13 May 2025 07:00:40 +0000
Manifest next update:     Wed 14 May 2025 07:00:40 +0000
Files and hashes:         1: 25ebiYwPWDTLyDimmgXjq-jAKQM.crl (hash: c6l66VPaQLlW8F2T4Jy0gvm0FvbQp+dcUpC3fGs5Duo=)
                          2: kQI24cv0NZjcs-NoEtkNWQr945M.roa (hash: lv4kdfvUyBf5e1wmjHgM1hbCJlTmhLUys8Yvw75WiAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 07:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:72:11:c9:51:f4:cc:6b:cf:69:bf:b6:6e:20:8e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db979b898c0f5834cbc838a69a05e3abe8c02903
        Validity
            Not Before: May 13 07:00:40 2025 GMT
            Not After : May 14 07:00:40 2025 GMT
        Subject: CN=6e0f452f7c9e5e1b937b582c67310fbd9ac03d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5f:de:38:7e:5d:31:35:ae:c1:7d:6c:c7:88:
                    17:bf:cc:41:06:c4:85:54:3a:d4:b5:35:3b:2f:aa:
                    ab:21:5b:af:01:90:fe:b3:2b:15:8a:89:d7:75:6f:
                    a4:50:a5:63:4b:98:53:42:06:f5:7b:0f:bd:e7:5a:
                    2c:f3:98:14:61:ab:0a:eb:94:a6:6b:91:fb:5c:53:
                    ba:58:ba:72:9f:16:08:aa:12:b6:96:17:c4:5f:fe:
                    05:ee:47:ab:a5:e6:01:70:62:20:61:86:1c:e0:1d:
                    f1:e3:54:97:0f:1c:b6:89:bc:31:03:5b:86:b2:f4:
                    51:ff:de:99:ba:a1:32:5e:34:05:e0:1c:88:09:a4:
                    15:79:32:a2:c8:9e:27:6d:34:27:60:4f:a3:09:e8:
                    f4:6c:01:d1:a3:dc:7a:92:84:e1:bc:a6:2a:de:9b:
                    52:cb:14:8a:97:b7:16:8e:af:f4:74:9c:66:95:22:
                    39:03:b3:c4:8f:be:07:60:30:47:b3:43:c5:78:73:
                    45:b5:f3:ce:02:97:09:92:67:23:20:e2:16:63:38:
                    84:93:da:47:09:9e:8a:3f:a1:5c:3e:a0:14:d5:9f:
                    81:13:7a:7a:99:58:c4:c9:74:56:f9:cc:ee:09:ce:
                    20:2b:b5:4c:0e:44:71:8c:ee:c4:b9:82:dd:d3:cc:
                    97:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0F:45:2F:7C:9E:5E:1B:93:7B:58:2C:67:31:0F:BD:9A:C0:3D:7E
            X509v3 Authority Key Identifier:
                keyid:DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:96:51:92:e6:69:eb:fb:e9:41:f8:2c:dc:ec:9b:6a:48:1e:
         c8:34:9b:04:cd:11:e4:af:0d:d2:c2:42:9e:e1:4d:36:ee:9a:
         56:4d:da:38:42:36:b4:be:c3:ec:8f:fc:66:b8:9d:b0:ef:ae:
         77:ac:ba:d3:58:d9:c0:33:f8:b3:81:f5:ca:0b:21:2a:69:04:
         a2:ed:3f:41:a8:6d:a9:fa:f0:ab:ed:21:cd:58:76:df:d2:c6:
         0a:33:95:d8:2a:ff:89:5d:42:3d:84:22:0c:3c:7a:50:b7:da:
         33:40:fe:52:bf:9d:7e:28:a8:24:84:c7:41:e2:58:ba:71:c8:
         48:56:71:33:82:08:47:6a:21:35:a4:23:c3:b2:5b:d7:7d:3d:
         7c:49:25:81:c6:6e:46:69:5d:3a:04:39:d9:b1:b3:5a:07:55:
         42:5d:1e:88:28:14:67:81:c8:e4:8d:1c:68:2d:9b:97:7c:a2:
         9d:23:52:ae:9d:36:be:f0:c9:03:0d:4e:80:5a:67:80:28:89:
         5e:82:7e:c8:02:30:9f:78:1f:e8:a8:f3:c8:35:29:c2:bc:05:
         c5:8f:48:bb:a8:42:1e:cc:ad:37:65:f9:4f:84:ad:f5:54:f1:
         fd:62:6d:4e:10:85:7a:70:21:b9:63:18:42:40:5b:f7:de:6c:
         4b:d8:ea:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:19:53 2025 by rpki-client