Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft
File:                     SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft (raw, json)
Hash identifier:          lbtmqsIYzT8+rh6f6AkHQiA0UifYktrAznX2ocGz02I=
Subject key identifier:   11:D3:21:A0:5F:7F:FB:34:D1:87:B5:86:CF:61:0A:A5:FA:67:BC:AB
Authority key identifier: 49:24:0B:59:BB:F6:90:6A:55:5E:10:74:C5:AE:73:EC:62:DF:FC:5F
Certificate issuer:       /CN=49240b59bbf6906a555e1074c5ae73ec62dffc5f
Certificate serial:       0196CEE19513BD33AEDBD9A929E11C7077E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft
Manifest number:          0D9A
Signing time:             Wed 14 May 2025 13:00:12 +0000
Manifest this update:     Wed 14 May 2025 13:00:12 +0000
Manifest next update:     Thu 15 May 2025 13:00:12 +0000
Files and hashes:         1: SSQLWbv2kGpVXhB0xa5z7GLf_F8.crl (hash: G7qk86xxrAG8ODglKJnkKEBkdSyL0nl28NJup1toKLE=)
                          2: qbL9OL5sc-w50AXrG2tZRkZnW2s.roa (hash: Q4+OtthvOte+9IlGsVQn+tB7AZLUhi+dropNGViFYc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 13:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ce:e1:95:13:bd:33:ae:db:d9:a9:29:e1:1c:70:77:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49240b59bbf6906a555e1074c5ae73ec62dffc5f
        Validity
            Not Before: May 14 13:00:12 2025 GMT
            Not After : May 15 13:00:12 2025 GMT
        Subject: CN=11d321a05f7ffb34d187b586cf610aa5fa67bcab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c7:dc:f9:07:e2:89:99:b5:53:cb:37:47:94:
                    60:07:1d:ea:53:52:1d:82:bd:0d:6a:c6:27:bc:c5:
                    aa:f3:c2:9f:d5:3f:85:22:36:a9:54:44:af:4f:fb:
                    a6:95:45:47:32:fd:47:1c:fb:28:65:e1:f7:28:17:
                    25:fd:76:05:3f:39:a8:fd:b9:70:87:03:4b:3b:75:
                    08:7a:51:34:33:35:3e:25:9c:9b:42:29:0e:8e:1c:
                    dd:69:2e:ae:73:3c:8a:58:96:52:9a:7b:86:ef:38:
                    15:11:18:f8:14:e8:a1:36:3d:0f:5d:70:8e:84:0f:
                    51:16:6d:9e:ec:9d:dc:cc:c1:5e:8a:3a:70:cf:68:
                    d7:9c:db:74:4c:c5:bb:f9:48:6c:8d:72:58:06:b4:
                    0e:d3:d8:ec:52:74:2b:6e:a5:0b:ac:26:b2:56:8c:
                    a7:92:ca:29:24:61:10:55:a9:f6:78:dd:9a:a8:f0:
                    9c:45:68:c7:52:fb:be:e6:0e:98:43:fa:87:e1:97:
                    93:70:c3:d1:60:a5:9e:5c:27:f4:e8:44:53:63:7d:
                    44:d5:40:e9:2e:83:64:ab:e8:5a:b3:10:e8:ab:9e:
                    ce:75:0a:a4:c4:45:43:12:7f:70:17:52:28:be:bc:
                    b4:39:d0:0a:7a:be:e4:b7:41:4b:ca:06:1c:90:5d:
                    b3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D3:21:A0:5F:7F:FB:34:D1:87:B5:86:CF:61:0A:A5:FA:67:BC:AB
            X509v3 Authority Key Identifier:
                keyid:49:24:0B:59:BB:F6:90:6A:55:5E:10:74:C5:AE:73:EC:62:DF:FC:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f1:68:fa:dd:31:e2:1b:e0:13:10:2c:59:ea:cb:bb:e6:2c:
         83:f1:27:84:f4:89:e1:5c:ef:06:d3:4c:9b:00:3c:da:27:88:
         0d:b7:ff:6c:5a:78:8b:83:a5:9a:19:ca:98:07:8d:28:ec:64:
         6a:0d:bc:ee:eb:92:38:17:9e:de:34:88:3f:05:c9:ad:08:af:
         28:11:3e:f1:d8:cf:93:05:fd:61:0b:1a:7a:d9:04:6f:ef:80:
         33:2e:0b:5f:20:4c:5a:a3:1c:78:b6:e9:b0:be:03:5e:ab:e0:
         a2:a6:cb:95:91:ff:18:b9:75:6d:4b:dd:62:f3:8e:6c:f4:be:
         16:4f:57:af:f1:d1:86:3c:6d:85:bb:e4:81:09:25:85:ca:35:
         b7:b8:2b:c0:ba:26:e8:4f:8e:ea:c3:ce:fc:c6:66:4f:f9:aa:
         7b:d1:8d:45:6b:63:63:8a:81:39:1b:ab:c0:cc:7f:7d:ac:99:
         06:3f:38:0f:67:6b:49:08:1f:05:83:1e:c4:e7:03:c0:44:fe:
         b0:06:c6:a7:43:a0:a3:2f:00:86:cf:1e:27:34:b7:be:27:6b:
         6a:33:26:45:f6:60:7a:22:dc:17:9e:84:3b:9b:97:be:06:e8:
         6f:c2:18:aa:e2:05:0d:4b:31:27:67:27:d3:f8:16:d5:ba:47:
         5c:8d:e4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 18:47:03 2025 by rpki-client