Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
File:                     Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft (raw, json)
Hash identifier:          gJ53g574Pyd6V1cLGn1pO9IG/p96ug1iWurNL/XTbK8=
Subject key identifier:   44:87:75:6B:63:70:CF:3C:5E:B4:9B:48:5E:19:BD:A0:CF:6B:92:CE
Authority key identifier: 47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
Certificate issuer:       /CN=473f498592457859f26fb5a610b7b51ef52413f3
Certificate serial:       0196DD790B661577E3DB09BA3A18A6001551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
Manifest number:          06B8
Signing time:             Sat 17 May 2025 09:00:19 +0000
Manifest this update:     Sat 17 May 2025 09:00:19 +0000
Manifest next update:     Sun 18 May 2025 09:00:19 +0000
Files and hashes:         1: Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl (hash: tS9w31K99AG86RejXmy5zx+/Ikm6unSoAVgKYzmXj+k=)
                          2: gACLFbYoQuKSwULuZch33ylGIws.roa (hash: Y3WJDNbjsbnqFHsgE1qqfoHZxL80KWaLyz825fwkstQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 May 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:dd:79:0b:66:15:77:e3:db:09:ba:3a:18:a6:00:15:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473f498592457859f26fb5a610b7b51ef52413f3
        Validity
            Not Before: May 17 09:00:19 2025 GMT
            Not After : May 18 09:00:19 2025 GMT
        Subject: CN=4487756b6370cf3c5eb49b485e19bda0cf6b92ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7f:b1:81:7f:3c:cc:f4:c5:37:69:c0:a1:b0:
                    3a:63:02:c6:67:cf:e6:25:94:cc:7d:d7:ab:11:8e:
                    92:71:d8:40:25:00:8d:53:1c:11:af:5d:5b:c4:26:
                    12:c7:dd:6a:08:dc:04:84:77:96:87:df:b1:d1:b3:
                    27:8e:9d:08:de:ae:e5:48:0b:86:b4:f6:55:5a:98:
                    78:e3:86:60:74:3f:e8:3e:f0:0c:91:bb:53:88:06:
                    5d:22:e1:c3:4e:55:06:76:d6:e5:6a:13:f9:de:c6:
                    17:11:ea:0a:d5:57:58:02:1f:31:93:43:e4:e0:04:
                    d7:ac:38:6a:bd:a6:f8:0c:b6:4e:3c:53:c1:aa:c6:
                    d0:3a:bf:cd:00:0f:85:8c:d5:85:a8:50:7c:94:7a:
                    69:b3:6f:ed:16:d8:29:52:e3:c5:d1:5c:c6:1e:38:
                    f8:d4:48:06:6d:9b:41:0b:e1:ca:e5:d9:39:48:a2:
                    55:dc:12:b3:ff:18:c1:64:bb:0e:b7:78:a4:dd:df:
                    a4:81:e0:0f:a7:bc:79:e7:90:4d:58:bf:40:49:54:
                    98:8a:51:c5:ba:08:57:bd:92:30:d8:7e:86:e7:68:
                    2a:6b:f6:b4:60:62:e9:61:0c:9d:32:4f:03:b2:d0:
                    e0:9b:71:47:e6:b7:f0:58:14:65:6e:49:76:db:68:
                    2b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:87:75:6B:63:70:CF:3C:5E:B4:9B:48:5E:19:BD:A0:CF:6B:92:CE
            X509v3 Authority Key Identifier:
                keyid:47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:53:2e:d8:b5:40:7f:48:2f:39:fd:6c:e2:ae:a8:38:51:60:
         91:d3:c2:53:d8:b5:97:63:93:d7:d9:2c:22:85:7d:b5:00:de:
         26:9d:51:a6:40:30:f1:af:b0:b2:06:30:ea:b9:72:48:4e:c9:
         e0:5e:e6:7c:30:77:ed:27:6b:f0:ae:fc:cd:f5:28:19:ac:e9:
         cb:09:30:ac:8e:14:40:91:bf:26:a7:cc:76:82:3f:ca:22:ba:
         c2:1b:1a:6f:bb:1b:2d:1e:df:fb:68:82:a7:95:ab:da:64:56:
         02:1d:64:2e:9f:17:3e:32:fe:d1:3b:ef:31:b1:75:b4:94:45:
         59:84:9b:dc:db:66:0c:b8:55:09:83:2f:c4:03:80:75:3a:05:
         2f:e0:0a:4a:c7:e1:3d:16:31:b9:d9:91:f3:ba:8f:5a:f4:e9:
         4b:3c:c2:02:51:88:0f:3d:af:73:0d:6e:43:e1:7a:a3:5b:c6:
         a6:f6:da:6f:e4:75:98:00:cd:9f:78:3f:f9:cc:3f:ba:54:de:
         b1:2f:18:85:31:2c:bb:97:b7:91:0a:92:c0:1a:ef:33:80:c0:
         eb:b1:ee:05:75:1e:89:44:e8:2c:12:58:4e:1e:1c:53:9b:43:
         bc:e3:5e:5a:08:18:e1:73:60:9a:c5:0b:8b:f4:f6:32:05:eb:
         ae:9c:e6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 13:07:32 2025 by rpki-client