Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
File:                     qoj641tmtN4uQcpe4He17wtKtkk.mft (raw, json)
Hash identifier:          BnV8ULof1Q21G4qP0LxcHGMdBGQUFfurtDztEonia/o=
Subject key identifier:   B0:8A:B3:35:C1:47:FA:04:75:2B:92:41:A2:F1:3D:30:63:FB:D6:18
Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Certificate issuer:       /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Certificate serial:       0196BF6F47AF537B835779BFB3C98B7A1EB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
Manifest number:          149C
Signing time:             Sun 11 May 2025 13:01:03 +0000
Manifest this update:     Sun 11 May 2025 13:01:03 +0000
Manifest next update:     Mon 12 May 2025 13:01:03 +0000
Files and hashes:         1: oS0baXfZNGyY1D73J2ZM4dbyUEc.roa (hash: Etkc7DGAN6PIaAjm/aO1aFavjNa8wspYkBLe0PvWnjU=)
                          2: qoj641tmtN4uQcpe4He17wtKtkk.crl (hash: WoSvoEmYWUpDu8iF8df0AHKdUqra+hbfA/dsSa7f5b8=)
                          3: r-zsasbUjJEaU71e8kbXi99TukU.roa (hash: gv3XffgL881eMS9I6xI/He9cs/3EXg91NLNFK1oWx0g=)
                          4: zeGJY-nsOInvvd3T0IdWJNf1k28.roa (hash: p/aKgF7SzmiRfhNkcpLsPCyw0fGJ04jvtIbzFNx9GZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:6f:47:af:53:7b:83:57:79:bf:b3:c9:8b:7a:1e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
        Validity
            Not Before: May 11 13:01:03 2025 GMT
            Not After : May 12 13:01:03 2025 GMT
        Subject: CN=b08ab335c147fa04752b9241a2f13d3063fbd618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:35:93:7e:98:f9:99:b9:7e:dc:20:e4:c5:
                    9d:08:a0:31:da:22:5c:dd:f8:d6:85:c6:e1:99:47:
                    ba:44:df:b9:a2:46:54:41:93:35:a6:01:01:f6:62:
                    9f:ab:b4:b7:15:9a:ce:99:48:1c:36:f3:b5:10:85:
                    9d:42:b1:b7:a4:0a:71:70:46:db:c2:56:54:ec:56:
                    83:c2:b7:26:90:8f:e9:33:f4:b0:65:d2:5e:3d:5e:
                    6c:9c:29:3e:fa:d5:14:7a:88:9d:30:71:0d:06:9c:
                    90:74:69:9a:8c:ca:a7:7a:10:c5:0a:5a:d5:5d:19:
                    9e:81:c4:dd:58:27:fa:a9:2d:ca:70:56:6a:86:02:
                    39:1b:2a:a4:be:a1:60:8c:d7:ae:26:3b:d2:e2:fc:
                    e6:fe:e5:70:e8:3d:c0:1d:80:82:b8:9d:ba:65:76:
                    bf:d2:a5:a5:a8:3a:f7:27:a9:68:a8:c2:32:d6:8c:
                    30:6d:8e:47:65:dd:02:1e:90:27:fc:44:96:02:ae:
                    73:e2:a1:e6:17:66:db:c7:31:75:6a:a8:ff:eb:f6:
                    d4:2a:8c:75:15:00:1b:3a:54:59:01:95:7d:d3:0a:
                    a9:40:97:c0:64:12:e0:24:49:b7:0b:73:8c:13:46:
                    87:cb:58:51:13:60:de:a5:30:c2:59:95:5e:9d:37:
                    21:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8A:B3:35:C1:47:FA:04:75:2B:92:41:A2:F1:3D:30:63:FB:D6:18
            X509v3 Authority Key Identifier:
                keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:27:b1:57:1c:f9:74:1b:47:02:ab:d7:7b:2f:bb:d8:3d:89:
         d1:f0:e0:60:cf:c3:7a:5d:b9:56:af:66:18:5c:47:e5:e5:5c:
         2f:19:0b:4b:9f:f0:a8:89:43:a5:b8:3f:d7:78:ed:9a:b2:8c:
         73:ed:be:60:8b:c4:a0:73:e1:9f:19:c2:ab:ef:35:e4:06:ab:
         f8:71:61:b3:3e:69:21:05:8c:52:6a:8c:5e:d2:bb:2f:54:2b:
         61:80:51:1d:9a:26:c8:7e:20:80:84:72:34:88:43:f9:32:98:
         87:78:27:b8:3a:bc:4b:b9:15:44:65:e2:e4:a1:bd:cf:33:59:
         fa:3f:34:27:6f:39:98:7c:9b:31:a3:a4:48:8b:78:3f:8e:90:
         d1:4b:96:15:c9:fa:7e:d1:1f:c9:07:2b:81:f9:03:33:1a:de:
         be:3a:aa:0b:8c:f9:8f:0f:f3:fe:91:c6:d4:3d:89:fe:f1:16:
         7f:11:3c:1d:1c:40:75:48:63:d3:dd:48:89:2d:95:95:fd:3e:
         11:ed:ac:9c:25:9f:dd:72:71:58:b6:c3:9d:d9:e4:f7:c3:f7:
         9b:ed:8b:73:30:2b:cf:cd:e5:61:36:e5:e1:59:61:30:d4:fc:
         59:3f:cc:96:dd:20:6d:d2:5f:8f:16:c0:c2:9c:a0:91:01:5a:
         24:14:b4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:46:06 2025 by rpki-client