Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
File:                     d6U9LpdwTb6oMaZEAHKQTukacbA.mft (raw, json)
Hash identifier:          SKezwCgHMqHpycMLNkqX25G8FmRr8ieJ+0Ehq92C4Rw=
Subject key identifier:   14:89:30:A4:8E:B0:8A:C3:85:B0:28:99:09:55:86:D8:DD:24:8F:77
Authority key identifier: 77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0
Certificate issuer:       /CN=77a53d2e97704dbea831a6440072904ee91a71b0
Certificate serial:       0196C5A7C198B6848545C7F2CCD42C9A0F1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
Manifest number:          1215
Signing time:             Mon 12 May 2025 18:00:27 +0000
Manifest this update:     Mon 12 May 2025 18:00:27 +0000
Manifest next update:     Tue 13 May 2025 18:00:27 +0000
Files and hashes:         1: 8YLxHIrqEOpYdEsGGRi0e0TkaqY.roa (hash: ZSlp7CySsW2GetrGVI9UQkRD/3974H3lwSYsXYBiMcM=)
                          2: d6U9LpdwTb6oMaZEAHKQTukacbA.crl (hash: ex+mTU/Dl5gvVHX8bfNJ+qvxz7Z5Phw/P5aeWl7cXVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:a7:c1:98:b6:84:85:45:c7:f2:cc:d4:2c:9a:0f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a53d2e97704dbea831a6440072904ee91a71b0
        Validity
            Not Before: May 12 18:00:27 2025 GMT
            Not After : May 13 18:00:27 2025 GMT
        Subject: CN=148930a48eb08ac385b02899095586d8dd248f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:16:77:8f:b5:48:fa:f4:80:b3:e9:62:36:d1:
                    d9:ac:14:11:7b:43:a4:dc:a1:2b:50:32:50:75:7f:
                    18:a6:e4:bd:54:29:be:60:53:7f:17:d3:e5:5f:9b:
                    48:5a:e8:73:c2:af:20:4c:37:5d:0a:df:ae:05:2f:
                    af:e3:b4:c6:39:56:6b:9a:a2:6a:0a:d9:8a:76:a5:
                    5f:b6:5d:8d:c6:bb:f9:3d:18:41:98:16:57:7f:d7:
                    71:9b:4c:02:9f:2c:e4:62:99:62:7a:06:70:50:85:
                    82:d1:55:98:06:ed:c2:f0:02:82:e8:4b:94:6b:63:
                    6e:53:d8:e1:27:f2:ea:79:83:50:07:fb:26:3e:70:
                    e1:55:c5:fa:8d:09:3c:a0:a2:57:2b:2c:aa:26:10:
                    a8:a4:e2:65:d2:1b:08:8b:83:39:8d:d5:41:6e:9f:
                    a8:6e:10:a9:56:bb:88:b8:c9:c9:51:5f:f6:6e:6c:
                    62:79:0d:fa:da:43:65:9b:2e:71:94:39:d7:c2:b9:
                    78:f5:c0:f4:ba:93:fe:7c:f5:c3:d4:0b:c1:ea:f7:
                    b9:39:0c:4f:01:61:18:e8:90:ae:74:1b:a9:2c:37:
                    43:ee:61:0d:a7:2d:86:26:73:06:ce:32:40:6d:d9:
                    fd:89:44:f0:91:51:1e:91:4b:c9:b8:41:ad:12:9d:
                    16:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:89:30:A4:8E:B0:8A:C3:85:B0:28:99:09:55:86:D8:DD:24:8F:77
            X509v3 Authority Key Identifier:
                keyid:77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ae:29:e5:da:41:02:d9:ba:c8:16:e9:72:7b:af:0e:25:ea:
         47:21:ee:ae:50:a8:1e:d0:17:45:f1:0c:b5:fb:0f:37:7c:cc:
         6e:87:f1:50:0f:06:0a:77:81:fd:32:b1:aa:1d:a8:9d:4f:2e:
         ea:0c:65:7a:00:74:5b:00:aa:1c:82:a0:d6:56:87:2b:df:d9:
         28:dd:9b:37:42:ec:cb:b8:bd:14:c2:58:e3:48:49:f2:15:0d:
         a6:66:99:f8:ce:6b:66:e7:76:27:eb:83:44:50:7d:7d:26:39:
         47:6a:1f:ca:da:dc:70:1f:f3:48:78:7d:4a:b8:32:e1:c5:12:
         2c:9f:d7:3e:54:71:18:17:a4:55:fe:65:7b:4b:b4:11:6c:62:
         65:6a:1e:a8:4d:0d:b1:b6:b0:42:8f:b9:23:da:de:0f:d3:c2:
         76:4c:9e:98:99:41:45:a2:29:af:e6:1c:0c:29:16:16:34:1c:
         3b:2b:64:96:7c:c8:76:7c:09:ae:5a:a2:d6:9e:82:74:c4:62:
         90:9b:bb:22:46:f6:3a:0f:58:d5:52:ca:6b:b1:61:47:e9:5b:
         6f:17:7c:28:53:e1:33:71:9d:4b:e6:e0:41:21:4d:db:9c:72:
         9d:b1:3a:78:a9:77:9e:df:8e:9a:05:fb:8c:ca:d2:91:d6:c2:
         85:d9:97:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:48:44 2025 by rpki-client