Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
File:                     1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft (raw, json)
Hash identifier:          w6uXY6SAhJidpK/qrmG7fvPApuXVltEZfAdTCvpNyvo=
Subject key identifier:   A0:40:6D:5E:5D:4F:3F:ED:1A:6D:9F:3A:94:53:16:4A:21:00:D1:B0
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Certificate issuer:       /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial:       0196AC8CA21CB83B905804F0D80E781F1257
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
Manifest number:          0319
Signing time:             Wed 07 May 2025 21:00:19 +0000
Manifest this update:     Wed 07 May 2025 21:00:19 +0000
Manifest next update:     Thu 08 May 2025 21:00:19 +0000
Files and hashes:         1: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl (hash: +o4Wg1yeWJ/IT5oDkzAI7/y0u02cvGh0L42/wsBAKB0=)
                          2: OWBphSnGzM3NfjUoWcPjDVRSYgc.roa (hash: Z7ei4v1I8GPTdYYpZ1qHi9JiBDA34PMAtoRsAnkH2B0=)
                          3: mcI_iz_jLMF0m2ytiShNIW2Y0XI.roa (hash: MlJtJ+9IYVgqHxEydx7ywPk31bzQHuAZBNNJFqPMbXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:8c:a2:1c:b8:3b:90:58:04:f0:d8:0e:78:1f:12:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
        Validity
            Not Before: May  7 21:00:19 2025 GMT
            Not After : May  8 21:00:19 2025 GMT
        Subject: CN=a0406d5e5d4f3fed1a6d9f3a9453164a2100d1b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fd:ce:7e:03:c2:c8:d4:5b:47:0d:ae:31:83:
                    1a:83:87:db:10:2d:9f:3b:b8:81:f6:71:18:93:f1:
                    eb:1a:33:ae:22:de:0c:76:3f:44:fb:8a:95:b1:bf:
                    40:71:f3:0b:97:d8:c3:99:fd:fa:bf:aa:1b:c0:44:
                    68:88:51:a3:aa:70:6a:56:2a:77:bc:f2:25:c7:04:
                    a8:e1:6a:69:8d:ef:cd:8e:be:9a:1a:c9:61:94:05:
                    75:7d:22:de:3c:5e:a3:e5:b3:cd:cc:1b:72:b1:f6:
                    f0:e7:c1:96:91:8b:c0:8e:68:78:f1:5c:74:96:9c:
                    63:05:86:0c:a4:bc:1d:b7:d7:6b:1c:e1:a0:e2:bc:
                    67:7a:67:f3:3e:c6:5b:f5:d4:b0:6a:ff:40:8b:d7:
                    40:f1:e0:3c:d4:cf:e4:e5:56:70:6c:a3:a0:4b:1c:
                    4d:f7:36:4b:02:17:77:34:8b:c8:56:4d:9f:01:b6:
                    c0:a7:1d:f0:ce:ab:0d:59:76:d7:21:d6:e5:e3:f5:
                    ed:da:15:e4:e9:b2:61:95:66:f1:54:56:cf:19:59:
                    8c:81:66:0c:c8:66:23:c0:4d:4f:c6:05:31:00:2d:
                    3f:a1:e8:58:0d:4a:b1:39:fc:33:71:4e:8a:c9:8d:
                    55:dd:4a:95:13:02:ad:c6:e7:77:05:3a:8f:d6:2f:
                    b4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:40:6D:5E:5D:4F:3F:ED:1A:6D:9F:3A:94:53:16:4A:21:00:D1:B0
            X509v3 Authority Key Identifier:
                keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c1:dc:4c:fe:17:b8:57:91:e6:4b:01:7e:ca:1c:19:78:3b:
         29:02:cc:66:d7:aa:20:2d:a8:ff:35:d6:78:58:c1:3f:ac:65:
         f2:05:4c:18:53:7e:a7:38:a7:00:e7:47:bc:de:09:6d:2b:53:
         5c:5a:fd:f5:fb:a0:b3:d6:93:9e:f9:79:04:fd:a4:49:89:6e:
         07:0a:9d:d2:21:18:cf:54:44:6b:97:e0:5b:fb:28:79:4d:cb:
         d0:37:3c:ca:26:b3:9f:d8:39:ce:2a:8f:57:3f:87:5a:a4:6c:
         e4:71:d3:4c:b2:e3:00:17:2c:16:0e:06:63:4d:4b:64:3b:94:
         62:95:0b:40:56:f8:ab:88:2f:c9:c7:af:4e:ea:7c:28:82:f9:
         34:b5:76:1f:29:56:23:73:6b:64:ac:aa:80:48:dd:c5:c3:25:
         a4:4a:41:fb:eb:c9:f9:00:94:4b:f5:7f:02:ad:2d:67:67:b9:
         be:93:61:f3:fb:10:c6:9d:3c:00:d2:7e:7f:c9:f2:d1:34:66:
         04:c1:4b:a1:23:a1:8c:7c:0a:fe:ab:65:09:e8:a1:90:de:5d:
         fe:82:01:c1:72:66:87:78:08:34:d6:8e:a0:e2:b9:dc:44:0c:
         8c:cd:6c:da:41:2b:9f:47:15:61:ec:2f:0c:9a:30:b5:34:3b:
         ef:a6:a1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:54:52 2025 by rpki-client