Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.mft
File:                     drjsczufmU1ahYxeVVF46K6Kou0.mft (raw, json)
Hash identifier:          YcwFdAfBNydjtuEzJCACqn+GCTnb94qBu1kCYPAIJJs=
Subject key identifier:   06:63:13:4E:7B:01:AA:2F:65:51:B5:B8:80:14:A4:5D:37:70:88:14
Authority key identifier: 76:B8:EC:73:3B:9F:99:4D:5A:85:8C:5E:55:51:78:E8:AE:8A:A2:ED
Certificate issuer:       /CN=76b8ec733b9f994d5a858c5e555178e8ae8aa2ed
Certificate serial:       0196BA121CD53802DD9288D0F896A88850CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/drjsczufmU1ahYxeVVF46K6Kou0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.mft
Manifest number:          0FFA
Signing time:             Sat 10 May 2025 12:01:11 +0000
Manifest this update:     Sat 10 May 2025 12:01:11 +0000
Manifest next update:     Sun 11 May 2025 12:01:11 +0000
Files and hashes:         1: S4GC9z8T1D4fMhH9pz6xtTzGJy8.roa (hash: oDc/JvXHI28ccd9ZG6/Yr60N+FV54r1lVJyg24riv30=)
                          2: drjsczufmU1ahYxeVVF46K6Kou0.crl (hash: iG3B4PZYC8WzylguBL0BkItZET3ZBi+SYeTSaNTcd7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/drjsczufmU1ahYxeVVF46K6Kou0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 12:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:12:1c:d5:38:02:dd:92:88:d0:f8:96:a8:88:50:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76b8ec733b9f994d5a858c5e555178e8ae8aa2ed
        Validity
            Not Before: May 10 12:01:11 2025 GMT
            Not After : May 11 12:01:11 2025 GMT
        Subject: CN=0663134e7b01aa2f6551b5b88014a45d37708814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6a:4b:d2:77:cf:75:fd:30:b2:a1:33:eb:bc:
                    ef:d8:31:87:d3:73:8c:64:7f:13:d8:05:5d:89:15:
                    2d:18:d2:df:8f:56:f7:2f:5c:f0:d8:47:90:e5:ca:
                    99:51:da:d1:96:2c:d2:ac:b7:0f:c2:1b:43:a2:19:
                    b9:78:f3:a4:98:fc:f5:35:f1:a9:90:bc:94:b8:86:
                    46:d9:88:01:cb:5a:f5:3f:96:80:f1:4b:92:f8:04:
                    c8:ad:23:9a:52:ca:2f:80:de:8d:d9:ce:c3:97:d4:
                    24:56:ad:c9:06:a5:b3:ac:bf:c8:8b:bf:bf:54:73:
                    7c:af:f6:3e:68:2d:c8:a0:a2:72:00:54:ec:e3:17:
                    f0:40:8b:c6:ea:2c:25:6d:9b:cd:b3:93:96:17:90:
                    36:1b:6b:1c:64:21:49:cc:26:7a:df:ca:94:14:47:
                    ba:c2:59:66:fb:2d:c5:7f:a3:cb:ac:9f:04:6c:17:
                    5d:b9:79:4e:73:09:04:67:29:65:80:1c:cd:df:1d:
                    5f:56:3d:52:f6:6e:75:14:0d:4d:54:d6:d1:91:64:
                    89:17:e1:07:5b:84:fb:70:8c:71:bf:1e:4e:0a:f5:
                    20:2c:ef:d3:bd:75:f6:d7:d6:bc:d8:f7:e6:54:ec:
                    8a:46:c1:5c:7f:99:fc:bc:bd:cf:78:7b:b8:78:ad:
                    14:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:63:13:4E:7B:01:AA:2F:65:51:B5:B8:80:14:A4:5D:37:70:88:14
            X509v3 Authority Key Identifier:
                keyid:76:B8:EC:73:3B:9F:99:4D:5A:85:8C:5E:55:51:78:E8:AE:8A:A2:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drjsczufmU1ahYxeVVF46K6Kou0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:fa:3e:70:6d:c0:a9:3a:6a:a2:90:c0:b2:c4:5a:43:99:b5:
         e5:49:4a:c5:62:1a:55:a5:23:87:fb:d1:51:b0:f3:67:31:04:
         0a:84:18:fb:8a:4f:d6:b8:1f:46:5c:7d:69:8a:50:df:5d:83:
         47:9e:a6:79:9c:f5:f2:e4:4d:da:9b:83:4c:ba:1f:40:1c:72:
         d6:e6:05:0e:cb:6d:97:f3:63:3b:13:a3:20:05:6c:10:78:d3:
         1e:34:68:49:19:ca:f0:86:4e:7b:3e:07:5a:da:14:2e:9a:5e:
         85:77:30:2e:04:df:db:d7:86:ed:73:35:52:3b:25:82:4a:8c:
         97:7b:c0:63:64:36:e6:8a:87:5c:1d:f8:b5:17:57:69:4e:1e:
         00:b5:f6:da:bc:5c:72:3d:ec:ce:2e:95:5b:55:5d:aa:95:d8:
         ba:66:00:fb:26:90:fe:54:e3:dc:a6:4a:e9:9f:9a:cd:0f:4b:
         e1:bc:ed:e1:23:ec:a3:7f:92:b4:70:c7:6d:9a:e2:dd:af:c7:
         dc:0f:25:e4:6d:31:4c:a1:6c:bd:73:98:d8:8c:8a:ea:ac:b7:
         d7:3d:db:ec:a7:a4:d4:f4:17:7f:82:63:a9:cc:53:6f:8f:8d:
         0f:46:94:ff:35:85:93:91:2d:67:25:9f:9a:43:7b:4d:16:d7:
         2d:cb:e2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:00:12 2025 by rpki-client