Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
File:                     a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft (raw, json)
Hash identifier:          bkujFGxGKfama3ZHpXPjFmpd/3utMBvRvPAsXSyKOKw=
Subject key identifier:   E6:0B:30:35:0F:1A:01:7B:FA:B0:1C:B6:32:A2:CA:92:D1:6A:52:39
Authority key identifier: 6B:4A:A1:E3:D8:CF:43:A3:6B:41:BB:B2:5D:C8:FA:2B:A7:1C:35:84
Certificate issuer:       /CN=6b4aa1e3d8cf43a36b41bbb25dc8fa2ba71c3584
Certificate serial:       0196DB8AB778B8B45AFADF248BAE9AECB8DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
Manifest number:          1545
Signing time:             Sat 17 May 2025 00:00:23 +0000
Manifest this update:     Sat 17 May 2025 00:00:23 +0000
Manifest next update:     Sun 18 May 2025 00:00:23 +0000
Files and hashes:         1: a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl (hash: OvwD+uOqhZ6wAux9cYT/su1tUt4W0Wasv/o30WFtjPU=)
                          2: iOsVPSzZeKu_GpAxh4HElCaSMFU.roa (hash: AzLs0VLFJkqJP3rzT9WbseTSbDWK38sW9aaDyk0oNy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 May 2025 00:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:db:8a:b7:78:b8:b4:5a:fa:df:24:8b:ae:9a:ec:b8:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4aa1e3d8cf43a36b41bbb25dc8fa2ba71c3584
        Validity
            Not Before: May 17 00:00:23 2025 GMT
            Not After : May 18 00:00:23 2025 GMT
        Subject: CN=e60b30350f1a017bfab01cb632a2ca92d16a5239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:76:b2:32:d4:15:74:14:33:3d:8d:46:8f:2a:
                    fd:1d:66:42:61:c0:96:24:a8:ed:d9:6e:be:ac:27:
                    1d:08:d3:f7:19:ff:95:ba:5a:27:53:16:ca:2c:8e:
                    5a:a9:17:eb:8a:d5:b0:25:03:22:d2:20:16:bd:aa:
                    b4:e4:95:72:ba:52:c1:86:e5:c7:c0:25:48:41:91:
                    82:b9:14:89:78:15:0b:17:15:2f:ed:73:1f:5f:21:
                    ed:a6:17:be:fe:0b:1f:45:8b:ac:56:5c:2a:82:0d:
                    e6:11:51:26:38:9b:fb:51:31:8e:1c:b9:94:4e:cc:
                    66:49:dc:35:df:04:04:b3:e3:f7:7e:dd:12:33:b2:
                    2b:60:de:a0:4c:e4:82:0b:10:59:2f:c7:16:d3:ce:
                    87:41:e5:72:c2:fa:e1:fc:d2:b2:d7:ea:f7:91:4c:
                    11:c5:19:a8:cc:4e:1c:cc:85:9f:48:88:57:b9:66:
                    dd:ae:0f:f0:83:94:60:b5:c7:3d:0f:89:f8:54:e4:
                    10:0d:94:13:34:2c:f5:cb:14:96:df:3f:49:e5:f1:
                    33:0f:65:43:2f:93:eb:79:e1:32:2c:81:fc:29:5b:
                    ca:9c:1e:40:0d:f3:fc:b3:05:a5:f0:5a:ec:d4:05:
                    98:ae:9f:d3:49:d6:4a:f1:76:45:e3:0b:b6:82:51:
                    5f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0B:30:35:0F:1A:01:7B:FA:B0:1C:B6:32:A2:CA:92:D1:6A:52:39
            X509v3 Authority Key Identifier:
                keyid:6B:4A:A1:E3:D8:CF:43:A3:6B:41:BB:B2:5D:C8:FA:2B:A7:1C:35:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:6d:73:8a:3b:34:0a:a1:05:00:01:ce:8a:38:0c:4b:8c:53:
         1c:c1:77:b5:d8:8c:42:5a:ab:9b:b0:c9:a9:1c:ca:8d:b8:b1:
         71:a1:24:ca:ff:b1:a1:be:40:a7:3f:d7:af:88:cb:69:42:37:
         49:04:88:e0:4d:84:07:8c:47:58:2a:9a:6c:16:76:76:1a:43:
         bd:98:8d:dd:0b:58:08:e3:de:d0:14:e6:be:9a:ea:26:1b:09:
         72:4c:c3:a2:42:55:e3:5e:fe:07:01:0d:4f:f0:d0:9d:99:9f:
         de:c4:e3:0d:82:35:03:0a:ca:1f:98:a1:91:74:cb:9c:6a:c2:
         f8:ed:6e:ec:5c:71:32:e7:e9:fd:56:c5:2a:4e:33:0d:18:55:
         8c:26:f2:7d:da:79:67:f2:be:e9:a1:35:2a:52:3c:cd:6a:46:
         4d:57:ec:b0:7f:a7:a5:19:4e:e4:4f:83:b3:38:11:0e:1e:45:
         65:95:a0:d2:8d:fc:7a:23:71:a8:b9:5d:5e:ac:54:00:1e:4f:
         1e:8b:d8:c8:11:71:de:0b:6f:04:31:34:8a:10:d9:82:ea:ab:
         6c:ea:74:a7:10:65:50:9e:1d:b9:d9:68:10:61:a8:ac:81:13:
         b9:19:07:32:a4:d5:80:a5:20:31:dd:4e:e7:08:ef:8e:82:b9:
         90:f5:3f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:30:58 2025 by rpki-client