Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
File:                     kw4KO7COSsZzY-MLqDsHFjLQqkM.mft (raw, json)
Hash identifier:          2smk9ZxVcLtmbSG7y5uqn3nBaezWjvYIsa8OwviULME=
Subject key identifier:   B6:F7:1F:3F:C4:C5:8D:A9:1C:A5:E7:D2:65:DF:5F:B1:92:AC:58:02
Authority key identifier: 93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
Certificate issuer:       /CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Certificate serial:       0196CB3C138BE45F24282035A8A765795934
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
Manifest number:          0243
Signing time:             Tue 13 May 2025 20:00:33 +0000
Manifest this update:     Tue 13 May 2025 20:00:33 +0000
Manifest next update:     Wed 14 May 2025 20:00:33 +0000
Files and hashes:         1: kw4KO7COSsZzY-MLqDsHFjLQqkM.crl (hash: w51bRgf3TuDd1o3b+PTANfvvl70JnNYEz3nA8t1v4G0=)
                          2: xaq4DEF6a2KbAw0s5ehiRgdBeuQ.roa (hash: NrVb13nbYMUhAilB4rQP3yYP82eHLTMIedBxEXPs6iM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:3c:13:8b:e4:5f:24:28:20:35:a8:a7:65:79:59:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
        Validity
            Not Before: May 13 20:00:33 2025 GMT
            Not After : May 14 20:00:33 2025 GMT
        Subject: CN=b6f71f3fc4c58da91ca5e7d265df5fb192ac5802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3c:71:26:6c:ff:60:83:de:9c:ea:60:b5:2f:
                    95:04:58:cb:0c:53:68:60:2c:4e:6a:fa:f4:18:77:
                    c2:04:b4:f2:4f:82:53:bd:29:23:f5:0c:07:8b:02:
                    3a:80:5d:08:6c:6d:b2:43:82:79:09:e0:94:51:07:
                    f1:91:8a:6c:1a:c5:fd:c1:24:b6:0e:de:62:aa:76:
                    47:b6:bc:72:c1:8e:e3:a5:6b:65:43:e9:ab:44:c2:
                    da:76:02:3b:19:db:cc:21:d4:a8:19:a0:89:86:36:
                    7f:fb:29:59:11:b8:ac:ab:33:1f:f3:8a:12:d0:26:
                    a5:0f:14:a4:3e:a8:69:25:ae:53:72:30:fa:01:5d:
                    4c:df:d0:54:d8:35:ec:a4:8f:e2:27:9e:04:08:f0:
                    47:45:c3:32:3a:86:af:1f:f6:ed:a3:08:7a:c3:fa:
                    37:94:49:2c:c9:a1:97:fe:b0:2e:76:ae:ba:7b:01:
                    b4:b4:80:b5:d9:b1:0a:f2:6b:36:60:09:d4:c5:04:
                    3b:a1:ba:5a:79:0c:b2:52:03:0c:d5:40:96:01:e5:
                    28:e8:c0:2b:46:5d:47:04:fb:4c:ae:58:56:72:13:
                    fc:98:23:f0:33:51:3e:5d:39:ed:37:82:c0:bc:f9:
                    a2:04:33:b4:02:88:27:45:6b:60:54:b8:e8:12:b9:
                    80:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F7:1F:3F:C4:C5:8D:A9:1C:A5:E7:D2:65:DF:5F:B1:92:AC:58:02
            X509v3 Authority Key Identifier:
                keyid:93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ac:7c:c5:04:52:8f:48:4c:ff:c1:00:f8:ec:6e:4a:90:7f:
         6f:da:e6:0f:89:a5:1f:c2:ff:a5:af:53:26:fa:25:c3:88:ca:
         83:60:c5:a5:7a:08:9f:67:e6:85:4b:98:12:e8:5f:1c:90:e7:
         c5:6e:51:37:2f:04:50:f3:13:25:c3:c3:b7:92:72:0d:cf:44:
         c5:54:7e:28:53:5a:33:90:91:c8:79:1d:e7:27:8e:56:fd:3d:
         72:46:ba:2a:17:d0:15:8b:2c:de:e3:9f:2e:a3:5c:0f:b6:1b:
         e2:2f:1f:73:4e:36:0e:35:26:af:39:87:91:b1:15:0b:36:36:
         5f:83:6e:64:8a:49:d6:63:4e:21:c2:af:01:1a:70:46:5e:47:
         01:c9:ee:f5:b3:43:20:4a:32:ca:00:ac:87:91:60:c4:a4:86:
         94:4f:dd:09:e0:cb:bb:57:b0:17:49:d5:41:c0:db:50:8a:3d:
         e4:61:ac:2e:89:75:63:70:66:7a:5e:ea:ba:6b:6d:c5:db:52:
         ee:d7:f2:c4:63:35:53:d8:03:82:79:65:df:09:f6:b8:7b:ef:
         99:1a:60:74:39:89:62:82:0c:75:87:3d:0a:7c:b6:85:9b:8e:
         19:5e:cf:1b:00:a8:0b:80:bb:63:1f:8b:8b:04:b6:80:61:58:
         01:50:3f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:09:55 2025 by rpki-client