Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
File:                     Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft (raw, json)
Hash identifier:          1vyPkAuRm6eFy3YWhJq5TM6kCQI+mXRXg4U+s17KVMI=
Subject key identifier:   DF:4E:98:F9:0C:20:E8:73:D4:33:71:3D:A1:48:A8:8D:75:82:5D:E4
Authority key identifier: 63:C1:B9:FF:E9:86:72:BF:62:F4:87:F4:7D:AF:EA:30:F5:BE:F0:9C
Certificate issuer:       /CN=63c1b9ffe98672bf62f487f47dafea30f5bef09c
Certificate serial:       0196BC0032E7F0AB77CE2AD0248376142EEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
Manifest number:          14C5
Signing time:             Sat 10 May 2025 21:00:51 +0000
Manifest this update:     Sat 10 May 2025 21:00:51 +0000
Manifest next update:     Sun 11 May 2025 21:00:51 +0000
Files and hashes:         1: Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl (hash: m/tHAEPbgs295hf7ptgb6OauUUcPEx8A0aqDYTIB+aA=)
                          2: lk2DKx6tMZ4QVeIQ4n9LUxby2mQ.roa (hash: g/j+F0OdRQ6yoH4DQlzMOgxK5K/3yYMtnzs95xrt8uU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:00:32:e7:f0:ab:77:ce:2a:d0:24:83:76:14:2e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63c1b9ffe98672bf62f487f47dafea30f5bef09c
        Validity
            Not Before: May 10 21:00:51 2025 GMT
            Not After : May 11 21:00:51 2025 GMT
        Subject: CN=df4e98f90c20e873d433713da148a88d75825de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bc:56:a2:48:45:a3:8b:65:79:ee:32:3f:1a:
                    bb:41:67:53:06:51:64:0a:6e:d5:17:89:66:07:d7:
                    1e:19:91:b1:a3:6c:a7:76:f1:13:51:89:0d:c8:5c:
                    0f:3d:bd:2d:aa:cf:a6:bc:e1:b2:1a:81:a0:ca:38:
                    c8:ee:b8:81:f6:e5:b6:7c:61:7a:d7:f5:7b:31:1b:
                    21:9a:54:60:b8:5b:d3:c5:0b:a1:de:0c:b5:e8:56:
                    92:60:e9:80:75:7e:05:79:71:c7:cf:17:2a:ae:2a:
                    b5:cb:c5:ef:a3:b1:79:60:77:05:10:f9:a0:1a:cd:
                    3e:81:dc:a1:2f:a0:a1:c5:d5:d1:83:f9:80:62:4f:
                    29:47:df:66:52:a8:e6:3c:01:af:7d:ab:3e:49:24:
                    ce:ca:2a:cf:9d:96:1b:25:9b:f9:c5:d0:bb:4e:b2:
                    f5:3b:b8:86:2b:9a:1e:c1:b8:b1:fb:c6:66:d9:3c:
                    ae:99:bd:0c:96:b7:ea:3f:40:90:68:2b:09:e8:1a:
                    1f:aa:68:69:c8:8e:ea:48:0b:d5:52:9e:79:f5:7c:
                    f2:08:2d:28:f5:01:ca:66:ce:9b:33:d9:dd:07:32:
                    0f:12:59:cd:19:59:8a:ed:7b:1e:05:9f:0c:03:19:
                    c8:04:b7:d7:e4:b8:8a:ea:f5:47:16:08:f5:12:ab:
                    88:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4E:98:F9:0C:20:E8:73:D4:33:71:3D:A1:48:A8:8D:75:82:5D:E4
            X509v3 Authority Key Identifier:
                keyid:63:C1:B9:FF:E9:86:72:BF:62:F4:87:F4:7D:AF:EA:30:F5:BE:F0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b5:75:74:3f:54:bc:0a:ca:17:dd:a7:6a:33:42:5f:55:39:
         e6:ab:6c:a8:fe:03:5c:85:69:5c:e4:93:2d:54:97:c9:25:c2:
         00:8c:c1:ef:ae:a7:39:31:41:87:ef:8e:f5:d7:53:f2:8d:20:
         c7:9a:f1:81:5a:df:59:af:f4:45:9b:ad:f9:11:7b:fd:32:97:
         f3:b7:7d:05:78:f6:a1:96:b3:61:71:cc:6d:ab:89:ed:25:51:
         f6:c6:fc:d6:6d:2e:87:3d:86:bf:39:5b:f7:be:29:f1:9d:67:
         8f:22:e9:44:8e:d7:97:73:26:7f:5e:68:da:57:a0:c8:b5:3b:
         05:3b:85:55:af:f6:8a:ef:6e:b1:66:58:22:ec:61:30:a9:7c:
         2d:ae:a0:09:50:06:0d:37:c6:fd:b6:d8:42:83:1d:61:a9:3b:
         b7:69:09:44:b0:50:73:a9:82:80:57:2a:36:6e:9b:7d:09:82:
         c8:f5:2d:57:c9:d7:19:60:3f:e3:e8:c8:66:b7:fd:40:d2:60:
         2c:f6:1c:2a:c2:63:c9:da:0f:9a:28:8e:0e:15:12:b2:a1:e8:
         ba:e8:f0:d2:6f:49:a0:33:c4:ba:23:18:86:15:45:c0:8e:03:
         2d:75:9d:d9:9f:39:36:4f:30:c1:cc:32:04:8c:a7:a6:09:6e:
         8d:86:be:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:51:59 2025 by rpki-client