Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
File:                     1tk74RT4LQJYkWqXjKy_sVu1hAo.mft (raw, json)
Hash identifier:          kIxZw9wzJLQxr41kuFK1BaelebD5D55Yf4KdvZKOFgk=
Subject key identifier:   00:EB:50:69:1D:2E:29:5C:56:61:99:59:4F:00:C6:86:7B:69:F1:C0
Authority key identifier: D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
Certificate issuer:       /CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Certificate serial:       0196B6D9985141E25A7C8B49E5224F25DB3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
Manifest number:          0FA5
Signing time:             Fri 09 May 2025 21:00:35 +0000
Manifest this update:     Fri 09 May 2025 21:00:35 +0000
Manifest next update:     Sat 10 May 2025 21:00:35 +0000
Files and hashes:         1: 1tk74RT4LQJYkWqXjKy_sVu1hAo.crl (hash: F90xlKU0subko3Ryv1BrqkOhqSEzm3l+UAVn7XPjbRI=)
                          2: EjxEvyFrbjIutBBjgjTn5G6eW5c.roa (hash: dmAYBtW0oaeyULNatDjSeKws5fd+ZFknimkAFUD4KMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:d9:98:51:41:e2:5a:7c:8b:49:e5:22:4f:25:db:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d93be114f82d0258916a978cacbfb15bb5840a
        Validity
            Not Before: May  9 21:00:35 2025 GMT
            Not After : May 10 21:00:35 2025 GMT
        Subject: CN=00eb50691d2e295c566199594f00c6867b69f1c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:6c:b7:0c:04:b5:11:64:22:c1:3d:b3:9f:14:
                    8f:33:b4:ab:93:fc:ac:38:dd:0b:a9:77:6c:f3:13:
                    cb:1e:33:3f:cf:05:be:18:36:f9:69:d2:36:e0:8e:
                    e5:76:49:75:59:0d:2c:ad:1e:a9:ef:44:b5:0a:7a:
                    29:4a:34:9b:93:83:bc:5d:ee:ca:d1:1b:30:b5:01:
                    62:22:df:c9:8d:73:f8:76:0d:d3:b7:e5:f1:24:24:
                    ed:bf:45:7a:52:36:07:a2:30:0b:23:3f:69:be:e0:
                    cd:70:69:c0:ca:73:36:91:1f:c0:0e:b5:57:18:b9:
                    b8:57:95:f8:24:ef:58:f9:e0:34:1a:fb:fe:55:ae:
                    96:b0:7f:28:8a:98:8f:53:6d:84:a1:59:65:36:51:
                    1f:5c:82:1a:78:33:18:6c:c1:5a:e5:fb:6d:aa:13:
                    a5:14:0a:0e:4d:fd:f7:47:b3:58:33:98:d6:6e:1c:
                    ea:cb:69:67:66:15:db:7f:c5:ba:f1:54:9d:cb:e8:
                    85:cd:c5:2d:66:4b:ed:96:53:f6:0c:e4:8b:6f:fc:
                    1c:48:09:95:e2:a4:b0:fd:9e:cc:65:10:51:c5:37:
                    e3:e3:e0:c1:8a:ed:51:70:fd:fa:00:9a:e1:6a:73:
                    6e:bb:91:8a:03:5d:fc:fe:22:93:12:a5:22:31:47:
                    a4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:EB:50:69:1D:2E:29:5C:56:61:99:59:4F:00:C6:86:7B:69:F1:C0
            X509v3 Authority Key Identifier:
                keyid:D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:9a:6a:38:a2:1d:ca:bd:1e:9b:74:19:d9:95:70:0d:24:13:
         43:fe:a8:09:fc:4a:ba:52:03:bc:3d:52:24:9b:d1:04:11:24:
         fe:d6:a9:e3:a7:5b:ae:84:72:56:bd:2b:bb:63:63:45:13:e7:
         0b:78:43:72:fa:88:4b:49:be:df:33:e8:77:57:e7:69:05:71:
         d4:ae:87:0e:41:12:fb:a8:d0:ce:e2:37:d7:c8:92:0c:cc:46:
         fb:9e:fa:be:48:57:45:20:90:33:19:36:fd:2c:33:d9:84:58:
         b6:8a:c1:0d:1b:06:28:31:78:59:ac:27:19:c7:bc:19:89:08:
         33:2a:15:2a:5a:75:20:74:4a:44:62:e3:6a:19:fb:6c:9f:e9:
         f5:4a:b5:09:74:fc:06:c2:d0:17:aa:92:59:a7:cd:cc:70:62:
         65:32:c6:a5:80:38:33:11:31:ed:47:d1:7d:17:88:45:a9:9f:
         bc:6f:51:c1:4f:96:d1:cf:9d:7e:36:a7:fb:e0:50:41:53:53:
         db:67:8b:e6:8e:ab:38:52:05:db:fd:24:c5:ed:e7:3d:40:76:
         77:a6:8a:f1:15:13:aa:51:35:3c:a3:f8:11:1e:a7:4e:9d:75:
         4a:cf:b5:07:4d:a7:55:30:79:27:2f:62:da:84:51:8f:d3:6e:
         1d:38:a5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:24:15 2025 by rpki-client