Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
File:                     q0ZoYAiowQHoTqh4MYrljrcc7II.mft (raw, json)
Hash identifier:          uRDliT3OwX9nSdub38oWcL2BDJMKqTHKJhh7rPt33qE=
Subject key identifier:   68:A8:10:1F:80:D8:18:88:96:19:D3:00:88:71:71:67:41:40:11:93
Authority key identifier: AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
Certificate issuer:       /CN=ab46686008a8c101e84ea878318ae58eb71cec82
Certificate serial:       0196AB0C61561DF0A28EE45EF2F40FC0FD73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
Manifest number:          0C0B
Signing time:             Wed 07 May 2025 14:00:37 +0000
Manifest this update:     Wed 07 May 2025 14:00:37 +0000
Manifest next update:     Thu 08 May 2025 14:00:37 +0000
Files and hashes:         1: EMySEwRrF4bq2LUNRJSbJLGHINA.roa (hash: DrdEgmoEeO2eKUnBVDonWL4YHyVw8zsXK3sYKFvyya8=)
                          2: q0ZoYAiowQHoTqh4MYrljrcc7II.crl (hash: Pu/OFnzTPN3RGLD9uty9FbOi2CYqg4ECGNyhXJ4uAbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:0c:61:56:1d:f0:a2:8e:e4:5e:f2:f4:0f:c0:fd:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab46686008a8c101e84ea878318ae58eb71cec82
        Validity
            Not Before: May  7 14:00:37 2025 GMT
            Not After : May  8 14:00:37 2025 GMT
        Subject: CN=68a8101f80d818889619d3008871716741401193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6c:23:a7:26:6f:a5:5e:60:1e:cf:c1:bc:d9:
                    47:3c:95:e1:92:3f:ec:38:b3:3c:8a:b3:71:9f:2b:
                    2d:1b:1a:25:b6:0c:a4:85:3b:e0:d8:0a:62:7e:ba:
                    49:61:d5:70:fd:37:b3:3e:01:cc:d9:dd:ae:0a:22:
                    2c:fd:56:18:2c:44:5c:8e:73:35:a1:3d:da:a3:d0:
                    b0:69:53:e9:ab:45:c5:f4:53:24:22:92:73:3e:40:
                    9b:bc:fe:0f:38:6e:3b:ff:34:18:8d:ee:d9:9d:f3:
                    81:4a:b6:c0:d4:e3:79:7b:8a:ea:e3:a7:00:7f:c6:
                    73:ee:54:cb:95:14:a5:c1:73:42:25:5d:46:86:57:
                    d4:c9:f9:eb:14:01:00:05:cb:05:bb:7d:3b:4e:1d:
                    ee:37:24:11:b8:b7:05:6f:ce:62:66:f2:b6:5e:15:
                    ea:18:cd:96:a5:0e:dc:74:a1:65:4d:3b:19:42:2e:
                    b9:8b:f3:cc:04:c5:35:36:8d:ec:ac:24:36:9b:71:
                    92:07:3e:e9:54:a0:c5:2e:61:d3:43:9a:54:e9:3b:
                    d4:ef:09:40:ed:a2:99:dd:4e:ff:f3:c4:3b:79:76:
                    b2:5f:1f:fe:c1:dd:f5:af:55:fd:21:07:48:31:ef:
                    ef:e7:42:fb:13:41:4a:f6:d9:41:01:0c:1d:51:50:
                    b9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A8:10:1F:80:D8:18:88:96:19:D3:00:88:71:71:67:41:40:11:93
            X509v3 Authority Key Identifier:
                keyid:AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:5d:8e:49:07:12:d4:36:ba:9d:31:30:0b:f5:11:dc:18:8c:
         2a:d1:e4:dd:0b:14:09:39:16:a0:33:10:fb:8c:d7:93:81:e5:
         e4:74:fa:c8:ff:3d:c7:89:59:6f:9d:60:7a:40:13:d8:b0:9f:
         cc:9a:14:a8:28:a4:ac:1d:ca:2d:86:ec:9d:4c:18:bd:2c:5a:
         f8:a8:3d:1e:5c:9c:6e:1b:a2:62:aa:be:f9:a3:36:af:99:8f:
         79:63:f9:c3:de:d4:49:4e:d8:58:41:bf:7d:f4:66:31:bd:07:
         6e:ee:9b:2c:a5:46:a7:5d:88:1a:9a:38:20:cc:10:85:00:c9:
         7e:d7:33:4c:84:30:f3:f8:28:4e:2c:6f:5f:d3:7d:69:7d:9a:
         76:f2:b6:8f:07:0b:b7:dc:8a:6a:0c:c0:b7:91:e6:69:3c:6c:
         2c:3c:0f:a4:b7:61:2b:96:bc:c1:1c:6f:dd:5a:a4:b3:97:f5:
         80:82:65:a2:74:b7:1a:7d:bf:5c:11:d8:e2:d4:35:ff:8a:b7:
         fd:b8:a7:6e:b7:13:91:fb:eb:5a:bd:41:7a:16:16:44:77:83:
         4b:09:b8:2f:8c:6d:66:1c:bc:43:18:96:44:95:56:64:c8:58:
         5b:27:26:9e:60:62:41:eb:7c:ce:2f:c0:66:81:9a:ab:c4:40:
         71:eb:32:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:51:27 2025 by rpki-client