Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
File:                     fF27C541OBhfPm1uPH2i-JIsjOA.mft (raw, json)
Hash identifier:          +Cyk83KcmYYfkdo5N+wxOd7P4ANcDUgcPTYBTeK2Gc4=
Subject key identifier:   2A:B3:CC:10:86:CE:DB:2A:F2:91:5A:32:4F:AA:52:89:E8:A2:E5:3A
Authority key identifier: 7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0
Certificate issuer:       /CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
Certificate serial:       0196B10E5387B38821076EFDC084BB399ADD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
Manifest number:          06A0
Signing time:             Thu 08 May 2025 18:00:28 +0000
Manifest this update:     Thu 08 May 2025 18:00:28 +0000
Manifest next update:     Fri 09 May 2025 18:00:28 +0000
Files and hashes:         1: fF27C541OBhfPm1uPH2i-JIsjOA.crl (hash: T5ep7jFij3uIOIhkDxLJFbuiofacbNRF5B7xhZvPlvU=)
                          2: q-UjelWVJEcPadl31G47nebbXb8.roa (hash: 65aJhppjeAJp5scwXUtr/SDly2MObd0FzMz5wed2pGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:0e:53:87:b3:88:21:07:6e:fd:c0:84:bb:39:9a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
        Validity
            Not Before: May  8 18:00:28 2025 GMT
            Not After : May  9 18:00:28 2025 GMT
        Subject: CN=2ab3cc1086cedb2af2915a324faa5289e8a2e53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a1:b9:d1:39:fa:f1:7b:b5:43:ae:75:a7:62:
                    2a:e4:e9:bd:8c:74:01:d7:78:f3:63:8c:02:b8:67:
                    fd:21:30:ea:51:c3:b4:a9:d1:3a:2c:17:1e:fd:51:
                    92:f0:e1:f8:18:19:ea:f0:73:bb:69:ae:84:74:35:
                    76:fc:06:24:e9:53:e6:9a:bf:0c:13:01:56:62:bf:
                    9f:fd:d8:04:ce:41:3a:c5:99:57:a5:60:a4:ed:22:
                    e8:f2:4d:2a:49:98:96:fa:a4:f2:6b:30:28:e8:50:
                    17:5b:4e:ce:96:34:b5:99:40:99:f8:05:c6:6f:21:
                    57:9f:3b:be:9f:18:06:6a:a1:ba:95:ff:de:df:03:
                    e6:ba:83:a4:1b:db:7f:ed:34:82:ba:ca:6e:fb:32:
                    26:d6:a4:29:90:60:a5:c7:d2:42:7b:19:9c:82:e0:
                    b7:69:64:7c:aa:bf:11:ab:3f:77:28:ac:8b:ac:42:
                    70:72:9c:ac:bd:4a:fa:b4:b8:99:e6:02:bb:d4:9a:
                    cc:d6:b2:c4:26:6f:94:4c:c0:7f:3f:5b:ab:be:f9:
                    31:bf:cc:c2:da:ca:ad:37:1c:50:b2:09:a9:3e:0a:
                    34:3c:99:99:9f:1e:45:fe:77:aa:e4:08:5f:27:00:
                    b9:ae:6c:62:6a:38:f8:8c:f7:01:88:48:51:8d:71:
                    02:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B3:CC:10:86:CE:DB:2A:F2:91:5A:32:4F:AA:52:89:E8:A2:E5:3A
            X509v3 Authority Key Identifier:
                keyid:7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:55:f4:ad:90:e8:bf:93:07:db:b2:d5:73:8f:81:61:bb:9a:
         8c:b6:9d:fd:dc:9a:20:72:72:76:b4:72:da:29:a0:1b:02:bb:
         ce:d7:c9:ae:26:c8:f1:af:bb:d2:1d:23:93:25:0b:fb:a9:7c:
         49:aa:af:1c:bf:09:4b:e3:89:52:1f:2a:c5:80:44:ec:f2:a1:
         93:ff:31:cc:14:7d:0c:29:4a:af:14:45:5c:0d:3c:f4:ca:f3:
         00:df:fe:3b:72:15:1e:db:a4:7c:3c:0a:fd:60:d9:8f:43:14:
         77:60:43:b5:41:23:5e:c2:38:9d:d6:d1:ce:52:17:fc:87:5c:
         d6:58:e3:c4:db:bb:45:84:cd:2a:d4:f1:8e:91:e5:50:a5:f9:
         4e:02:98:b2:ce:40:6e:16:4c:a2:78:f2:6d:18:6c:d8:6c:e4:
         de:0e:cf:c3:43:03:ca:6b:13:18:bc:ec:bf:41:29:f1:d7:b1:
         25:fc:5a:d2:b0:a2:36:ca:7b:ec:80:f2:8a:59:f0:d6:b9:7f:
         5b:9a:7b:bd:b6:7c:aa:59:be:de:7d:bb:30:c3:bf:c8:2c:b9:
         b2:79:46:83:0d:85:b7:2b:17:d6:69:99:83:6c:c4:ef:d8:65:
         d5:6b:e8:af:2f:8d:f4:c7:9c:6d:27:61:c3:cc:d9:bd:30:83:
         e7:5a:4c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:07:52 2025 by rpki-client