Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
File:                     my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft (raw, json)
Hash identifier:          +vtvm0mzBmyuiHqJXMppMwbe+oD78N/tVLCCB7b7OkA=
Subject key identifier:   8F:7B:52:1F:F7:F7:95:D7:65:CC:F6:C8:E1:98:04:1C:69:D8:83:2B
Authority key identifier: 9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70
Certificate issuer:       /CN=9b2e80a141c974f6da8f40274338fdacee42a770
Certificate serial:       0196B7B5A688ED9C00A1F8C35AD515996E45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
Manifest number:          0CE2
Signing time:             Sat 10 May 2025 01:00:57 +0000
Manifest this update:     Sat 10 May 2025 01:00:57 +0000
Manifest next update:     Sun 11 May 2025 01:00:57 +0000
Files and hashes:         1: my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl (hash: BA4rfG2KWXTui76U5DHgeaMoVa7QvnWz3YB90dLLSSo=)
                          2: qDQj2i79pZYtwis1stkVmdhu_cA.roa (hash: OPq9BdTsvn5TcHmuSl2ovdvwcrawOIn1d+BihcQt66M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 01:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:b5:a6:88:ed:9c:00:a1:f8:c3:5a:d5:15:99:6e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e80a141c974f6da8f40274338fdacee42a770
        Validity
            Not Before: May 10 01:00:57 2025 GMT
            Not After : May 11 01:00:57 2025 GMT
        Subject: CN=8f7b521ff7f795d765ccf6c8e198041c69d8832b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:61:7a:90:a8:d8:6d:5b:48:64:98:28:99:f4:
                    ea:ff:2f:47:91:3c:32:da:bf:cb:29:da:07:e7:5e:
                    89:37:d7:4f:d4:34:f9:13:17:87:f3:a6:f4:0a:93:
                    09:79:08:05:6f:6a:0c:2f:26:68:3d:6c:62:e5:7d:
                    27:70:f6:1a:36:3c:af:5d:cd:6f:f2:0b:a8:54:bd:
                    a9:f6:d4:b5:15:8a:e6:dc:d0:f3:72:22:62:12:f8:
                    d1:22:a9:17:21:0f:3d:95:7a:96:f6:c6:1e:09:46:
                    e4:0b:4d:2c:e4:18:0f:c9:7f:e0:72:40:75:85:7e:
                    1a:01:23:3e:ed:a2:bd:d7:31:f2:9d:f3:e4:4a:48:
                    88:9c:3c:bc:c6:98:fb:ed:e7:69:45:d1:3b:bc:23:
                    f7:ec:93:0c:99:b1:9c:0a:fb:54:95:7f:0f:52:f5:
                    f6:db:a5:39:3c:92:a2:f3:d0:34:a6:a8:ba:0d:4c:
                    9f:b4:13:db:54:fe:6d:be:63:c2:57:d3:d9:de:32:
                    40:d7:dc:29:10:53:47:61:04:73:d2:dd:a1:48:f4:
                    8b:d8:7d:12:d3:9a:4e:ba:8a:74:5e:c7:b6:ca:46:
                    22:e4:e8:d6:40:d5:bc:25:2b:d5:60:2d:9f:d1:01:
                    65:51:db:b9:d2:df:5a:04:64:12:dd:ba:d6:79:75:
                    01:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7B:52:1F:F7:F7:95:D7:65:CC:F6:C8:E1:98:04:1C:69:D8:83:2B
            X509v3 Authority Key Identifier:
                keyid:9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d2:97:c8:3a:4d:00:63:86:08:9e:94:92:ef:25:37:a0:2e:
         d2:63:50:52:d0:23:d9:9c:be:fd:2e:3a:3b:0c:34:75:ad:96:
         db:64:0f:03:32:0d:e8:30:4d:36:4b:18:56:95:ff:82:90:13:
         f8:aa:64:de:f9:f4:1d:90:7e:64:46:58:40:6c:a5:3e:66:99:
         c9:02:73:07:34:e3:70:d0:a3:99:51:4d:5d:c0:22:63:18:6e:
         42:76:2e:b2:47:dd:45:fd:11:08:26:d7:ab:1d:ef:d2:60:07:
         53:3e:f1:44:16:cb:b2:9f:36:28:5d:c6:50:55:2d:29:09:83:
         35:e4:c2:27:51:3b:52:17:fb:52:08:05:35:d3:62:20:73:5b:
         9e:41:f6:b7:95:ec:39:e7:37:a9:a3:88:68:d4:b1:ad:85:db:
         7b:e5:1f:bf:0d:58:1c:49:b1:0e:2d:8c:61:20:8e:3b:56:39:
         17:eb:ae:22:6b:34:8d:5b:f4:b5:87:27:21:19:f1:79:fb:8c:
         5b:f9:37:e8:62:3d:b7:2c:a8:c4:bd:e0:f2:51:f8:fa:2c:82:
         1d:1e:2a:a6:77:e8:33:91:0e:0e:26:0e:2d:89:59:1e:d1:90:
         1f:20:89:2a:42:50:a2:f5:10:0c:2e:0c:2d:4e:5f:ff:4c:13:
         d5:b2:57:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:32:48 2025 by rpki-client