Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
File:                     1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json)
Hash identifier:          yH2FW/MK1/s8zckys3ndGGLkU4DmBThHZ5mJllWPAXw=
Subject key identifier:   33:FE:58:4C:99:9F:65:FA:AE:F7:5B:E4:2D:50:D0:A1:F0:57:B0:66
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Certificate issuer:       /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial:       0196AD68BD4F982854ED23C386073F5D6316
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
Manifest number:          0984
Signing time:             Thu 08 May 2025 01:00:44 +0000
Manifest this update:     Thu 08 May 2025 01:00:44 +0000
Manifest next update:     Fri 09 May 2025 01:00:44 +0000
Files and hashes:         1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: GuPQYDMNc2SBkkghsqd+Kc8kNIjW5T9Gbw8WMvneZtE=)
                          2: pkEvxsg0lyUz8ua6CoCuzxPGvFc.roa (hash: EcykeL8rqJYAw+Ypkvc2gvotxsw/oc8iK0wUO0U4PaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 01:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ad:68:bd:4f:98:28:54:ed:23:c3:86:07:3f:5d:63:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
        Validity
            Not Before: May  8 01:00:44 2025 GMT
            Not After : May  9 01:00:44 2025 GMT
        Subject: CN=33fe584c999f65faaef75be42d50d0a1f057b066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c7:be:c1:d1:df:05:7a:a2:56:e0:00:9c:ef:
                    4c:84:17:47:0d:c4:1e:6d:27:ca:ca:46:8a:14:1f:
                    bc:d0:81:37:69:b6:cf:e4:c6:c9:7d:95:78:fc:6e:
                    73:ac:f5:56:3b:2b:f0:17:c5:24:59:aa:03:21:2d:
                    cf:5a:d8:fb:2a:7b:fb:60:dd:e8:e0:e5:14:4f:50:
                    7f:6f:aa:cd:8b:46:f0:50:ec:d6:1c:32:32:b7:2f:
                    e4:f3:df:8f:36:19:b3:e1:5f:8a:62:30:46:9f:e8:
                    75:e1:2e:f9:fe:39:d8:d8:5b:09:08:fa:b4:8d:fa:
                    95:fb:42:13:de:6d:8f:6c:2a:d3:f0:2e:e1:3e:0f:
                    5f:32:90:c2:ac:e9:9c:10:d4:26:46:3f:11:bb:1b:
                    7d:ef:55:c4:e9:f0:d0:0d:e5:a4:05:7f:4c:aa:e6:
                    8c:9e:43:67:2c:e3:be:b2:44:58:7a:4b:46:1a:b6:
                    01:13:88:e9:72:f4:28:65:d2:2b:22:a9:47:90:6d:
                    57:80:7e:9a:ff:db:1c:17:b2:20:a5:b5:c2:78:47:
                    8a:d0:d6:08:ea:f5:a7:6c:2e:1e:ba:a9:50:75:a3:
                    b5:ec:d3:a8:f2:93:8e:3b:a3:7b:6a:95:ea:dd:8e:
                    82:95:a4:cb:72:8f:a1:08:9b:ae:64:e4:c6:62:a1:
                    c0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FE:58:4C:99:9F:65:FA:AE:F7:5B:E4:2D:50:D0:A1:F0:57:B0:66
            X509v3 Authority Key Identifier:
                keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:68:3d:94:04:b5:d4:69:3f:97:8a:cb:81:ae:50:4c:8c:db:
         57:a8:f2:29:de:de:e7:5a:21:44:2a:3e:6e:4c:9f:87:07:74:
         35:de:d5:e0:69:cb:1b:7d:ff:2d:5e:59:4c:5b:0d:d5:b9:b9:
         f1:75:4e:73:54:f1:6c:3c:c0:ad:fb:c4:2f:bb:cb:e8:5e:44:
         43:d4:87:e0:ad:e4:30:84:08:a3:5a:05:f9:ca:ed:2e:d0:8e:
         5a:99:ea:8b:50:cf:e1:b1:3c:57:07:06:55:d8:7d:09:86:a4:
         01:25:d8:26:b3:13:40:3a:8c:5f:7d:a9:5e:4f:d7:15:60:f8:
         c1:c6:f6:0a:28:6e:93:0d:fd:9b:0f:6d:fd:47:c8:52:80:e5:
         40:d5:fe:b0:85:e4:4e:25:ee:f6:b9:23:2d:9b:7f:ea:5d:97:
         ca:02:09:a4:0d:15:42:21:2b:ed:1e:af:96:b6:d0:36:d8:be:
         a9:73:f9:4a:fd:af:16:ae:4c:46:83:32:68:2b:26:b7:32:21:
         50:93:51:0b:26:1b:65:7f:f0:49:9f:c6:6c:8b:4d:81:72:90:
         a6:f1:84:8d:23:99:57:bb:5f:0c:41:0e:f3:c1:6d:e0:ec:e1:
         4a:8e:03:a7:14:62:ba:0f:dc:66:ac:ae:7b:34:b9:c7:56:c7:
         50:5a:f4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:07:29 2025 by rpki-client