Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
File:                     asNOSfupZAuD6rqvupxKuWyMNUQ.mft (raw, json)
Hash identifier:          yWR/eG0ZD8uk/Sr8JQpAOal3PGjanUBT/YFZsjLTDNE=
Subject key identifier:   DA:30:F1:87:EC:07:2E:23:F3:77:38:3D:AF:54:4F:33:41:94:5C:E7
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Certificate issuer:       /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial:       0196B7B62A4884B415477A3ABF91BF82C26B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
Manifest number:          0EB0
Signing time:             Sat 10 May 2025 01:01:30 +0000
Manifest this update:     Sat 10 May 2025 01:01:30 +0000
Manifest next update:     Sun 11 May 2025 01:01:30 +0000
Files and hashes:         1: U87y99J1siFcY1ZoT18_zMMUqw8.roa (hash: WlkxlG9RIuCR4qy7OuSRfiHWs7ZtaSsDc6kVoZ9JKfA=)
                          2: asNOSfupZAuD6rqvupxKuWyMNUQ.crl (hash: 7hPwfoUsUk/59W87HYgmdncdOQbkZPBG/e7Ks105FTA=)
                          3: t16Nt49ySAy36uwAiD0PGu1Vpfg.roa (hash: ad44+rctUZO6EQ8Ns0r6TEi9u2Ekz8ljDyuPV/oNu1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 01:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:b6:2a:48:84:b4:15:47:7a:3a:bf:91:bf:82:c2:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
        Validity
            Not Before: May 10 01:01:30 2025 GMT
            Not After : May 11 01:01:30 2025 GMT
        Subject: CN=da30f187ec072e23f377383daf544f3341945ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:26:8c:e5:28:06:83:cd:c9:f1:1e:3f:50:b1:
                    2a:7a:38:c3:f8:3f:04:b9:28:aa:04:a3:4d:ab:ab:
                    e0:be:39:96:03:33:04:26:03:ec:00:90:80:38:91:
                    c2:fc:26:4d:43:28:6b:b9:58:01:2d:08:70:4a:68:
                    ce:b6:10:15:b5:63:5b:62:0f:c1:ff:67:be:7c:ba:
                    ae:86:ea:09:5a:10:33:ee:cb:82:cd:a8:5f:62:bf:
                    dd:6e:d2:78:6a:17:9b:5a:24:b9:6b:de:a2:4e:07:
                    67:39:30:67:86:bf:53:8d:7c:af:ac:36:b7:f6:29:
                    19:d2:cd:df:41:7a:2c:bd:a6:4c:71:0b:20:c8:fb:
                    39:f3:3f:f7:be:4c:5e:be:41:f6:13:66:e7:09:8b:
                    ce:72:37:09:99:9c:11:ef:d2:2f:78:bd:f9:57:f2:
                    ef:ac:6b:25:0a:72:a1:9e:5e:a4:43:d7:d5:f5:ee:
                    d0:bf:e6:d1:ab:07:d5:a5:dd:3f:41:5c:1c:d2:e6:
                    42:01:dd:01:09:f4:30:59:18:98:e0:4c:4d:07:14:
                    fd:8a:00:0c:84:98:cc:47:14:2f:7f:e0:35:f9:2c:
                    21:3c:54:ea:88:6a:33:1d:45:0f:92:b9:74:72:c2:
                    9a:55:dc:ab:72:77:bd:d3:12:03:cd:6b:f2:2a:1a:
                    af:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:30:F1:87:EC:07:2E:23:F3:77:38:3D:AF:54:4F:33:41:94:5C:E7
            X509v3 Authority Key Identifier:
                keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:00:b1:5b:59:76:97:c8:91:40:b3:02:f4:03:85:78:6b:e0:
         4a:8b:e8:45:a1:a5:bd:c8:3e:77:ec:29:4c:e6:13:49:04:96:
         81:88:7d:18:a7:17:68:4e:ee:ea:b0:94:34:9d:a4:ee:93:b7:
         e3:5f:6e:b0:d3:c3:3c:a2:fc:23:8f:33:19:31:6b:f1:1a:52:
         f4:f7:bd:6b:47:89:c2:bd:05:0d:93:5e:cf:35:fb:5d:a2:0b:
         0d:6e:af:a9:20:b7:bc:55:05:c2:6b:b0:00:da:60:93:33:07:
         20:62:d9:c2:75:1d:f1:c1:8d:08:6b:bb:76:c3:1a:2f:f0:f8:
         ad:60:f3:ee:f3:2d:dc:19:9e:91:53:82:f5:67:f0:b0:c7:29:
         7b:97:22:07:95:7f:7f:56:65:e1:19:f4:df:3c:d2:79:50:b6:
         99:ba:cf:ba:ff:a8:6a:0c:cf:10:71:23:76:ed:09:63:35:ca:
         43:da:d6:78:c8:3a:5f:c9:ae:21:93:dd:c8:76:21:c7:e8:ac:
         db:c9:b0:36:ac:f9:bb:eb:8e:0d:f8:39:9e:33:1b:d6:d4:c1:
         92:57:b3:3f:e6:5f:6b:78:af:84:47:26:a6:7b:8d:81:00:43:
         01:9e:6d:6f:86:f1:e4:b3:7d:c3:68:6b:92:46:62:0e:88:31:
         71:db:37:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:41:26 2025 by rpki-client