Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
File:                     1qo_vHjjEikVfHi20jpl6y41Pc4.mft (raw, json)
Hash identifier:          tF2CYeWQG7QznkDe7U8EPpyyqpe5lM3A9LG4eOs/cpA=
Subject key identifier:   D1:0E:C6:09:A6:95:26:BA:24:E3:91:42:23:2B:CD:F9:96:DA:1C:9A
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Certificate issuer:       /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial:       0196B96CF9FEDC40B393A90D56B41BBC8EC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
Manifest number:          0482
Signing time:             Sat 10 May 2025 09:00:48 +0000
Manifest this update:     Sat 10 May 2025 09:00:48 +0000
Manifest next update:     Sun 11 May 2025 09:00:48 +0000
Files and hashes:         1: 1qo_vHjjEikVfHi20jpl6y41Pc4.crl (hash: 1Ukd0z9O2U7jXi3NKt3KBDmxzvO5SoOcHmeOXM83ut4=)
                          2: 7iFKRLth1Zm4UheUp7tUenlx6tU.roa (hash: y4tZzIay0AgtGP5YoKVVSCeeZFYasXEYu2JLlwWG/oU=)
                          3: Ej8KsK3ekpSAuBzyfoaBTrkE254.roa (hash: W6V0L2A/Di1Ma4bsmI96DmEyiw9w5QmMthcncjOX6q4=)
                          4: M9m5ciKZUlugxrd6zs79XHL4dD4.roa (hash: 5TehzUmwbp1N2JUN9csCq1NNReNAH4jUA6HYU4FBVG0=)
                          5: im8w3Xx-iUAQD6wX6N09-EJJW8c.roa (hash: /qbFQ2xM1Cro7Sw3CCIT5woLdLgqxh07N/rM/Vszw70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 09:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:6c:f9:fe:dc:40:b3:93:a9:0d:56:b4:1b:bc:8e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
        Validity
            Not Before: May 10 09:00:48 2025 GMT
            Not After : May 11 09:00:48 2025 GMT
        Subject: CN=d10ec609a69526ba24e39142232bcdf996da1c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:8f:91:a9:67:37:39:47:3e:66:33:ee:dd:
                    fc:35:2e:ee:db:48:9e:d1:4a:a3:fa:ef:7e:35:b1:
                    bd:4e:19:08:16:fb:ee:cb:04:c1:cd:5e:c4:31:41:
                    e9:31:32:ce:8d:ea:0e:bd:ec:7d:d6:05:06:12:66:
                    1b:2b:ac:5a:04:87:ff:23:a2:d6:39:b7:9e:0f:69:
                    97:02:2d:37:1d:3b:e2:ee:36:36:78:c4:a0:d6:f5:
                    31:b9:f8:0d:fc:bd:5e:1a:8a:20:5e:6e:d4:a7:77:
                    66:10:74:9c:df:8f:84:be:20:78:3c:f3:93:fe:12:
                    94:a5:23:b1:7a:ea:65:3c:62:40:7e:5c:38:65:13:
                    b5:84:fa:2d:ae:de:10:67:6b:c4:c3:07:0e:8e:a4:
                    7f:2b:e9:60:0c:14:b1:4a:28:a6:a9:87:f3:01:e2:
                    5b:9a:32:b3:9f:83:c5:28:fb:88:9c:61:83:16:f9:
                    ca:8c:9e:a8:39:42:d3:30:a1:ac:cb:9b:a7:a6:87:
                    6a:4d:9e:58:c1:42:2f:4f:4d:a7:a6:25:2a:d6:3d:
                    3a:e5:ab:16:ef:27:df:bc:1e:45:19:7a:2c:d0:48:
                    62:c4:38:34:25:04:b4:e3:7f:51:af:56:ad:65:81:
                    9c:a8:be:b8:13:2e:0c:8d:e5:5b:55:a7:b3:79:8a:
                    85:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0E:C6:09:A6:95:26:BA:24:E3:91:42:23:2B:CD:F9:96:DA:1C:9A
            X509v3 Authority Key Identifier:
                keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:83:cf:1a:88:3a:46:40:f4:8f:1b:5b:1f:ef:1c:e1:8a:20:
         6c:2a:6a:77:3a:b7:1b:e4:df:7f:69:c5:a5:59:df:2a:e0:99:
         35:47:4e:92:b2:4d:48:df:0a:31:93:19:10:90:5c:5e:9b:93:
         5f:fa:4a:a2:38:30:05:22:37:18:da:f9:ee:e9:3c:b4:a9:2f:
         9a:83:69:24:05:42:59:74:4e:28:75:be:71:80:b8:c9:45:e8:
         bd:eb:18:99:c5:b9:45:e8:25:32:d7:3f:bb:b3:fc:11:6b:f4:
         1e:c3:e5:c3:ff:39:9f:04:64:74:b8:2d:0d:dc:a1:c1:58:b8:
         3b:66:0a:b2:80:a6:29:9a:93:24:bc:c4:58:4d:eb:8b:8b:d6:
         9e:69:41:33:cc:ab:f2:ac:6b:56:fb:d8:64:a4:69:cf:b6:74:
         e1:dd:9c:f6:72:7c:14:9d:7c:b8:fb:3d:30:8f:0f:7e:c3:b3:
         86:a9:3f:37:db:5f:64:2e:76:0b:21:16:9b:29:73:40:d3:2c:
         de:40:d6:42:20:27:7a:f4:42:ab:ea:25:a5:fe:26:93:e3:92:
         97:33:eb:d5:58:df:8f:60:e0:72:1e:bd:64:77:79:ea:14:2c:
         38:d1:06:40:45:e6:31:86:63:e1:4a:be:36:fa:a7:04:3a:1a:
         83:0f:5a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:21:23 2025 by rpki-client