Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
File:                     44qr6o7im_fJFbw-8Luswn0Ozt4.mft (raw, json)
Hash identifier:          e+IsQEPz65XSiW4TDfwmScItXhokLqGcAuCLHyvH1VU=
Subject key identifier:   C2:F1:69:CE:D5:A6:60:FA:25:D7:B9:32:3C:2C:65:F3:73:F1:D8:A6
Authority key identifier: E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE
Certificate issuer:       /CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
Certificate serial:       0196B71096E9590CFCC060F373C54BD1C214
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
Manifest number:          11DD
Signing time:             Fri 09 May 2025 22:00:39 +0000
Manifest this update:     Fri 09 May 2025 22:00:39 +0000
Manifest next update:     Sat 10 May 2025 22:00:39 +0000
Files and hashes:         1: 44qr6o7im_fJFbw-8Luswn0Ozt4.crl (hash: kO+aF06et5hE2RDLG1mDB+KFa+m+rRBvunrr8vC89A8=)
                          2: lZ_8Gy-p9dJBOR2jnQXGL1gKT24.roa (hash: gojO/FGnNBUfGiI8/IbdnMShaLKaR6WR/+GNSoRF7Bk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:10:96:e9:59:0c:fc:c0:60:f3:73:c5:4b:d1:c2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
        Validity
            Not Before: May  9 22:00:39 2025 GMT
            Not After : May 10 22:00:39 2025 GMT
        Subject: CN=c2f169ced5a660fa25d7b9323c2c65f373f1d8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5a:c0:f2:58:f6:81:79:ba:ed:e2:15:33:ee:
                    80:41:05:c5:86:e0:6d:c6:0d:5b:86:9a:cd:f9:8c:
                    83:85:40:a0:a6:d0:88:3d:dc:16:50:ed:d6:e3:61:
                    9f:c1:57:bf:fa:c0:2b:01:b9:be:bd:2c:a0:93:c5:
                    bc:80:6b:e7:7e:e1:ff:35:93:5b:3b:8f:35:b9:5d:
                    4f:d5:99:78:bd:48:e1:0f:a9:f1:5a:b5:e6:be:e7:
                    e2:f5:b6:51:fc:0d:e1:d7:36:3c:50:87:5f:1b:be:
                    7e:0b:b8:f9:4f:04:80:1e:29:d9:d4:51:b0:84:47:
                    ed:8b:62:48:ca:54:98:9e:9e:dd:b5:5c:7d:93:2d:
                    3a:ef:22:b2:bb:54:38:e0:61:84:de:a6:05:d2:d8:
                    15:94:22:12:c4:e8:ef:59:60:1e:a6:8d:50:b6:e9:
                    3f:e3:a0:c8:75:8e:02:3b:6a:c3:01:7d:bd:71:e1:
                    06:ab:ba:86:5c:37:c8:22:b3:63:46:ab:a0:38:4e:
                    44:4b:6d:08:67:35:9e:ae:f4:5c:51:3c:79:cb:61:
                    b2:3d:78:e3:80:13:71:ff:48:d3:cf:76:23:4a:5d:
                    90:2c:2d:f3:41:30:31:3d:d1:e4:44:6c:c4:a5:5a:
                    fc:61:52:36:ab:07:2d:96:f0:4f:bf:47:29:54:ae:
                    7f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F1:69:CE:D5:A6:60:FA:25:D7:B9:32:3C:2C:65:F3:73:F1:D8:A6
            X509v3 Authority Key Identifier:
                keyid:E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:13:9d:38:f8:59:d9:92:d5:bf:dd:c9:68:74:42:34:91:b9:
         07:73:66:1b:f5:3f:24:99:66:b8:6e:a4:01:46:d3:0d:c9:45:
         1c:6e:5a:45:ca:62:0e:c6:d2:f0:b5:f9:17:f2:c5:c9:22:1c:
         b4:49:95:ad:87:54:52:37:c9:b4:13:d2:fe:a8:05:8a:4b:4d:
         26:7b:8a:28:59:5b:4a:86:72:2f:52:3f:da:64:2e:c6:4b:5c:
         1f:97:5c:32:3e:47:c7:fd:c0:95:a2:fc:aa:b8:14:50:78:1a:
         13:9a:15:86:17:97:8e:86:a7:a8:5c:f6:3d:bb:de:d2:c7:da:
         ca:f9:f9:ee:3c:0d:ef:87:3f:a2:bc:e5:d8:c2:d8:23:a4:ce:
         55:a0:d9:cd:66:90:a7:f9:a8:9b:56:cc:bf:fe:a7:27:22:10:
         84:85:6c:f2:ca:e8:de:4c:7c:4f:af:5b:6f:31:fb:a0:bd:23:
         4c:cc:78:a7:4c:61:6c:6a:b2:4a:8a:96:d0:db:99:a9:9f:1a:
         56:29:b2:9b:e9:63:0b:36:4e:b2:d5:bc:5f:01:c2:c3:0c:0b:
         87:95:76:ce:f5:e8:77:d6:23:b3:2b:c5:0c:d5:5c:3d:14:36:
         e3:d3:68:13:3e:2c:9e:15:ec:3d:8a:59:3b:d8:ff:3d:b8:ba:
         30:c5:d9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:44:25 2025 by rpki-client