Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
File:                     sQvyxqnxpCuKzuASWfkfUUSrivU.mft (raw, json)
Hash identifier:          uGEN9k5IsAeqxr6CbGAIDWUxpOsn9zX4m0gEiq8yPQM=
Subject key identifier:   F1:D5:0A:C0:68:2E:B0:EA:F8:A9:C5:BF:7B:51:F1:C7:79:82:AE:AE
Authority key identifier: B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5
Certificate issuer:       /CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5
Certificate serial:       0196A6F866F2488BCE99826BCC3E30BC5416
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
Manifest number:          04C0
Signing time:             Tue 06 May 2025 19:00:19 +0000
Manifest this update:     Tue 06 May 2025 19:00:19 +0000
Manifest next update:     Wed 07 May 2025 19:00:19 +0000
Files and hashes:         1: RagZVp33x_ZhRPfhRcY-ePMpfNA.roa (hash: gMsYucRSntBj1BaVj8EkbP09b3qQ09XAtS6QWD6kZsw=)
                          2: sQvyxqnxpCuKzuASWfkfUUSrivU.crl (hash: +iyXx4Ty2DLjqPsLykCJTlmG/QQ/LGH1yer87pTPKZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:f8:66:f2:48:8b:ce:99:82:6b:cc:3e:30:bc:54:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5
        Validity
            Not Before: May  6 19:00:19 2025 GMT
            Not After : May  7 19:00:19 2025 GMT
        Subject: CN=f1d50ac0682eb0eaf8a9c5bf7b51f1c77982aeae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1f:99:79:6e:c8:2a:5e:0d:21:40:67:2e:a7:
                    54:df:a0:4a:14:62:3a:76:b9:bc:7e:09:45:58:30:
                    b2:bd:ef:9f:df:0c:e7:25:b0:e3:65:cd:db:2b:e8:
                    99:0c:f7:39:35:41:78:14:dd:77:9f:0c:22:a1:5b:
                    95:3b:81:9e:54:e8:fe:63:33:cc:9a:2a:b5:dd:4d:
                    a9:ec:b6:39:ad:b9:b9:e4:ec:8e:93:a3:92:18:68:
                    df:4b:37:3e:f9:94:66:57:4f:a2:26:f0:a9:7c:b5:
                    a5:d9:45:2e:34:90:30:a7:d4:5c:af:ab:a6:9a:e0:
                    85:3e:43:70:71:fd:10:fc:ca:9a:df:5f:77:e0:c0:
                    8a:3b:b3:e4:59:5c:02:28:0f:a8:b0:a3:f7:1e:5d:
                    39:12:c2:23:a5:b3:04:d1:de:fa:fb:02:57:f0:d7:
                    a5:03:be:c3:fd:75:3f:51:5e:2c:30:36:6a:05:7b:
                    4a:98:6d:4b:46:e7:2d:63:0b:7d:29:f5:fd:93:2d:
                    2f:3a:19:81:95:85:46:c6:cf:9e:3f:25:24:0e:95:
                    bd:29:48:c6:c1:91:46:3b:95:fa:f6:26:8e:93:81:
                    2c:6d:ce:43:ba:d5:ca:98:e0:dd:a5:9e:e5:c0:47:
                    87:ac:ca:c5:3d:43:71:9c:2a:91:53:67:eb:d6:e3:
                    a5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D5:0A:C0:68:2E:B0:EA:F8:A9:C5:BF:7B:51:F1:C7:79:82:AE:AE
            X509v3 Authority Key Identifier:
                keyid:B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:3c:6e:69:c4:89:8e:44:57:2f:ed:97:95:03:3e:91:3d:ab:
         bd:fa:39:c0:56:2d:a5:73:ba:b4:c0:ed:7d:ba:98:df:f4:b1:
         48:f4:37:0d:b3:10:7f:93:7d:aa:3a:5a:1e:93:17:45:2a:84:
         44:88:5a:1d:3b:4d:8b:2e:bc:a2:ee:36:75:91:6b:a0:c4:a9:
         47:cd:ef:41:df:6c:3c:ad:52:3b:6a:92:ae:b5:db:53:c2:3b:
         81:7c:7d:fe:f1:d3:02:be:5a:a3:5c:cf:3f:68:9f:dd:fb:59:
         e9:57:28:f7:ca:c5:23:8d:09:ea:b0:6d:13:d5:c1:7e:fa:ee:
         c5:06:57:f2:50:34:45:48:92:63:af:0b:e1:bf:bc:76:9c:e5:
         7d:54:fb:dd:c3:12:22:35:f6:93:88:cb:c3:ed:6a:43:85:85:
         99:40:fa:55:bc:54:c9:42:c1:79:85:75:ec:26:7c:f7:f9:78:
         aa:39:5c:c7:71:4b:1a:87:dd:64:66:67:0b:8c:40:24:f6:3d:
         ce:79:03:3d:c1:61:80:52:9d:94:ed:5a:e0:b2:d4:07:dc:94:
         7a:73:58:2b:f5:22:4d:5b:fe:a1:97:f0:9c:61:77:f8:71:dc:
         c0:50:f3:e1:7b:e7:51:76:5f:ba:0d:66:03:6f:16:49:e4:5c:
         04:36:06:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:24:11 2025 by rpki-client