Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft
File:                     AsSROCOjGf66InDhuiygnkNb1Vs.mft (raw, json)
Hash identifier:          aRnNiKrpXw/ah9c5VW/WpLCuJpRTGTEicM0Etdb1VDk=
Subject key identifier:   9F:57:9A:BC:15:D2:3B:B3:AE:86:89:E2:30:86:CE:55:D6:3B:8F:5E
Authority key identifier: 02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B
Certificate issuer:       /CN=02c4913823a319feba2270e1ba2ca09e435bd55b
Certificate serial:       0196AB437B143D31788DDD96085536E28A5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft
Manifest number:          11E1
Signing time:             Wed 07 May 2025 15:00:48 +0000
Manifest this update:     Wed 07 May 2025 15:00:48 +0000
Manifest next update:     Thu 08 May 2025 15:00:48 +0000
Files and hashes:         1: AsSROCOjGf66InDhuiygnkNb1Vs.crl (hash: jwq5lSDxnG8eydvH4YGn41dS3G+w5vH+AvBgkp0u6Qo=)
                          2: zqiwP0xb8bytzAumv2YPA_fNwb4.roa (hash: zCaLlPBZ2WB2CsOiMiyWuvWQI6GwLJcAhYLvd/2+eA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:43:7b:14:3d:31:78:8d:dd:96:08:55:36:e2:8a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c4913823a319feba2270e1ba2ca09e435bd55b
        Validity
            Not Before: May  7 15:00:48 2025 GMT
            Not After : May  8 15:00:48 2025 GMT
        Subject: CN=9f579abc15d23bb3ae8689e23086ce55d63b8f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3d:14:0c:de:46:77:ec:8e:76:c2:3b:b0:d6:
                    98:b0:f4:8c:16:37:d5:6f:0a:33:c1:0a:db:20:f4:
                    bf:46:95:14:1a:5a:f6:00:35:b8:c6:e3:1d:50:df:
                    cd:cc:be:7e:dd:03:53:39:8a:41:42:ec:83:89:78:
                    a1:72:04:39:a3:72:dd:5a:84:04:54:55:6f:9c:0b:
                    0f:2a:9b:e9:25:88:8c:b3:8a:95:c9:a1:0d:03:98:
                    2b:ce:e0:69:07:7e:86:da:14:0f:56:53:38:19:73:
                    91:01:ab:4a:8a:47:13:e5:61:98:e8:5a:0a:9d:26:
                    f4:84:5c:68:5c:f2:87:3a:9f:8a:d8:1d:cc:06:46:
                    5c:8c:b1:9b:c8:0d:dc:e6:b3:16:f8:8a:cf:0a:c5:
                    f3:e0:c9:ef:35:08:b3:ec:a8:d7:db:c4:75:a2:8c:
                    94:8c:84:2b:20:1e:35:4b:ad:3b:1e:54:f8:1f:9d:
                    22:9c:6e:ba:dd:07:18:3a:65:50:12:6a:59:1e:aa:
                    77:5b:d5:58:98:a5:c1:86:52:86:82:25:e1:ae:fc:
                    49:9b:cb:36:1b:db:69:54:78:f3:23:ae:9b:55:13:
                    5a:25:29:8d:78:27:4e:8e:a5:98:f7:e4:87:4b:45:
                    82:6f:8d:2c:d0:fc:2d:e0:ce:6a:7a:8b:f1:3d:43:
                    6c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:57:9A:BC:15:D2:3B:B3:AE:86:89:E2:30:86:CE:55:D6:3B:8F:5E
            X509v3 Authority Key Identifier:
                keyid:02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:94:a1:43:ba:eb:8a:93:54:4c:3b:a3:71:6b:4b:32:f6:5f:
         e1:8a:54:24:32:ea:b1:ad:70:0e:20:e6:7d:28:f3:45:f9:61:
         dc:86:73:db:74:ae:86:11:fd:7e:3f:33:69:4e:74:2b:86:14:
         05:52:16:41:c5:bf:db:c9:7c:99:67:4a:b4:50:d6:38:24:d0:
         69:a4:9a:8f:6f:4a:7a:7b:ba:55:e9:79:2f:76:e2:7e:0d:d5:
         e7:b7:3d:b6:19:0c:ed:b2:4c:45:c3:e6:07:32:9e:5f:62:ff:
         d2:23:84:b5:54:9c:c2:66:b4:ce:45:7a:27:e1:e6:d4:e8:c9:
         71:40:8a:e9:f0:75:54:f3:1c:3e:f8:c5:0d:69:87:ca:fc:f2:
         73:d6:53:d0:aa:74:31:0a:23:9b:a5:0a:16:41:7a:39:0e:64:
         39:05:36:d1:cd:b7:79:86:0d:52:44:b8:6a:20:1b:e2:90:91:
         e8:a5:e4:16:13:00:51:cd:7c:fa:37:07:35:28:9c:6d:0c:13:
         45:cf:da:0d:46:58:c0:7e:3e:bd:41:b3:72:76:66:db:3a:70:
         24:74:8c:0f:51:86:ad:92:79:be:6b:7a:1b:44:fc:fa:9a:b0:
         07:c7:a2:94:37:28:a3:a8:65:51:fe:c0:be:c4:48:58:01:11:
         9a:b7:54:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:10:57 2025 by rpki-client