Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
File:                     KoxYiVEmChGj771tgWvVb4Ly_DQ.mft (raw, json)
Hash identifier:          j7TuMSFLX4DHP5qHjgL9SDQd7lEX45Mbc695KcYXEIQ=
Subject key identifier:   31:3B:4B:4B:19:78:A1:81:2A:0C:CC:29:20:A3:B2:8C:2C:49:56:69
Authority key identifier: 2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34
Certificate issuer:       /CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34
Certificate serial:       0196C7CD336CB8CAC5D5B573E00013D36628
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
Manifest number:          0CE5
Signing time:             Tue 13 May 2025 04:00:36 +0000
Manifest this update:     Tue 13 May 2025 04:00:36 +0000
Manifest next update:     Wed 14 May 2025 04:00:36 +0000
Files and hashes:         1: KoxYiVEmChGj771tgWvVb4Ly_DQ.crl (hash: 3fOjn6Ts+GSsZd6CW0NxclGZfXrIdMevn2oUkIAVwqs=)
                          2: bEf44I_katxftzRhRoOcb5k7xJw.roa (hash: B4D2C0R7a4GwUSt6VcyTIkYPBhevJsFHyCCfjO/vPIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 04:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:cd:33:6c:b8:ca:c5:d5:b5:73:e0:00:13:d3:66:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34
        Validity
            Not Before: May 13 04:00:36 2025 GMT
            Not After : May 14 04:00:36 2025 GMT
        Subject: CN=313b4b4b1978a1812a0ccc2920a3b28c2c495669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d5:e1:f3:17:47:b2:24:3f:13:cf:f3:4d:4b:
                    b4:65:9d:6f:e2:c1:f1:10:ad:db:12:02:5d:c9:9f:
                    33:cd:78:c0:ab:b7:65:52:71:87:c4:54:c4:4e:d5:
                    ee:e1:79:a5:a1:ff:40:4c:33:3b:d2:59:05:18:77:
                    e7:81:9b:08:09:c9:54:59:f3:77:f5:07:ef:81:71:
                    01:17:c3:5c:ab:d0:74:e7:47:bd:21:a5:ea:f4:94:
                    dc:a2:e3:d7:af:a9:5b:b4:c3:ad:0a:98:b9:4b:32:
                    20:6d:8c:77:bd:92:04:7b:70:69:0e:4a:dc:e3:68:
                    10:16:41:88:b2:91:2b:06:1f:5b:67:16:0b:09:de:
                    99:06:05:3e:11:61:9e:77:27:24:67:74:de:b7:07:
                    93:96:77:2e:79:41:12:ce:24:b0:a3:5b:91:32:66:
                    85:89:5b:01:62:74:35:59:21:16:a0:cb:2a:1f:fb:
                    64:34:88:8b:35:42:fb:09:0b:66:02:e2:a6:ec:18:
                    8e:1e:9e:a6:81:37:8a:29:f9:82:e2:31:a7:ea:9e:
                    ce:eb:48:b3:5c:af:14:1b:20:9b:82:1d:78:ca:d8:
                    b8:1b:82:d6:e3:05:13:c0:ec:28:69:c7:2d:0d:6e:
                    4e:7b:e1:81:8a:59:7e:70:a5:62:8a:1f:24:0e:3c:
                    b2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3B:4B:4B:19:78:A1:81:2A:0C:CC:29:20:A3:B2:8C:2C:49:56:69
            X509v3 Authority Key Identifier:
                keyid:2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a2:ef:60:50:37:0d:f2:35:bb:53:59:99:67:f9:8e:1b:c5:
         ca:af:7f:15:ac:23:2d:8e:6f:2c:a1:0e:a6:29:2e:94:73:35:
         66:32:d6:2c:22:ef:a0:c6:af:68:7d:89:46:38:c2:72:19:cf:
         53:45:6a:ca:50:37:09:62:f9:87:fa:29:ae:6c:f8:eb:41:6e:
         0d:7e:03:03:d4:c2:07:15:5e:51:80:b4:ee:a2:2e:25:1f:56:
         71:26:e0:6a:35:d3:23:d2:3a:bb:3e:4e:99:49:2f:3d:a1:d7:
         da:b7:f7:89:f1:8f:5c:5f:aa:8a:a0:1e:b5:f7:d2:60:e2:51:
         39:82:50:16:b2:22:fc:db:46:f3:88:75:bf:a2:6d:4a:ce:40:
         ff:54:54:de:cd:a6:a1:1b:d9:ba:72:7c:0e:c3:84:e6:2a:69:
         e2:c1:cf:a6:48:3e:e6:6e:c2:60:cc:c0:13:44:cb:f9:46:67:
         59:94:77:15:c3:ed:8e:f3:98:d2:b6:72:cc:b5:1b:7e:09:61:
         0c:26:77:d0:68:b3:69:7c:3c:0b:b7:9e:5e:53:d7:e7:c3:ba:
         17:58:6b:97:54:da:b4:b7:ab:50:2a:fd:aa:9a:4e:81:4d:e1:
         3f:8d:cf:7d:7c:30:a6:44:c4:5e:02:6c:72:dc:a4:98:93:6b:
         28:92:41:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:25:46 2025 by rpki-client