Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
File:                     RkXJxY1aSZm13OngcNMvSI4zH1I.mft (raw, json)
Hash identifier:          ZKJ1uIrYxFP8ba4SYvAh73K+Er11xNCl0jdsjCfwru0=
Subject key identifier:   5F:17:FF:A5:1E:5E:52:71:BE:24:AC:21:4C:8F:92:3F:71:F4:54:88
Authority key identifier: 46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
Certificate issuer:       /CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Certificate serial:       0196B6D939EBB2BB744A81937E65421B3EED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
Manifest number:          0369
Signing time:             Fri 09 May 2025 21:00:11 +0000
Manifest this update:     Fri 09 May 2025 21:00:11 +0000
Manifest next update:     Sat 10 May 2025 21:00:11 +0000
Files and hashes:         1: RkXJxY1aSZm13OngcNMvSI4zH1I.crl (hash: UMICeEv7jFGYeOEsbLd/AjPanm/8+snFGwxe4Ok8ytk=)
                          2: S8w484i2So0upLimT4DivXMFWTc.roa (hash: Xwh1nJvihxD2+JIu0EcE5o1EcOXEFkB9P4xQdM683xQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:d9:39:eb:b2:bb:74:4a:81:93:7e:65:42:1b:3e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
        Validity
            Not Before: May  9 21:00:11 2025 GMT
            Not After : May 10 21:00:11 2025 GMT
        Subject: CN=5f17ffa51e5e5271be24ac214c8f923f71f45488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:66:3d:0e:34:3c:28:13:1a:fd:d9:2e:61:ee:
                    3a:7f:09:b9:c9:82:d4:f9:d1:34:51:5d:0b:26:42:
                    3a:1d:68:69:68:08:83:95:62:00:5d:a2:cd:2f:e0:
                    7c:00:2d:52:49:04:0b:67:2d:72:60:7c:60:b9:cc:
                    fe:86:20:97:57:a5:c1:34:8f:f4:9e:7a:28:5d:40:
                    d9:fa:62:a7:7a:fc:d5:4f:76:09:7a:9e:f3:18:4f:
                    13:87:a0:03:8c:4f:a6:26:44:41:70:bd:cd:0b:bf:
                    54:aa:53:86:1a:82:9f:78:45:64:87:97:5a:09:dc:
                    ce:07:2a:af:b9:d6:26:55:04:40:3c:d1:59:fe:76:
                    9e:86:cd:e4:7f:6c:38:1c:b9:de:72:e5:7b:e6:71:
                    26:e5:8e:62:dc:e7:51:f1:87:5e:59:f7:7f:6a:0b:
                    a6:1c:71:17:e0:30:0a:2f:15:c9:f3:33:fd:a3:67:
                    81:64:9d:8e:0a:f9:7b:d9:af:14:13:c7:6d:17:e9:
                    2b:cf:63:9c:1b:61:b5:83:8c:ee:d9:a0:79:3a:30:
                    95:9c:77:12:cb:83:71:b5:f7:11:74:4b:b0:37:88:
                    8b:47:e1:78:98:d7:72:db:a1:b3:4e:03:74:db:c8:
                    45:05:5e:b8:4e:d8:ce:26:4d:c9:6c:52:f2:37:9d:
                    bd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:17:FF:A5:1E:5E:52:71:BE:24:AC:21:4C:8F:92:3F:71:F4:54:88
            X509v3 Authority Key Identifier:
                keyid:46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:83:22:e6:cb:01:82:b1:62:ba:7b:6b:b4:ab:65:2b:15:b2:
         c2:91:2e:b4:8b:29:fe:6a:3e:a9:db:ff:34:f3:47:3d:7d:2d:
         f0:fc:3b:70:27:e9:b6:90:bc:92:70:d3:74:29:cd:97:74:33:
         28:d8:71:5b:c5:ac:bb:89:16:f0:19:40:86:4a:f6:23:82:6a:
         ab:18:96:a2:08:f3:5e:03:ed:40:b2:6c:fc:0e:8d:70:3d:49:
         0f:18:78:a0:bf:a0:f8:28:dd:92:ee:6d:15:7e:22:55:99:47:
         4c:90:7f:d1:89:36:48:c6:1c:84:95:c7:a6:99:5a:30:87:c2:
         eb:24:a9:66:eb:91:13:cb:e9:78:76:25:d7:2c:da:a7:68:a7:
         54:98:87:21:16:f5:93:45:e1:01:59:ad:01:01:6d:d8:30:08:
         5b:9a:0f:e4:54:15:0a:67:92:a7:1b:77:97:a7:74:29:da:72:
         3f:e3:49:e0:e6:70:5d:2e:6a:45:f2:91:c2:79:10:7a:4f:c7:
         c5:db:c7:3c:e6:73:a9:2b:26:46:38:1f:8b:27:59:aa:39:17:
         a8:ac:6e:bb:f9:a5:12:ca:b5:ef:ae:e3:8a:c9:32:52:f4:c8:
         43:52:85:b4:18:ce:52:1c:4c:62:ce:02:ff:2d:f9:7c:ad:66:
         10:c1:a2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:31:55 2025 by rpki-client