Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
File:                     n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json)
Hash identifier:          2Aj/HbG2auvk4EErY5pSlbnUNP/4YhSEtS44LUoP0BE=
Subject key identifier:   96:63:E7:F4:F2:79:2D:DA:11:A4:F5:29:CA:68:CE:49:BF:1B:79:2E
Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
Certificate issuer:       /CN=9fb41d252f120acb140d0fc84334152114b6c826
Certificate serial:       0196B77E1DC262FEF679BC1035F511158367
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
Manifest number:          59
Signing time:             Sat 10 May 2025 00:00:17 +0000
Manifest this update:     Sat 10 May 2025 00:00:17 +0000
Manifest next update:     Sun 11 May 2025 00:00:17 +0000
Files and hashes:         1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: uCyfNEU9GD2haFJ2Hpl2XIFelX1sCwvI8Ggy7vtnOM8=)
                          2: shgH4_EQdby9FFBN3Y5GUQj4Toc.roa (hash: +F1kGaAyVQdETpR4Si2c2G3OanhyfIaqHi8fbDMWM9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:7e:1d:c2:62:fe:f6:79:bc:10:35:f5:11:15:83:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826
        Validity
            Not Before: May 10 00:00:17 2025 GMT
            Not After : May 11 00:00:17 2025 GMT
        Subject: CN=9663e7f4f2792dda11a4f529ca68ce49bf1b792e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d4:2c:fa:4a:99:12:5c:26:ca:0e:92:2d:f5:
                    a6:77:78:de:44:9e:83:7e:5e:be:a3:9a:80:d0:53:
                    9f:0f:95:ae:cc:ae:a2:ce:5b:db:1a:7f:6b:fb:f8:
                    f8:0d:12:04:c8:57:bb:19:c1:6d:75:41:6c:c6:0c:
                    19:15:1e:b2:ce:d3:88:d5:e5:9c:68:00:68:2f:e3:
                    f1:b1:62:51:29:f5:fe:94:aa:43:2a:c7:5c:61:29:
                    5f:01:34:10:14:10:12:82:a0:12:9b:b8:bb:a3:67:
                    79:64:54:1e:ab:5b:7c:43:ee:2e:39:f5:3c:64:a3:
                    ad:a4:60:9c:21:04:4a:a9:37:3b:6b:97:df:d8:92:
                    09:5c:91:78:2c:48:47:4e:ba:66:af:a6:50:fa:b5:
                    13:f5:89:e0:a3:47:96:8e:ba:5e:f9:63:fb:10:c2:
                    68:51:a0:cb:67:23:3a:0d:af:66:4b:c7:15:98:10:
                    0a:30:a2:86:c1:cf:7c:6e:ff:18:80:46:bc:44:fb:
                    f4:dc:d3:97:87:68:49:29:b6:2b:b4:a7:93:e7:4e:
                    a0:cb:cc:32:25:cb:2c:d8:54:2d:e6:ca:29:fb:a6:
                    69:c0:64:2b:47:ef:ec:6d:f0:d0:88:39:0b:d2:df:
                    d6:00:ed:c1:17:c6:57:9e:32:1f:4f:1c:7c:b2:9a:
                    f2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:63:E7:F4:F2:79:2D:DA:11:A4:F5:29:CA:68:CE:49:BF:1B:79:2E
            X509v3 Authority Key Identifier:
                keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ba:7b:9a:23:87:88:1a:29:5e:b9:f0:3a:bf:a2:9d:af:b8:
         43:ec:61:89:d3:3a:8d:cf:19:c6:a7:75:8e:ae:6d:89:50:dc:
         ab:19:d5:e8:07:38:1a:92:2d:cd:76:01:ab:c8:16:2e:b2:81:
         ab:9c:4e:fa:6e:c6:7c:c8:d2:e0:dd:f1:52:90:c7:6d:9c:41:
         57:b2:80:2a:a0:63:72:48:c0:ed:59:f9:62:99:34:42:ef:23:
         f6:33:59:e0:5a:8c:24:b3:b1:e0:9e:03:f6:13:0d:90:71:e6:
         e7:59:20:ed:1f:b8:24:ba:80:dd:49:63:e2:de:8d:11:9b:58:
         bc:26:f6:79:e6:2b:13:84:85:29:cd:19:84:7b:5f:54:af:e8:
         4b:d9:0d:2a:d5:d2:5c:b4:af:51:fb:cd:50:47:4d:84:e4:5e:
         09:f3:49:fb:17:c7:5f:65:8f:aa:9c:fd:52:a2:f2:b3:3d:7c:
         f6:e7:f4:d5:d6:82:5b:4b:d1:8a:ea:36:fd:e7:38:d0:2d:0d:
         4e:39:50:9f:4f:fa:6c:00:ab:f9:c7:d0:f4:a1:cf:51:50:5e:
         b5:de:ba:f0:e9:4d:51:d1:3c:18:1f:6e:3d:25:fa:89:e2:d4:
         fc:11:98:a1:af:66:9a:0c:77:e6:a9:dd:0a:60:35:4f:18:91:
         0c:4f:d3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:58:10 2025 by rpki-client