Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
File:                     SqaReHb9eJJsGSe5_ceWWNdGyEw.mft (raw, json)
Hash identifier:          htb7Ee6tMSNZ2JAfxbAncC/0kT2VlQN96AV01Jvf6ko=
Subject key identifier:   AD:34:4C:20:A2:79:C2:24:78:81:99:2E:89:5B:D8:C7:47:C1:69:82
Authority key identifier: 4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C
Certificate issuer:       /CN=4aa6917876fd78926c1927b9fdc79658d746c84c
Certificate serial:       01969F75FF893D815E1845367709DCB07F19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
Manifest number:          1286
Signing time:             Mon 05 May 2025 08:00:32 +0000
Manifest this update:     Mon 05 May 2025 08:00:32 +0000
Manifest next update:     Tue 06 May 2025 08:00:32 +0000
Files and hashes:         1: IbpEEeU88LFNxh5nL5cwRSdFORY.roa (hash: 4vG5HojNCWpZzK5uMY8x1XnpP7QHbyElnVInTc+EUlM=)
                          2: SqaReHb9eJJsGSe5_ceWWNdGyEw.crl (hash: QITYGyOSRj7JKaiRBTP+zbla36bhTjUoSbW97k8YzVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:75:ff:89:3d:81:5e:18:45:36:77:09:dc:b0:7f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aa6917876fd78926c1927b9fdc79658d746c84c
        Validity
            Not Before: May  5 08:00:32 2025 GMT
            Not After : May  6 08:00:32 2025 GMT
        Subject: CN=ad344c20a279c2247881992e895bd8c747c16982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6a:cb:76:db:ec:c6:4d:b8:49:c9:b6:7d:ab:
                    3e:a9:98:d9:fa:c2:46:1f:80:28:d1:91:90:44:b9:
                    ad:22:77:eb:a7:3c:c4:ad:9f:f1:0c:d0:56:e5:60:
                    6f:52:4e:1a:04:9e:14:f2:de:74:66:79:93:fc:2a:
                    5c:1a:13:42:40:a5:e2:04:01:36:32:ac:ca:59:c2:
                    f5:7a:35:b3:d2:c1:0e:ab:c2:bb:92:ae:54:fd:b5:
                    da:bd:39:63:e9:36:51:a3:4b:d0:db:a4:0d:8c:aa:
                    05:e7:c4:90:ec:73:d9:c4:c8:ec:2f:88:ce:5b:13:
                    98:f0:dd:47:ec:11:b2:c2:00:8d:01:da:96:af:9a:
                    70:da:8b:a3:aa:71:e5:ca:c2:a0:33:e4:8e:81:a9:
                    e2:ec:5f:a4:f9:33:8a:89:1f:30:8b:4e:4e:53:8d:
                    1b:90:22:99:d1:c1:b0:4f:cf:96:0b:22:91:d1:bb:
                    ed:f9:ed:00:82:e0:35:55:d8:24:a4:ef:e7:6a:94:
                    04:45:d4:01:c4:eb:9b:03:40:74:eb:b6:d6:00:f5:
                    92:9f:39:42:d0:f7:3d:ff:55:f4:97:2d:eb:36:af:
                    6e:fb:0c:0c:ed:96:d4:e1:89:3d:eb:29:0b:ee:49:
                    76:2e:84:f1:52:19:08:4e:36:56:ca:ea:07:05:33:
                    6b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:34:4C:20:A2:79:C2:24:78:81:99:2E:89:5B:D8:C7:47:C1:69:82
            X509v3 Authority Key Identifier:
                keyid:4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:aa:a7:76:c2:08:87:8a:90:69:4a:bc:a3:16:2e:a7:8e:1f:
         98:d2:1f:1c:a7:ad:e9:0f:4c:93:76:a2:5e:cf:1b:e8:25:33:
         a8:fd:53:87:c0:76:0f:b6:de:a9:5b:27:38:5c:cd:ab:70:ef:
         d7:b4:84:e2:72:ed:35:57:d1:e2:d0:f8:8a:9c:cb:69:0f:63:
         62:08:e9:e8:d2:b0:8e:78:51:54:24:8a:a9:24:11:6e:45:fa:
         32:4d:bd:e1:82:90:26:c8:a6:a1:63:b7:b7:50:73:29:25:8c:
         98:67:b0:b3:ad:14:de:9a:79:79:08:30:89:4a:65:d1:06:dd:
         73:dd:05:9d:bf:e1:04:17:a4:fd:c4:40:c6:48:a6:28:80:2e:
         b1:54:42:5e:4e:ad:8e:4f:0d:b0:cc:49:4e:96:82:e4:65:cb:
         8c:2d:39:31:36:80:a4:09:72:00:b6:7c:5c:88:14:46:66:36:
         2b:cf:e3:ab:d0:3a:ec:c7:67:75:46:26:19:f4:97:1a:a8:30:
         ff:71:b6:ef:da:49:68:af:90:c1:4d:88:3b:8a:f5:ba:b7:c3:
         30:90:14:d2:54:0b:8a:e2:aa:a6:39:0e:9b:a9:0b:d7:14:dc:
         19:b9:29:6c:f7:86:b8:3b:54:3a:bc:b5:ef:27:21:54:a1:2e:
         d4:85:6b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:50:19 2025 by rpki-client