Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft
File:                     mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft (raw, json)
Hash identifier:          t8dVXkOqf5HPAVQWdvcljjQaMZx5ufdsxOPJz9oQwZY=
Subject key identifier:   C9:60:9A:06:50:E2:C3:31:24:0E:7D:49:23:17:AC:5C:7E:AA:D8:7A
Authority key identifier: 99:15:55:8C:68:97:FE:A2:24:85:5C:F6:03:81:85:73:54:70:84:11
Certificate issuer:       /CN=9915558c6897fea224855cf60381857354708411
Certificate serial:       0196BC6DB5AE86C3FD09461C4E72F4C52C74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft
Manifest number:          0B9E
Signing time:             Sat 10 May 2025 23:00:28 +0000
Manifest this update:     Sat 10 May 2025 23:00:28 +0000
Manifest next update:     Sun 11 May 2025 23:00:28 +0000
Files and hashes:         1: mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl (hash: 3xGtzV4rEhGxiSKB6R8XAoiyIzHuCmUrdwcJrTb2EIE=)
                          2: p_ZOqooaB4FZLqO_coSsHFoaxrI.roa (hash: kDng5P96ioc5fd3WKreLwEWmLw7z/u+Qt5PBtL9Aseg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:6d:b5:ae:86:c3:fd:09:46:1c:4e:72:f4:c5:2c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9915558c6897fea224855cf60381857354708411
        Validity
            Not Before: May 10 23:00:28 2025 GMT
            Not After : May 11 23:00:28 2025 GMT
        Subject: CN=c9609a0650e2c331240e7d492317ac5c7eaad87a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:48:3c:61:5d:d5:69:b5:e7:aa:93:33:d9:
                    f8:10:5d:4b:40:3c:a8:8d:89:d1:37:6a:ad:80:1b:
                    0a:a9:22:dc:ff:14:91:19:e2:d1:8c:00:99:eb:1f:
                    ef:7a:a9:84:cb:62:f3:34:1e:40:9a:da:8a:56:9a:
                    52:6a:5a:fc:00:f2:0e:37:95:3d:97:14:57:9e:c5:
                    a8:63:f6:b8:0f:54:2a:4b:89:63:1d:e9:31:d6:e9:
                    80:2d:56:68:b7:be:db:7b:92:81:e6:28:c1:20:c4:
                    3b:dc:9a:98:95:f5:ff:6c:6a:a5:61:b9:0a:fe:c5:
                    83:a8:12:3f:3d:cf:ec:f8:60:cd:62:f3:12:92:a5:
                    ac:be:df:39:30:60:0b:3f:ce:a9:8c:0c:3c:1e:fa:
                    96:e0:18:9f:d4:2a:7d:5b:52:69:48:df:b0:91:e7:
                    d0:b0:af:ed:d8:77:40:ef:29:8d:08:e3:40:ef:e3:
                    6e:aa:5c:d4:30:f5:d1:1f:6a:f5:65:95:16:f4:ed:
                    a2:81:60:15:57:35:7a:de:06:cf:1e:08:a3:2f:ef:
                    62:6c:d3:21:6d:a1:df:9b:1d:48:12:e7:11:fe:e9:
                    3e:8e:aa:92:65:06:30:eb:3b:89:bf:5e:77:36:c3:
                    57:71:b5:5a:1f:cf:78:f5:13:b5:2b:04:8d:c8:3f:
                    c1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:60:9A:06:50:E2:C3:31:24:0E:7D:49:23:17:AC:5C:7E:AA:D8:7A
            X509v3 Authority Key Identifier:
                keyid:99:15:55:8C:68:97:FE:A2:24:85:5C:F6:03:81:85:73:54:70:84:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:12:6e:dd:f8:0a:1a:97:be:53:f9:c7:e6:de:75:90:8f:8c:
         ea:b9:51:89:f6:97:7c:d1:fa:07:4a:08:41:98:24:ad:79:81:
         ea:b6:3b:56:b4:e5:91:cf:1f:96:5d:d4:ff:e0:12:3e:7a:09:
         ea:7f:c4:0a:3c:d2:12:7d:00:46:ed:8c:3a:26:b1:ea:26:49:
         90:57:fc:04:55:7a:c9:f2:3a:47:87:10:6a:91:6d:b2:da:1d:
         62:90:f1:23:f0:ce:13:c1:ec:e3:fe:e8:ec:3c:2f:d9:3c:5b:
         58:86:1f:37:55:43:39:6c:ff:10:18:42:e5:25:d2:a7:24:33:
         ce:43:4e:8c:08:ee:e7:81:43:7e:68:83:d7:3f:89:6d:67:d1:
         a9:da:07:d0:bc:a2:51:95:75:f6:d7:9b:c4:18:a9:0b:c8:e8:
         fb:06:a3:fd:26:a5:e8:da:e6:86:32:77:24:5c:2e:63:97:b7:
         04:ed:f6:8b:d2:27:f0:ec:de:05:bb:4b:8d:d0:34:cd:1d:94:
         14:b4:5e:15:cf:11:49:f9:4c:a7:c5:5f:47:b7:e3:14:7d:29:
         76:aa:0b:bd:5f:51:60:67:a4:51:2a:12:7f:50:38:78:73:82:
         91:33:3d:54:8d:78:28:f6:7c:e4:b2:b5:5d:55:58:2c:75:49:
         83:fd:44:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:56:07 2025 by rpki-client