Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
File:                     sSQfEp2_xKFlH-zboDEI_NLMHfI.mft (raw, json)
Hash identifier:          7a1SP/uyfDfgg7ADipu3NLuxipmUFIu2I6yFzCH7BrE=
Subject key identifier:   D5:72:D7:8D:F7:F1:9C:BE:96:C1:E8:89:A5:05:B6:31:3B:21:2A:FD
Authority key identifier: B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
Certificate issuer:       /CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Certificate serial:       01969F3F0F876834218C9910CF0BF6D537A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
Manifest number:          08CC
Signing time:             Mon 05 May 2025 07:00:32 +0000
Manifest this update:     Mon 05 May 2025 07:00:32 +0000
Manifest next update:     Tue 06 May 2025 07:00:32 +0000
Files and hashes:         1: sSQfEp2_xKFlH-zboDEI_NLMHfI.crl (hash: 5MZMWpfO0sz6JlOGB0Ct+Cfcyb7SEcaIY36afSqZemw=)
                          2: trnbESznlOsXSmOq-zTLOlE0nzc.roa (hash: fOmXOdcOD5V/jRJlsSdgNbz1rZ873FVRanr34sBtxks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 07:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:3f:0f:87:68:34:21:8c:99:10:cf:0b:f6:d5:37:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
        Validity
            Not Before: May  5 07:00:32 2025 GMT
            Not After : May  6 07:00:32 2025 GMT
        Subject: CN=d572d78df7f19cbe96c1e889a505b6313b212afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:18:ae:2c:3d:34:d0:b8:39:49:2a:64:49:d7:
                    fa:1d:18:72:ee:27:8c:de:ae:ae:76:4d:81:e8:67:
                    78:23:01:f1:93:ed:f4:21:37:f2:6a:f0:3c:ab:55:
                    04:ad:d9:e1:d4:ad:f1:f3:c1:7f:a8:96:81:d9:3a:
                    8c:23:bc:d0:08:d1:fa:4b:40:86:03:a9:e5:8c:2b:
                    ef:07:eb:40:3d:ec:ee:7d:96:67:22:84:e9:f5:2c:
                    a1:95:0c:85:d2:37:b9:9f:51:77:a0:26:f2:b7:85:
                    6f:aa:e0:63:93:63:87:69:e8:8b:62:8f:1c:98:34:
                    16:28:ca:ce:34:0e:bb:37:ba:5b:3d:c2:f8:5c:a5:
                    31:93:e4:9d:4b:aa:64:a6:8c:16:9a:0a:e0:56:52:
                    b8:ca:4f:18:bb:39:88:24:0d:c5:73:68:2a:fc:b8:
                    41:1b:73:22:7e:2e:49:a9:4a:64:87:84:35:10:3e:
                    09:7f:41:b7:65:f8:b0:79:28:92:f4:9d:0f:aa:5b:
                    ae:37:dc:72:4f:1d:c2:b1:f9:29:9c:cf:fb:56:ac:
                    24:f0:bb:bc:4c:e2:86:85:f6:7f:8f:51:45:36:53:
                    06:2e:0e:13:52:f9:62:1e:c0:ff:65:cc:50:b8:69:
                    42:d5:e3:4d:ac:24:c9:8c:31:c0:94:52:1d:0c:0a:
                    9a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:72:D7:8D:F7:F1:9C:BE:96:C1:E8:89:A5:05:B6:31:3B:21:2A:FD
            X509v3 Authority Key Identifier:
                keyid:B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:65:20:e6:cf:28:ae:c6:7e:e1:bf:82:cb:40:de:6c:d5:e1:
         9a:5b:14:1f:0f:92:08:8c:75:a0:8a:45:b1:73:15:06:ed:1d:
         79:04:ac:cb:8d:d1:fb:9f:cb:1b:28:42:d6:a8:d9:4f:41:4e:
         e3:9f:f2:ae:1e:83:a8:93:d9:0c:46:6f:0d:88:30:84:e5:43:
         9e:f5:a8:56:d0:22:eb:68:61:2e:65:b7:60:5b:16:17:80:fa:
         38:85:14:66:96:0e:6f:27:7b:4c:f2:59:d7:f9:a2:cc:05:26:
         1d:93:93:e9:3b:20:8c:20:fc:41:e3:0a:fc:01:ee:e2:42:07:
         b3:16:d2:70:55:47:f0:3c:ad:4a:e0:41:ed:1c:93:1f:1d:06:
         43:83:55:d3:04:ee:65:1e:ae:4d:5f:2a:08:99:46:ab:37:d0:
         80:b1:7c:d7:50:b1:25:85:71:25:0d:3c:68:5d:55:28:89:b2:
         52:bb:ed:d0:d6:e0:24:fe:60:1a:2f:4a:4b:1e:9a:a6:d6:86:
         ee:b3:20:e8:77:f0:5c:d7:0e:6e:d7:dd:29:e3:bf:07:fb:6c:
         ca:27:0a:d3:6b:24:17:b6:5b:98:3e:e2:3f:f0:09:9b:96:7c:
         e8:d2:a3:90:dd:db:77:7d:aa:23:c3:ec:7c:90:21:27:74:91:
         5c:a6:da:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:28:37 2025 by rpki-client