Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
File:                     1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json)
Hash identifier:          oXM+L/4NBntZXnR/F81YF4wKWOlUDy3GmXOPtjV03Mk=
Subject key identifier:   F8:E3:75:CF:DD:6E:6C:B3:76:21:77:F1:8C:13:94:54:91:85:48:D0
Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
Certificate issuer:       /CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Certificate serial:       0196C3B939EA678C0D057C99FE22D98A7CB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
Manifest number:          102B
Signing time:             Mon 12 May 2025 09:00:18 +0000
Manifest this update:     Mon 12 May 2025 09:00:18 +0000
Manifest next update:     Tue 13 May 2025 09:00:18 +0000
Files and hashes:         1: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: SeiiEfeF+xK3Qf9z/D74oq43Qni2OaB8ZmoUXb8nUbw=)
                          2: AgasgsgRMARsZv6ZL1FMUAMH49o.roa (hash: rP0A/zCy7W2yRJEKVS59R2RHbWAgc1CTX30QoNq6GK4=)
                          3: kIQph00YRfR7VyoSJ5QKs9_47CM.roa (hash: T6/F9gO6dDf2HDaMUJjHPMQQkg1ian0JLCMBF3Ug9u4=)
                          4: qtgbnELTyW65aNCYZpJqV2m2-Jw.roa (hash: BZNYV9kq2qBJjfITSVC14VQZO/Cg3QnROE1UWyqLr8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 09:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:b9:39:ea:67:8c:0d:05:7c:99:fe:22:d9:8a:7c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501
        Validity
            Not Before: May 12 09:00:18 2025 GMT
            Not After : May 13 09:00:18 2025 GMT
        Subject: CN=f8e375cfdd6e6cb3762177f18c139454918548d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9b:a0:f8:1e:6e:1d:d5:e1:a2:7d:e7:ea:33:
                    30:2e:cd:c5:75:fc:ad:f4:2f:57:43:ed:f0:05:85:
                    26:d2:b8:d6:9c:ab:e5:1b:1c:7c:3b:af:ad:71:b3:
                    2c:94:d6:a1:c9:d7:6e:6d:45:24:2e:2e:d7:17:88:
                    19:4f:1e:37:6e:1f:83:1c:7d:f4:c6:2b:2e:80:b8:
                    4a:b2:34:4b:6c:95:2d:e4:8b:30:00:88:f0:1f:b7:
                    c5:62:a0:91:1c:20:26:f4:ec:f5:1e:d4:7c:dd:6f:
                    46:ff:04:f8:2d:7f:ed:24:c3:3c:0a:03:a7:f1:ec:
                    47:1b:1b:2c:e8:08:0c:36:6a:e4:f6:85:59:58:ed:
                    dc:a1:40:fa:1e:48:40:f0:bc:fb:fa:d1:93:61:5b:
                    5c:a6:65:f8:ba:0f:6a:d0:da:39:07:7f:a6:e1:a7:
                    78:4f:1c:41:22:1b:c9:01:c4:d3:a8:55:47:86:9d:
                    2e:0c:64:26:f6:3a:53:39:0d:26:39:c1:d9:2b:5a:
                    50:fd:3b:bf:ff:1a:b4:b9:21:7a:a2:4e:fe:39:0b:
                    36:35:a2:72:17:95:54:e9:c4:b4:f7:fd:cb:ef:a4:
                    d5:7f:b4:d8:ea:1b:4c:35:bc:6e:56:6e:d4:da:40:
                    06:9c:41:3f:17:3c:27:ad:7f:4c:5a:7f:e5:1e:d4:
                    00:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E3:75:CF:DD:6E:6C:B3:76:21:77:F1:8C:13:94:54:91:85:48:D0
            X509v3 Authority Key Identifier:
                keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:13:dc:05:7d:0c:6c:59:4e:31:b7:2b:e2:d8:70:c7:b1:0f:
         ff:dd:30:49:11:3a:db:1a:73:ec:8e:b6:e3:4d:82:f0:fb:b4:
         ff:2e:f3:c4:d3:f7:c7:ce:bf:a8:bc:ea:cf:cc:e0:1a:6c:bf:
         bf:3b:48:2d:88:83:a4:a9:c3:35:53:a8:77:f1:29:9d:be:45:
         02:12:16:ec:37:57:d6:a8:d9:32:ee:fb:9c:3d:ec:e4:6f:b0:
         22:36:d0:3b:45:49:7e:6a:ee:c7:0b:67:38:b7:b5:b0:60:ac:
         8b:71:f8:d2:cd:a4:18:36:01:aa:f7:5c:01:04:23:cf:1f:d2:
         93:8c:82:0d:fd:97:f4:e6:84:c3:e5:ae:6d:2d:f9:5f:66:ca:
         07:37:b1:9a:60:6d:6b:8e:c0:22:f5:ae:a5:fa:75:a8:85:a0:
         5a:a3:cb:8a:b1:15:26:45:24:b7:66:ab:62:2b:ce:1c:70:52:
         8a:90:4b:d1:3f:87:1d:2e:b4:f7:84:12:9c:bc:26:78:4f:91:
         76:8c:38:d0:9a:0a:12:59:49:60:d0:db:3e:89:d4:e0:13:2c:
         cc:5f:0e:d4:eb:be:7c:14:48:96:6d:66:0b:e6:64:3e:c3:11:
         14:4e:5e:fa:76:fd:d1:a3:82:63:7e:50:5b:14:72:0e:00:65:
         b3:95:eb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:54:29 2025 by rpki-client