Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
File:                     0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft (raw, json)
Hash identifier:          ZDhKEazZPj/nPz7N6TBkNm8ZUWiZtVzlKIoKQi8thrY=
Subject key identifier:   6C:E1:5A:3A:F0:B8:7A:46:41:69:D3:2C:92:1B:AD:96:51:80:C0:6A
Authority key identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
Certificate issuer:       /CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Certificate serial:       0196C270024BAC911319647D4E58A8EA139E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
Manifest number:          093A
Signing time:             Mon 12 May 2025 03:00:42 +0000
Manifest this update:     Mon 12 May 2025 03:00:42 +0000
Manifest next update:     Tue 13 May 2025 03:00:42 +0000
Files and hashes:         1: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl (hash: 9kd+W3b55SsAqAhoq3JZGnBg/iw6raai8oKOvKVkmXo=)
                          2: XLp6CpBQr9azCpsnYXzng1ufYf0.roa (hash: VoQFnds5dZA1et1XDrrDT8jx8hBkjrNF5oeGODTmq4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:70:02:4b:ac:91:13:19:64:7d:4e:58:a8:ea:13:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
        Validity
            Not Before: May 12 03:00:42 2025 GMT
            Not After : May 13 03:00:42 2025 GMT
        Subject: CN=6ce15a3af0b87a464169d32c921bad965180c06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:14:f2:44:35:21:9e:9a:5f:78:f7:3b:ae:42:
                    c5:2b:3c:05:a6:81:c1:3a:4b:9d:d0:30:e5:7d:5e:
                    07:bc:ed:98:15:4d:be:3d:76:d3:d7:f7:3c:51:96:
                    9f:2a:eb:b2:67:73:aa:fd:08:e9:bb:55:72:1b:85:
                    fb:68:c5:8d:28:70:61:6a:ed:a1:f8:b0:94:6d:20:
                    28:dd:18:b9:0a:0b:c9:25:64:12:56:bb:9b:fb:57:
                    ce:5a:01:3b:47:ae:76:66:b3:0a:af:ff:9b:24:47:
                    b2:6b:b5:39:9b:a9:31:a6:ee:a1:c8:ca:45:0c:89:
                    6e:14:c6:74:e3:9e:a9:1f:1b:93:4a:4c:50:0d:39:
                    95:b7:11:1d:d6:53:22:14:d8:9d:23:9e:67:20:40:
                    11:c8:48:27:8d:e6:35:38:95:99:2a:f6:ed:55:b8:
                    71:e2:6a:7d:00:4b:32:89:56:97:95:26:6f:37:19:
                    ed:27:f9:32:fd:6a:91:5e:6f:78:ec:be:8f:2c:83:
                    46:e6:b7:08:de:06:d8:5b:96:bc:32:91:83:6a:b2:
                    34:42:3c:29:78:f5:b8:05:1b:be:e5:e9:e7:17:26:
                    36:39:9e:83:42:f5:3f:04:41:e3:1c:2a:de:42:81:
                    7b:15:8c:04:86:d6:a2:03:8a:dc:2a:2b:2a:06:72:
                    b4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E1:5A:3A:F0:B8:7A:46:41:69:D3:2C:92:1B:AD:96:51:80:C0:6A
            X509v3 Authority Key Identifier:
                keyid:D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:2c:bc:21:02:2c:b3:ad:1b:c7:7a:a4:aa:35:ee:60:57:5a:
         22:8a:b7:4b:7f:1c:34:23:6b:d1:5e:42:4c:53:f9:4c:ec:f6:
         c6:30:eb:d2:58:46:46:7b:42:76:b8:e7:04:46:16:c6:80:a6:
         a2:61:66:20:51:b9:99:a6:1b:16:f6:ec:2b:18:69:8a:9e:8f:
         6f:d7:51:44:2f:57:f9:93:bb:0f:38:47:e6:cb:01:6e:3b:b6:
         e0:96:9c:ec:8f:ce:9f:51:4f:ba:4d:33:d8:ba:b2:27:22:c6:
         6d:75:41:e0:77:89:63:da:24:43:26:cb:de:87:95:a6:2a:76:
         b3:7c:a3:f3:c1:20:80:9f:85:0d:94:be:2f:3d:18:56:63:53:
         73:93:95:42:c3:1c:81:37:2e:b7:af:29:bb:38:4f:3f:1e:9d:
         f5:04:83:7c:0e:63:a2:75:b7:5e:1f:3d:75:b5:23:8d:ed:f6:
         6c:50:2d:e6:d1:13:d4:aa:6d:27:2d:b2:a2:0d:60:3a:d7:00:
         11:76:05:0a:b4:66:1f:12:5b:dc:6e:3e:5d:cf:d8:3b:65:ee:
         04:88:1c:88:90:5e:db:0f:d1:12:14:d6:38:0c:d4:d9:78:69:
         0d:3d:72:62:23:79:fd:45:32:30:2e:8f:2e:c5:8c:47:91:9a:
         35:c3:57:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:10:03 2025 by rpki-client