Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
File:                     cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft (raw, json)
Hash identifier:          Djw7QwhkGzuHalafjKsa0Q3DvoFOEjshv+4N2p9uNDc=
Subject key identifier:   6B:3C:9C:0C:CA:33:D7:93:83:58:72:6E:65:B3:AC:AD:1E:AC:80:AF
Authority key identifier: 71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE
Certificate issuer:       /CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
Certificate serial:       0196C616015D27A5504D3FCB04CDBB7CC7C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
Manifest number:          1539
Signing time:             Mon 12 May 2025 20:00:52 +0000
Manifest this update:     Mon 12 May 2025 20:00:52 +0000
Manifest next update:     Tue 13 May 2025 20:00:52 +0000
Files and hashes:         1: MXRY_gWfemtb4d9S12bJTdSx1HE.roa (hash: PGm1ZEfOELutLc4FdNXikN8yLBd24rRaKhDmxZUHdZk=)
                          2: cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl (hash: Eemv4uGPCJC3vq4JDoKV/cSwjikF3RmPFc5y41RawXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:16:01:5d:27:a5:50:4d:3f:cb:04:cd:bb:7c:c7:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
        Validity
            Not Before: May 12 20:00:52 2025 GMT
            Not After : May 13 20:00:52 2025 GMT
        Subject: CN=6b3c9c0cca33d7938358726e65b3acad1eac80af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:28:a0:f2:1d:09:b0:70:b0:a9:18:df:32:9b:
                    db:b7:b8:a0:1e:55:07:f7:06:f3:0d:cc:cc:be:57:
                    35:69:78:16:2f:64:b5:c3:a7:91:65:5a:82:a6:6c:
                    60:6f:8f:24:6c:36:40:df:57:01:29:0c:a8:de:37:
                    7e:1f:a5:86:75:9c:74:2f:fa:aa:73:4c:03:b7:e8:
                    c7:52:ae:42:4f:81:52:63:e5:89:a5:66:e6:b3:ae:
                    78:72:b3:6c:71:e7:05:33:ab:55:66:68:0e:d8:4d:
                    31:52:2e:ed:8a:a9:07:84:59:4d:58:35:e3:f0:1c:
                    3f:5f:81:22:f5:14:3f:31:29:11:4a:d2:0c:71:ce:
                    bb:f2:9a:5e:85:d4:cc:49:77:ee:22:cc:54:5b:9f:
                    c7:75:12:37:0d:e5:79:88:04:75:eb:0e:f3:e6:3a:
                    31:c2:a7:4e:66:27:fc:0d:76:96:b7:7e:c1:f1:2b:
                    08:5a:ed:61:b0:30:29:8e:93:3f:8c:3d:c8:d8:4c:
                    0c:d7:73:ec:69:0a:9e:2f:3f:4f:30:5e:3e:87:c9:
                    3b:96:5b:c9:d9:6e:98:1d:cb:71:7e:a2:43:5f:35:
                    dd:3b:2d:0e:14:15:8d:cb:0e:89:ac:46:39:5d:47:
                    bc:fe:f4:24:ba:88:04:32:c3:ac:10:05:ee:f8:f3:
                    68:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3C:9C:0C:CA:33:D7:93:83:58:72:6E:65:B3:AC:AD:1E:AC:80:AF
            X509v3 Authority Key Identifier:
                keyid:71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:c1:68:1f:eb:9b:24:9b:2b:4f:95:f2:3e:98:90:8f:f5:cc:
         a5:7d:8a:63:63:2c:86:c8:c8:8d:f6:92:93:1e:0e:e2:b0:94:
         d0:63:5b:c1:a4:01:cd:02:1d:1b:d1:08:f3:16:77:d0:48:eb:
         80:b8:b4:fe:5a:31:65:9f:42:c2:24:8f:1b:bd:b5:76:61:e2:
         ca:da:2c:ad:e0:e6:a5:51:7f:c2:53:6d:e3:7c:cf:01:23:5f:
         25:38:ce:be:09:5d:e0:48:f8:6f:30:9c:fd:24:d7:cb:97:7f:
         de:02:90:4e:87:27:62:46:50:d7:d1:2c:e8:63:8a:bc:bd:51:
         22:72:ad:22:0a:c2:9f:5e:c1:84:6b:67:cd:68:ce:c3:f4:4d:
         70:2a:25:2a:62:54:42:fc:36:78:7a:de:08:07:a4:96:59:85:
         40:c6:28:7c:b8:e1:67:c0:44:9e:67:ad:c9:3b:1b:35:da:e8:
         83:bf:9c:33:bd:fe:86:c3:e3:75:b1:be:0e:a3:37:47:31:3b:
         f7:72:3b:ed:16:8d:99:97:e4:f8:34:b6:16:de:74:00:44:46:
         47:5c:58:65:1e:f4:bc:33:37:e6:06:5a:e0:6d:3c:94:4d:f2:
         b4:88:3b:d2:9e:ec:78:dd:b6:67:49:fa:fe:02:2a:3a:79:f4:
         7c:4e:90:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:55:07 2025 by rpki-client