Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
File:                     qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft (raw, json)
Hash identifier:          WdVOoWHBif6o+2jwL++90taFsDaIzy/nocpGQ2X6P/I=
Subject key identifier:   75:9B:1E:A4:94:03:C6:4F:E0:CD:45:E1:A2:E8:1B:7A:75:0B:4C:FE
Authority key identifier: A8:03:2F:57:A6:11:9B:69:2A:2B:8F:14:2C:E4:94:EC:08:B1:FC:D8
Certificate issuer:       /CN=a8032f57a6119b692a2b8f142ce494ec08b1fcd8
Certificate serial:       0196A12D57AFE0791FB828EFDAB298547A1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
Manifest number:          029A
Signing time:             Mon 05 May 2025 16:00:25 +0000
Manifest this update:     Mon 05 May 2025 16:00:25 +0000
Manifest next update:     Tue 06 May 2025 16:00:25 +0000
Files and hashes:         1: YnK9gT6S7S0RgJeRsD04H4ISSzM.roa (hash: DtfDFV6FFewqe27Bp/4vezKhP0+2FJRS8CYQqbxzDS4=)
                          2: qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl (hash: BEyMn4eV2fAo8H/5KSyJmQKuBkhNZOs1onAUa/Ah3Co=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 16:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:2d:57:af:e0:79:1f:b8:28:ef:da:b2:98:54:7a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8032f57a6119b692a2b8f142ce494ec08b1fcd8
        Validity
            Not Before: May  5 16:00:25 2025 GMT
            Not After : May  6 16:00:25 2025 GMT
        Subject: CN=759b1ea49403c64fe0cd45e1a2e81b7a750b4cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:6a:41:68:ea:4b:45:c9:39:4d:b9:df:d7:
                    27:db:7a:a7:28:11:76:1e:c3:41:88:4f:bb:78:bc:
                    17:bb:a3:82:7d:e1:fe:58:82:77:f7:17:9c:64:62:
                    49:59:71:90:ed:bd:1b:57:b4:4e:dc:fc:65:46:06:
                    87:94:3c:c6:c2:08:7e:58:5e:3a:9c:5b:e8:f2:d1:
                    c9:d9:eb:d5:97:47:26:2d:96:14:f2:45:a2:48:49:
                    4f:37:25:e8:48:8a:54:9f:6b:9e:7d:44:a8:49:51:
                    9f:89:80:19:a4:01:15:55:96:a6:83:f2:0b:1f:e7:
                    c6:db:aa:a7:70:a7:9e:37:27:0e:3d:4a:54:4a:1c:
                    d1:2c:00:61:24:0a:78:99:f7:32:fe:f5:96:54:0a:
                    5f:ed:1c:8f:67:1e:c0:ff:8e:91:18:0c:72:3c:ff:
                    cd:b2:84:f4:61:f7:74:14:5a:d7:e9:96:a2:43:a3:
                    0d:aa:4b:9c:a8:92:41:54:3d:6d:8a:c3:5b:fb:5b:
                    2e:43:11:e1:60:33:1e:81:b7:6a:14:3e:de:52:6a:
                    b4:35:53:63:1e:f9:0f:87:71:aa:7b:b7:ef:2b:53:
                    5c:9b:02:cf:1e:51:09:c6:12:28:f2:6b:57:d8:81:
                    77:eb:29:1e:63:ca:15:85:c8:6d:d1:90:47:8f:59:
                    9c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9B:1E:A4:94:03:C6:4F:E0:CD:45:E1:A2:E8:1B:7A:75:0B:4C:FE
            X509v3 Authority Key Identifier:
                keyid:A8:03:2F:57:A6:11:9B:69:2A:2B:8F:14:2C:E4:94:EC:08:B1:FC:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c5:a8:e9:30:f1:b9:9c:31:4d:ea:bf:73:c1:04:e0:04:97:
         2e:20:a0:5b:f6:73:4f:ef:38:8e:b8:01:8a:87:b5:85:49:56:
         82:71:5e:de:8d:f1:27:cd:1b:8e:39:76:37:fe:08:4c:33:47:
         9b:4a:b3:9f:86:3c:57:b5:fd:02:ad:cd:da:b9:34:1c:24:d6:
         fe:ad:a0:c7:f2:27:9a:98:a1:4a:0e:5a:b2:71:47:cd:d7:2c:
         91:53:bd:ba:90:aa:5d:7c:17:e5:d8:c9:17:63:81:ac:93:28:
         a5:84:53:29:34:b8:c8:a2:35:69:9c:be:17:b7:bc:97:98:1f:
         c9:39:c4:17:e9:e8:1c:2b:4d:c5:ff:ee:61:41:f7:3a:ce:8c:
         e3:65:eb:3c:39:b3:e5:dd:3a:16:53:7b:c9:86:d6:a4:c9:ef:
         ba:66:69:92:7c:66:27:6a:c2:24:6f:b0:fc:46:ae:7a:15:7d:
         34:30:4a:0e:67:46:09:ca:64:6e:27:0b:ff:8f:49:47:d1:36:
         bd:f7:57:a3:0e:2e:29:38:ec:d4:66:fe:0d:16:e2:57:b9:e7:
         44:fa:6b:2d:46:a7:4b:65:bf:1b:d4:69:35:b1:3a:d0:b1:8a:
         97:98:e5:a6:1f:76:14:d4:fc:a1:ea:a5:b6:75:64:a8:0b:b6:
         d9:5f:7a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:03:19 2025 by rpki-client