Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
File:                     rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft (raw, json)
Hash identifier:          KVbkhDf/P7WhIwD5vncHKa1UNK1q2flFjclhggGWjhs=
Subject key identifier:   1A:AF:FE:C2:EC:36:99:5E:10:5B:22:E5:CD:AA:8B:81:CD:75:2F:BB
Authority key identifier: AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
Certificate issuer:       /CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Certificate serial:       0196C0B8AB85A1BF7692FE4B37D45DC0BE0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
Manifest number:          01E6
Signing time:             Sun 11 May 2025 19:00:50 +0000
Manifest this update:     Sun 11 May 2025 19:00:50 +0000
Manifest next update:     Mon 12 May 2025 19:00:50 +0000
Files and hashes:         1: rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl (hash: Fao6TbtQMsHbArgfxRTWxNptjbuu1BXPoJGIVDDFxn8=)
                          2: ymqELlMii23trp9Ry-AEB-L5Gsg.roa (hash: bg95RMRsGjw0+vtsFPQKv+EI6I0p/reBLLmPNmAd/+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:b8:ab:85:a1:bf:76:92:fe:4b:37:d4:5d:c0:be:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb8385d0857080cfc013aa521bde6a3a93e4812
        Validity
            Not Before: May 11 19:00:50 2025 GMT
            Not After : May 12 19:00:50 2025 GMT
        Subject: CN=1aaffec2ec36995e105b22e5cdaa8b81cd752fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:af:25:59:fd:25:84:82:71:af:1e:39:9f:0d:
                    1f:36:be:75:0f:1f:8b:d1:dd:6f:a2:34:d3:57:5e:
                    52:b2:51:83:35:d3:5c:b4:a3:1c:34:31:90:da:0a:
                    a2:b9:dd:dc:50:15:1e:ec:24:37:70:59:05:32:de:
                    d2:7a:a2:5e:ff:8f:47:0d:1a:a9:6b:e7:5d:64:7a:
                    4a:44:ce:65:5e:8c:43:35:41:94:dd:6b:85:9a:57:
                    ef:f8:e1:36:e1:e0:9c:70:f8:d7:50:21:5f:b5:e9:
                    40:e1:c8:99:7c:10:34:d7:fc:3a:d5:e5:5d:fa:32:
                    59:ea:4b:dc:34:68:1b:57:e4:55:a7:f0:11:39:3a:
                    19:33:0f:d4:d1:60:6d:03:8b:ed:7b:25:0d:94:eb:
                    9d:af:9b:a8:51:da:71:18:e3:bf:29:38:fb:38:7f:
                    de:5e:ad:28:9d:c7:cf:71:72:ea:05:65:2f:66:7c:
                    0b:bd:dc:cc:1e:fe:71:ff:41:f0:0b:f5:85:62:84:
                    f4:3b:b6:52:e4:37:5b:61:b0:50:9a:d5:dc:1d:fb:
                    c5:c2:9b:6e:bf:af:cb:da:1a:aa:3c:a1:67:4b:07:
                    fd:b5:91:60:0c:8a:b2:77:b7:18:82:f8:eb:b1:b5:
                    f1:d5:ec:c3:1b:a9:34:5f:fc:d1:1b:c5:47:6c:82:
                    e0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AF:FE:C2:EC:36:99:5E:10:5B:22:E5:CD:AA:8B:81:CD:75:2F:BB
            X509v3 Authority Key Identifier:
                keyid:AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f1:29:01:4b:3a:6b:94:e4:74:97:23:d0:18:45:07:7e:6d:
         3b:ad:15:0c:6a:8e:c9:75:d2:3c:56:0e:be:45:bb:3d:95:ed:
         e2:1f:dc:59:63:5e:fa:ce:1e:9f:f4:d8:c8:12:89:ae:77:0a:
         f4:af:b9:0c:e3:35:a2:3f:de:c0:73:dd:77:e2:29:0e:85:2d:
         df:f2:5b:45:3e:b7:da:16:9e:ab:2c:67:e3:01:04:d8:87:5a:
         77:ad:b3:70:7e:8f:53:54:1c:e3:1c:f8:1e:bc:45:67:47:d5:
         ed:b5:3b:74:62:95:bf:ed:45:d2:56:32:fb:dc:2a:05:8f:5a:
         8e:7d:d9:ad:17:b5:f3:bd:6b:8b:fc:49:5d:a3:43:27:54:4f:
         a5:04:b3:88:c8:89:61:d1:bc:2f:8f:73:fe:f2:f8:9b:62:9a:
         e0:1b:f9:1b:bc:e9:08:d4:8f:3b:ca:26:e7:b3:34:bd:0b:ae:
         67:8c:82:e7:b4:82:66:f0:81:7f:bc:40:5e:32:34:6f:70:c2:
         c3:f0:84:53:6b:bf:49:81:2f:d3:b2:19:28:2b:06:2d:05:6c:
         5a:05:25:10:19:c6:11:2c:73:22:69:48:29:ce:b6:56:7b:b6:
         c4:1b:6f:09:90:58:5e:96:08:cd:b9:a6:77:bd:51:e9:3d:4a:
         58:30:5d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:17:01 2025 by rpki-client