Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft
File:                     9yQQnyF3AuaYDbkFOo9HEPwKCno.mft (raw, json)
Hash identifier:          7QeXAAMB8N8thIcJtRI7Wa6KjUBtCzs6GPeYKovmypY=
Subject key identifier:   59:A9:18:4B:B4:4F:0A:2E:53:C5:AF:82:91:CC:34:F0:7E:0E:26:3C
Authority key identifier: F7:24:10:9F:21:77:02:E6:98:0D:B9:05:3A:8F:47:10:FC:0A:0A:7A
Certificate issuer:       /CN=f724109f217702e6980db9053a8f4710fc0a0a7a
Certificate serial:       01965C158BF4D0207048F8418E7139A03A49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft
Manifest number:          11
Signing time:             Tue 22 Apr 2025 06:00:38 +0000
Manifest this update:     Tue 22 Apr 2025 06:00:38 +0000
Manifest next update:     Wed 23 Apr 2025 06:00:38 +0000
Files and hashes:         1: 9yQQnyF3AuaYDbkFOo9HEPwKCno.crl (hash: +oJIX+80QLawFisLC+O7ZO7a4xH1jcDOh69FQRm/Lxw=)
                          2: nFar_UOXP4QzN4-h1MF9qknQEIw.roa (hash: tJ5LZZ8cOfCs7MBCUeqrXfhErlPn41y+8yI8NHVM7o0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5c:15:8b:f4:d0:20:70:48:f8:41:8e:71:39:a0:3a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f724109f217702e6980db9053a8f4710fc0a0a7a
        Validity
            Not Before: Apr 22 06:00:38 2025 GMT
            Not After : Apr 23 06:00:38 2025 GMT
        Subject: CN=59a9184bb44f0a2e53c5af8291cc34f07e0e263c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:01:ad:ab:2d:ef:a5:4f:76:ce:36:fc:2a:
                    72:d6:d1:63:e4:87:de:c4:2a:02:84:ec:62:3a:4b:
                    11:e1:fb:e9:99:39:7a:b2:5f:e4:12:b2:17:99:34:
                    b8:d6:0a:79:b0:e4:7d:52:6b:92:24:57:d8:1a:01:
                    0a:22:ef:d8:1c:cd:85:34:0f:15:27:48:ba:7f:da:
                    66:77:6a:43:dc:93:3d:7d:d0:f3:50:05:8b:7d:d5:
                    0a:60:47:bb:6e:01:73:7d:92:60:df:7f:92:c4:72:
                    e6:27:c8:56:e4:f2:42:d1:2e:b0:96:e4:ce:3f:2a:
                    c4:ad:44:2c:54:d8:9d:03:27:b9:21:af:11:6b:e4:
                    90:d5:4b:72:9c:8d:d1:7f:78:83:84:d9:e2:7b:11:
                    62:46:c1:ed:48:ca:5a:3d:53:2d:c3:5d:df:f6:83:
                    5a:75:2e:6e:27:55:aa:87:f6:94:cd:79:43:3b:f8:
                    36:a0:d8:ef:a8:e2:a7:b9:6f:f8:f1:15:4e:45:a8:
                    be:87:6b:d6:1a:68:2f:94:89:40:ce:36:4b:78:3a:
                    fc:2d:28:b7:d3:cf:ee:db:c7:ec:09:a6:34:82:90:
                    f8:ed:9b:56:48:a7:33:95:af:69:2b:bb:c8:3b:80:
                    1c:f5:e4:72:f2:f4:b9:5d:08:1e:c2:21:80:a1:35:
                    96:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A9:18:4B:B4:4F:0A:2E:53:C5:AF:82:91:CC:34:F0:7E:0E:26:3C
            X509v3 Authority Key Identifier:
                keyid:F7:24:10:9F:21:77:02:E6:98:0D:B9:05:3A:8F:47:10:FC:0A:0A:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ef:29:cd:77:32:a9:50:14:03:4f:1e:4d:26:55:5f:2f:a6:
         7b:f4:ec:4f:01:3a:00:c9:f1:6f:d0:05:60:35:49:1a:a8:27:
         9c:ea:cb:15:c4:24:49:a8:53:90:2d:c1:cd:32:a0:a9:65:c5:
         05:da:0d:95:a5:8e:f8:54:c2:7a:6a:fe:3a:78:f8:d2:41:a1:
         bb:4d:5f:77:0f:50:94:37:e5:27:4b:0e:0b:88:e5:6f:5b:fd:
         24:98:27:1b:e0:ed:28:e4:89:5c:ff:1b:c5:cf:1e:4c:ac:e1:
         f4:2d:a8:fc:72:cf:b7:27:be:63:6f:19:d0:e1:0d:66:44:3d:
         c8:a5:61:ae:6c:48:43:3e:ca:b3:d6:3a:ee:5e:0c:1f:ff:25:
         1c:b0:14:4c:19:4f:b0:b1:e7:34:ce:65:c4:59:ee:d2:3e:11:
         86:84:c0:9c:ca:e6:4c:4b:f3:1c:42:49:a8:b4:c4:84:9c:77:
         79:6e:fa:51:d2:50:65:10:18:ed:f1:ac:3c:77:b1:ee:63:0e:
         65:50:8e:91:0f:c0:8d:ad:5e:e5:0e:9c:aa:74:80:6a:16:51:
         4b:e7:71:4a:f1:40:ea:49:c2:11:a5:37:19:d1:a7:68:b5:28:
         ad:8a:54:15:d9:d7:bd:cd:59:28:e0:c4:bf:22:6c:b9:05:09:
         c8:ec:90:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:28:40 2025 by rpki-client