Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
File:                     bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft (raw, json)
Hash identifier:          D26Efdhqe985D9kJkK1cHe/PQXMxaV3rGwpbGm+l60g=
Subject key identifier:   0D:B8:74:76:0B:80:59:B7:ED:F9:F6:07:9B:E9:7B:2E:1B:3A:35:F0
Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
Certificate issuer:       /CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Certificate serial:       019644444581D8B28A4B797032F034E6EF96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
Manifest number:          092C
Signing time:             Thu 17 Apr 2025 15:00:47 +0000
Manifest this update:     Thu 17 Apr 2025 15:00:47 +0000
Manifest next update:     Fri 18 Apr 2025 15:00:47 +0000
Files and hashes:         1: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl (hash: FC3EsjIUR5b7K5dwetAvyTdTjbrZr5m4TzFFjoErUFY=)
                          2: pE_MPWSO2KtGb_d1FHNpKYmtUdU.roa (hash: zv4aepR6TBKlEBTPf/7SbPyiKj3XM1LCzYruoFBSb5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 15:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:44:45:81:d8:b2:8a:4b:79:70:32:f0:34:e6:ef:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754
        Validity
            Not Before: Apr 17 15:00:47 2025 GMT
            Not After : Apr 18 15:00:47 2025 GMT
        Subject: CN=0db874760b8059b7edf9f6079be97b2e1b3a35f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:77:d9:69:1a:2e:91:ab:67:fc:0b:95:f5:2d:
                    1e:8f:dc:fd:d3:69:19:86:3c:c9:73:5e:c8:a0:6a:
                    9c:6b:77:0a:c2:5c:2c:89:61:bb:5d:27:90:4a:54:
                    c3:f9:69:f5:b6:77:89:f8:53:90:d7:f1:35:3f:34:
                    7e:46:a2:8d:29:cd:13:fd:d8:8c:12:18:db:9e:55:
                    f5:a2:9e:6f:65:9e:5b:80:84:05:cf:6e:10:98:5c:
                    12:04:c4:26:91:37:86:5c:8e:f0:3e:23:c6:fe:c2:
                    89:b9:ea:b7:94:9d:46:fe:1b:c3:bd:5f:76:09:fd:
                    5c:e0:4c:55:dd:55:25:58:d1:87:8c:5c:1c:1b:50:
                    b0:1f:5c:2c:67:f3:4f:33:9b:8d:64:3a:05:01:11:
                    a2:37:18:b4:74:37:02:ae:42:86:c4:1e:e8:f3:a3:
                    54:74:e2:54:60:7b:98:07:88:87:45:7a:be:90:7c:
                    66:18:3c:5e:6a:1f:f2:02:c4:b6:a3:23:c1:43:d8:
                    82:06:15:c3:f6:60:11:ba:37:6c:e0:5c:af:7f:95:
                    47:1e:56:f1:b3:0c:fc:6b:0f:bb:ea:e8:42:23:fb:
                    4b:6b:e1:b8:25:5c:26:74:e0:7d:92:6e:e8:83:5e:
                    a4:57:14:ba:52:08:6c:19:d5:a1:de:33:25:ad:8f:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B8:74:76:0B:80:59:B7:ED:F9:F6:07:9B:E9:7B:2E:1B:3A:35:F0
            X509v3 Authority Key Identifier:
                keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:32:98:9a:5a:5c:3f:9b:c9:27:75:14:4c:c4:58:02:82:a0:
         4a:34:e2:74:43:cd:36:a7:bb:c7:71:38:65:39:8d:26:64:07:
         3c:3e:62:19:a8:1c:7b:0c:31:a3:2f:dd:3a:61:2b:ef:c0:58:
         9c:3f:8a:0a:e2:cb:7c:5b:8f:b9:b7:77:fa:cf:0d:a1:9c:6e:
         74:b8:ed:ed:fc:b9:fe:c8:be:f6:4a:7e:33:0b:ec:61:e7:b5:
         fe:32:65:86:ab:a7:a9:b4:7b:0e:b9:6a:b8:00:55:7e:9f:50:
         2c:28:4a:0f:dd:52:20:b0:15:56:91:be:93:f1:84:0b:85:34:
         d7:5e:f4:34:8f:88:f7:6e:36:73:10:68:99:31:bc:2f:bd:33:
         91:a4:b7:9b:49:8a:9b:0e:43:6d:56:3e:74:1e:67:73:b8:7b:
         45:b3:4c:7b:d5:d4:e3:db:ce:91:9a:f2:bf:af:08:fd:1c:f2:
         59:2a:bf:b8:0c:e1:52:c8:f4:1d:c5:ee:e2:cd:6c:ec:13:52:
         b0:c8:88:83:86:49:82:03:2e:26:1d:86:e6:ac:4f:dd:5f:da:
         9c:56:52:89:b6:60:80:c4:99:cb:cf:aa:59:87:ee:41:68:5f:
         3f:61:1c:60:0b:ec:35:2d:72:fd:67:b6:6d:de:74:dc:81:5e:
         9f:b7:b4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:01:22 2025 by rpki-client