Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.mft
File:                     6b_QQQx787sddbGKyx6WOTrSGyY.mft (raw, json)
Hash identifier:          rqYsd3tBS8H9w+UnqNz7my1Z34XiH38kL0CgLH9LDSI=
Subject key identifier:   5C:75:B9:CC:92:BD:EA:CF:55:96:89:3C:F3:C2:25:4D:48:18:6F:FF
Authority key identifier: E9:BF:D0:41:0C:7B:F3:BB:1D:75:B1:8A:CB:1E:96:39:3A:D2:1B:26
Certificate issuer:       /CN=e9bfd0410c7bf3bb1d75b18acb1e96393ad21b26
Certificate serial:       0194C3F57C86FA8925A2C88FADFEFD77C1F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6b_QQQx787sddbGKyx6WOTrSGyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.mft
Manifest number:          7B
Signing time:             Sun 02 Feb 2025 00:00:32 +0000
Manifest this update:     Sun 02 Feb 2025 00:00:32 +0000
Manifest next update:     Mon 03 Feb 2025 00:00:32 +0000
Files and hashes:         1: 1hM339koaZ1Fc_f1svTZWLqGQW0.roa (hash: NC6qjORYVmzCZ4JBS9FMakUvHJDgr6iCjI7kRUYNPYY=)
                          2: 6b_QQQx787sddbGKyx6WOTrSGyY.crl (hash: +VcH2oRAmvqB5Skce9AQTYcrels2EA69BSFJrptvwFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6b_QQQx787sddbGKyx6WOTrSGyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:f5:7c:86:fa:89:25:a2:c8:8f:ad:fe:fd:77:c1:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bfd0410c7bf3bb1d75b18acb1e96393ad21b26
        Validity
            Not Before: Feb  2 00:00:32 2025 GMT
            Not After : Feb  3 00:00:32 2025 GMT
        Subject: CN=5c75b9cc92bdeacf5596893cf3c2254d48186fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9c:0d:04:b9:f3:06:9a:6a:6a:7c:a2:cc:52:
                    30:0e:1d:ee:08:85:f0:2e:0d:86:10:3c:7d:cd:7f:
                    72:f8:bb:50:ec:31:a9:75:97:6f:35:98:fb:12:64:
                    45:54:14:ad:ee:8f:13:f3:3f:ff:05:2a:5f:7b:8a:
                    e0:52:1b:2e:d7:03:a7:75:9c:f0:53:12:27:d3:31:
                    c9:c1:03:45:77:07:7b:d0:8b:d5:24:5e:b8:a8:28:
                    c0:0d:be:c8:e4:31:99:27:de:f5:11:f9:d2:10:c9:
                    a6:29:57:fc:0a:53:4f:77:70:6b:65:a5:6c:d1:94:
                    04:1f:6e:5d:11:81:dd:8a:81:f8:2d:37:de:64:b0:
                    af:a3:bc:c8:c9:40:72:de:ac:c6:79:c2:cb:ee:21:
                    ed:43:c0:ad:1e:a0:20:92:b4:fc:78:c5:03:0a:6f:
                    7c:45:5c:2b:cf:5c:7e:31:d3:0c:ce:59:4f:f0:25:
                    5e:35:3f:23:34:de:81:ba:ab:48:dd:6a:4b:75:bb:
                    95:9c:e2:97:70:f6:dd:eb:cf:b0:6c:ae:74:76:1a:
                    d2:36:4f:08:7a:ae:3a:7d:f0:11:ea:33:fa:40:a3:
                    35:e5:e2:b7:69:e3:d6:10:a1:fa:45:76:f4:49:8c:
                    85:bf:03:f7:64:91:8a:d8:58:35:22:59:1f:b1:35:
                    e7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:75:B9:CC:92:BD:EA:CF:55:96:89:3C:F3:C2:25:4D:48:18:6F:FF
            X509v3 Authority Key Identifier:
                keyid:E9:BF:D0:41:0C:7B:F3:BB:1D:75:B1:8A:CB:1E:96:39:3A:D2:1B:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b_QQQx787sddbGKyx6WOTrSGyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:91:12:a3:b4:46:44:f7:3c:a1:fe:e4:f8:f2:14:43:a5:64:
         ff:0c:11:29:16:93:98:71:b6:31:22:ca:87:c7:22:4d:44:eb:
         98:fb:8b:a5:1f:b4:6c:34:1b:4f:02:74:e8:3c:6a:04:4c:40:
         fa:6f:7c:67:bd:8f:f3:6a:7f:c7:57:33:2f:af:f0:28:09:13:
         44:56:9c:20:49:a5:ea:98:f5:bc:75:9c:ac:cc:a7:60:67:b1:
         03:76:76:0a:8a:3c:ce:6a:0c:e7:7e:81:cd:8c:d7:75:e4:ea:
         f7:a9:4c:56:1e:0f:1a:34:dd:91:53:c8:b3:4f:e3:75:42:16:
         dd:7b:9d:7d:66:d0:02:7a:92:5e:ec:0e:c3:1a:1a:87:17:1d:
         55:7e:e8:eb:c0:b6:93:3c:bd:20:b7:0e:13:15:6c:28:6c:dc:
         d6:94:84:2c:6b:71:c3:94:6f:fe:c0:48:d8:ae:7a:02:fc:05:
         0c:2c:e5:e5:e9:e7:c7:4b:96:17:b7:f0:68:2f:95:8b:44:60:
         ca:cd:a9:ad:49:34:bf:38:04:ba:7e:5f:a6:da:ff:9e:2b:76:
         53:59:7f:50:ad:17:32:09:55:09:e1:8d:5a:87:66:96:1c:12:
         de:56:b9:8c:75:67:1b:0c:6a:12:66:9f:ed:7b:49:e2:a9:ad:
         48:8a:77:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:54:55 2025 by rpki-client