Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
File:                     q5udbmrCgujBAADMPbxK3z_gH-I.mft (raw, json)
Hash identifier:          S3nyAOjjjDIvWPtwgNob9t8CcejgZa8BgPYSOec15ck=
Subject key identifier:   8D:A9:3C:59:34:1F:7D:D0:35:87:14:EF:A9:B0:EF:61:50:96:D9:C3
Authority key identifier: AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
Certificate issuer:       /CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Certificate serial:       0196451FC59CE3ABEAC8FE56F205C7A22EAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
Manifest number:          087C
Signing time:             Thu 17 Apr 2025 19:00:32 +0000
Manifest this update:     Thu 17 Apr 2025 19:00:32 +0000
Manifest next update:     Fri 18 Apr 2025 19:00:32 +0000
Files and hashes:         1: OO8l-5f2KIASeQaCCtzj9OodMu8.roa (hash: 4WUwhvm+xR9jyg+ZUAOpnMkPPHdoXhkYYKLfdNvRCmY=)
                          2: q5udbmrCgujBAADMPbxK3z_gH-I.crl (hash: LSOl7qMu8AxfdlxQsIyUAeNKWTbXdFDYrTxrOeaRzCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:1f:c5:9c:e3:ab:ea:c8:fe:56:f2:05:c7:a2:2e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
        Validity
            Not Before: Apr 17 19:00:32 2025 GMT
            Not After : Apr 18 19:00:32 2025 GMT
        Subject: CN=8da93c59341f7dd0358714efa9b0ef615096d9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:29:ea:a3:b0:1b:a8:a6:f9:4a:d7:10:1a:db:
                    7d:03:01:3b:c1:60:a4:19:41:50:98:13:15:b1:90:
                    46:93:94:cb:c8:f8:27:7e:2e:05:33:b4:fd:d9:d9:
                    61:3d:08:98:0e:90:e0:c7:42:19:1f:b2:44:b0:3d:
                    27:d0:4d:98:98:66:2f:de:ea:f5:57:c2:c4:f8:4f:
                    eb:07:df:b6:63:6f:cc:bc:70:a1:d1:9f:d0:11:27:
                    f0:91:dd:09:0f:57:89:cd:7d:f4:80:29:a1:88:c8:
                    fd:ea:ab:2a:88:1e:fe:68:52:76:d5:69:7b:21:7d:
                    6e:a9:a4:65:0a:9b:3a:ef:15:5c:5f:63:77:76:f5:
                    92:d0:85:c5:ab:96:a3:5f:eb:62:9f:cb:8e:c4:ec:
                    06:45:06:e1:eb:78:8b:ba:c8:05:af:0a:ae:2e:af:
                    66:53:b8:4a:19:72:99:9c:47:00:45:90:78:1c:f6:
                    5e:86:9d:c8:76:76:a3:9c:3a:2e:7b:4b:0c:b5:36:
                    74:e0:ef:0f:a8:f2:91:bc:2b:de:60:b9:9d:8b:59:
                    77:1d:47:7f:8b:28:c6:a4:13:08:7d:03:9f:b1:5f:
                    7b:3f:50:26:ee:f0:27:23:99:71:5a:88:47:6c:40:
                    23:4e:af:94:a1:c2:1f:97:7f:7c:51:35:94:d8:f7:
                    b3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A9:3C:59:34:1F:7D:D0:35:87:14:EF:A9:B0:EF:61:50:96:D9:C3
            X509v3 Authority Key Identifier:
                keyid:AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:36:c3:f0:6d:9b:5b:d4:3e:d7:35:99:b2:ee:52:e1:2b:72:
         a1:94:22:3e:6c:0f:d0:fe:21:bc:6f:d0:81:5e:93:e5:3a:86:
         f8:05:df:c8:5e:f8:7a:ea:28:92:ea:20:5a:7e:ba:7e:ce:20:
         51:f9:ca:f9:a0:91:b8:2d:23:da:06:a8:2a:c5:cd:1c:6b:18:
         e4:3a:ef:75:e3:0a:68:3f:66:78:5d:34:01:55:62:54:36:22:
         10:b7:4b:7c:15:9a:65:17:28:44:26:e0:88:62:2d:18:ba:84:
         8f:be:3e:f2:6d:23:81:cf:4c:f9:48:fe:98:c1:31:b4:6f:9d:
         5e:16:8f:98:19:eb:c8:90:aa:66:45:4f:5d:cc:4b:14:8b:33:
         b0:0e:70:93:80:bd:88:fa:4a:5e:a6:e2:dd:18:b9:32:db:d7:
         e0:11:4c:b6:3b:b6:8c:b0:d5:cd:b9:75:69:14:3f:56:9b:0b:
         c7:94:11:34:bc:93:ce:ec:95:8f:67:ff:6c:8b:34:80:d2:d0:
         3b:bb:8c:1e:4c:3e:31:83:af:1f:1a:8b:78:e4:d3:11:9c:a9:
         92:72:f3:f4:ee:64:62:f0:83:9a:e4:ee:90:6a:ef:13:e1:a1:
         c9:fa:7e:01:0a:a0:70:d2:ba:dd:fd:3b:63:91:65:d0:d6:ab:
         86:7b:10:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:21:18 2025 by rpki-client