Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
File:                     9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft (raw, json)
Hash identifier:          VLhcQhSAuEzkjDvb56RPIaF2xTE6iOVMa2EmkT4WSUI=
Subject key identifier:   69:40:3A:C1:03:2E:5B:FC:2A:7F:DD:B9:DE:2C:88:71:8A:53:B5:67
Authority key identifier: F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4
Certificate issuer:       /CN=f6413486886b56231dec573fad4f8ab32cbf92a4
Certificate serial:       01961169F066457BE1198464B027ECA6BAF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
Manifest number:          1030
Signing time:             Mon 07 Apr 2025 18:01:17 +0000
Manifest this update:     Mon 07 Apr 2025 18:01:17 +0000
Manifest next update:     Tue 08 Apr 2025 18:01:17 +0000
Files and hashes:         1: 9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl (hash: QBNVEbuxlCNC2UC0S9kqXEnAzLz0ju8QUJxipQIOWT0=)
                          2: ftXv30Hlz-_EICPh46zy3bfImAc.roa (hash: 3S31teaHx8GBvsqpB7SE49UNoJHeSlzxpM1K7KnfX/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:11:69:f0:66:45:7b:e1:19:84:64:b0:27:ec:a6:ba:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6413486886b56231dec573fad4f8ab32cbf92a4
        Validity
            Not Before: Apr  7 18:01:17 2025 GMT
            Not After : Apr  8 18:01:17 2025 GMT
        Subject: CN=69403ac1032e5bfc2a7fddb9de2c88718a53b567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:ef:9e:97:7c:54:f9:68:30:ad:94:46:06:
                    cb:e0:de:cd:24:4c:80:18:1c:0c:ad:a3:95:16:f7:
                    14:53:e1:16:10:6e:8e:4b:67:79:4e:d6:f1:f7:df:
                    6e:29:4f:ad:66:22:97:d4:f8:a2:56:f0:0a:90:16:
                    6f:c7:02:7f:60:d9:32:42:6b:b1:90:88:a0:ae:d1:
                    27:a2:ee:4b:d9:32:83:02:1f:f6:14:22:5e:b2:ce:
                    e4:ef:31:59:da:10:bc:93:c2:8f:94:4b:d1:72:83:
                    ea:0a:a3:15:d4:d3:a4:5d:19:0a:9f:6b:47:12:df:
                    54:31:d0:67:2c:56:77:10:c9:30:66:fd:d7:6e:e9:
                    8b:ae:74:f0:5e:62:55:d9:57:6d:d6:77:2a:05:e2:
                    eb:d7:57:fe:7d:1f:23:fa:87:55:a0:6e:25:7d:eb:
                    2a:6c:3e:a4:3a:cc:ad:16:67:21:53:74:d6:49:d3:
                    43:52:d4:2a:ed:80:52:3c:ac:19:3a:a4:41:d4:14:
                    bb:51:69:ad:97:39:48:cd:bf:93:3c:95:6a:34:c1:
                    2b:45:a4:6f:74:8c:58:48:1e:54:92:31:79:f9:ef:
                    00:35:0d:2b:39:06:cc:79:d7:12:ad:d8:9e:cd:7c:
                    12:90:d1:66:c4:68:91:59:09:f3:0d:bf:8d:ad:b3:
                    8a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:40:3A:C1:03:2E:5B:FC:2A:7F:DD:B9:DE:2C:88:71:8A:53:B5:67
            X509v3 Authority Key Identifier:
                keyid:F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f1:d6:13:8e:3e:f5:ea:4b:c6:0b:bc:44:74:36:f9:95:9a:
         bb:d7:15:c9:e4:96:09:d2:57:a4:a7:d5:09:96:16:aa:a4:13:
         cc:39:fe:0d:b7:b3:a9:35:23:e0:37:ad:ea:20:b2:ff:af:ba:
         93:b5:64:8d:1f:67:5f:bc:df:8c:b3:67:be:4d:31:06:d9:00:
         76:49:b9:7c:55:1c:9b:4d:a8:d4:7a:18:e7:e8:ca:a9:12:54:
         af:24:c3:81:22:47:6e:84:d2:1c:6e:59:f2:7e:38:fd:0b:54:
         41:67:d0:c4:68:b8:fd:62:df:1b:ef:7d:17:2c:99:85:fb:0f:
         34:09:a7:19:a2:ab:bd:aa:89:e3:bf:e9:4d:ff:44:e7:87:88:
         84:3d:f2:0d:1e:37:02:c5:7c:04:54:cc:83:c1:10:7c:18:27:
         3e:11:40:50:17:2b:0a:8e:e6:57:21:52:57:5c:2a:4d:93:e2:
         3c:7f:de:cd:0a:03:57:d7:bf:8c:9b:25:e2:48:0b:1e:62:4d:
         79:2b:06:0d:25:81:e8:b6:18:e8:f0:3a:cc:65:42:ec:78:8b:
         91:c0:e4:0f:df:35:a2:52:6e:5b:9b:b5:cf:8f:b3:8b:3a:52:
         fe:b0:58:7d:46:e5:68:30:0c:3d:fb:ac:4e:08:b3:c5:f5:79:
         17:25:87:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:25:07 2025 by rpki-client