Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
File:                     g2Rixix_Y9L114enAdd5q2luIjY.mft (raw, json)
Hash identifier:          EtVMPaxL2pzrEUvlDbVTJaF/pdiAaqL3bftPqhAkLHo=
Subject key identifier:   D0:A9:74:4E:62:E3:66:73:D4:CF:60:13:8F:27:6C:0D:B3:F7:CD:D0
Authority key identifier: 83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
Certificate issuer:       /CN=836462c62c7f63d2f5d787a701d779ab696e2236
Certificate serial:       019645C4FAB88F3E63E3BC17690E507FA132
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
Manifest number:          0607
Signing time:             Thu 17 Apr 2025 22:00:58 +0000
Manifest this update:     Thu 17 Apr 2025 22:00:58 +0000
Manifest next update:     Fri 18 Apr 2025 22:00:58 +0000
Files and hashes:         1: g2Rixix_Y9L114enAdd5q2luIjY.crl (hash: 00HDxKuhVHoQC34StLDraDZM1+zfOCvRf18Gh+0m1Uk=)
                          2: uQEihKiuIl1rl-qFPqFxAyhOwfs.roa (hash: 741H2NNyRCld+680I0F2CoeAI6uDzCv+B0JzFOkmvnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:c4:fa:b8:8f:3e:63:e3:bc:17:69:0e:50:7f:a1:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836462c62c7f63d2f5d787a701d779ab696e2236
        Validity
            Not Before: Apr 17 22:00:58 2025 GMT
            Not After : Apr 18 22:00:58 2025 GMT
        Subject: CN=d0a9744e62e36673d4cf60138f276c0db3f7cdd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:9c:84:87:75:21:1c:1c:a6:5e:ad:35:7f:
                    41:cf:f0:45:23:15:4b:ec:fe:99:3a:a1:9b:e6:2d:
                    b3:da:5d:53:8d:97:d5:2a:e5:2c:ae:cb:8b:19:92:
                    63:bc:59:e1:48:c6:2c:9d:93:50:d8:e5:63:31:12:
                    c7:be:eb:a4:4f:6b:47:60:7a:0e:36:60:e5:8e:56:
                    0a:d6:dd:a9:c0:e6:51:33:fd:f3:4c:30:1b:2e:8f:
                    e0:39:39:31:78:5e:d0:06:21:98:33:74:ee:51:83:
                    e9:17:a3:33:63:6a:67:5f:15:e4:01:55:87:f4:d2:
                    d7:ae:85:ea:51:06:31:75:54:e6:4d:9b:91:bb:1c:
                    e4:c1:c6:5a:82:78:de:aa:44:f5:57:2a:4f:3f:16:
                    04:91:c5:f5:7a:f3:4c:73:20:58:53:31:df:0f:a2:
                    2f:91:a2:66:b1:6f:0e:19:99:82:d5:60:be:dc:ed:
                    37:95:17:11:ce:f3:13:4d:11:f8:44:9e:b7:2d:0d:
                    34:7a:c9:4e:36:94:73:65:04:d8:22:f6:64:e9:fa:
                    bc:82:f9:a2:d1:47:2d:01:a6:7a:bb:a8:94:75:54:
                    a6:3f:8f:2d:43:83:2b:47:a2:dc:e9:c1:b4:0d:4f:
                    09:12:c5:0b:1e:42:6b:6b:da:a9:e4:df:51:54:f6:
                    7a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A9:74:4E:62:E3:66:73:D4:CF:60:13:8F:27:6C:0D:B3:F7:CD:D0
            X509v3 Authority Key Identifier:
                keyid:83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:14:42:ea:2c:7b:79:c9:23:34:8f:54:8a:df:ad:f7:7a:56:
         92:4e:4d:0a:d1:8a:bd:80:14:ae:c9:0c:fa:27:da:d2:46:97:
         c2:1c:66:5c:ed:47:63:9c:2e:69:e2:e8:bc:46:32:b8:30:d8:
         9c:d9:98:6c:f1:83:25:dd:f4:ef:31:a7:9e:fa:2a:82:06:ca:
         8a:00:9b:49:f7:52:bd:91:13:e8:72:88:10:5b:6b:63:c3:77:
         87:97:3c:cb:5d:cf:b8:e1:af:73:2d:79:ba:cf:24:3d:e2:58:
         df:e2:07:bc:ad:52:c2:9c:91:f1:6e:7e:fe:e2:99:29:4d:4e:
         55:b1:72:4c:e2:5d:db:0e:ba:3c:8f:07:1b:3f:2b:1e:79:40:
         ae:85:12:01:11:c0:49:65:5f:6c:8d:6a:58:01:fa:61:76:53:
         d9:c0:dc:23:36:f8:f9:5e:13:39:37:33:7e:8d:f2:ac:87:45:
         79:62:ac:a3:2a:ca:ae:01:c0:07:65:81:a2:c3:81:98:1f:b4:
         ba:1c:f5:8a:6a:a7:87:3c:7d:df:23:ec:35:70:e6:41:b8:93:
         21:ee:49:9c:bb:01:f5:88:0d:c8:7e:f8:3c:3a:d5:3f:28:a0:
         44:e2:42:44:62:fd:99:d1:dc:11:8e:52:ab:c1:f5:ad:ab:83:
         17:dd:9a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:04:49 2025 by rpki-client