Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
File:                     ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json)
Hash identifier:          MPAmogbvufXRzlhXmTGgIWg5BdJ1A4boVH5H6IqXIzY=
Subject key identifier:   16:B9:F1:7E:70:F8:DE:11:46:09:F8:38:B2:99:D6:7E:C2:C8:8B:7A
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Certificate issuer:       /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial:       01965F4D2A5C28DF61D6EBF0C6F8668FD905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
Manifest number:          119B
Signing time:             Tue 22 Apr 2025 21:00:14 +0000
Manifest this update:     Tue 22 Apr 2025 21:00:14 +0000
Manifest next update:     Wed 23 Apr 2025 21:00:14 +0000
Files and hashes:         1: NCqzEDAkcdOF_5QXBG8yJjG5C8E.roa (hash: 3y6ZaPdmVv7AeJPbPV9rY47Ckca5BlO8ayxRNoPx1Jg=)
                          2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: Pmy6cBEqATRRyi3LfcU7jEkCTGwHrh6yK6X4idVkBCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 21:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5f:4d:2a:5c:28:df:61:d6:eb:f0:c6:f8:66:8f:d9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
        Validity
            Not Before: Apr 22 21:00:14 2025 GMT
            Not After : Apr 23 21:00:14 2025 GMT
        Subject: CN=16b9f17e70f8de114609f838b299d67ec2c88b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fb:8b:5b:14:94:2f:59:fb:c6:6e:07:23:b4:
                    1e:13:45:9b:bc:7e:62:0d:7a:77:c6:8d:67:e6:43:
                    1f:cc:a5:e1:9d:9c:0b:ef:6b:5f:4e:66:c1:20:ab:
                    96:b2:0b:79:86:4f:b0:fb:9b:62:e6:d2:79:0d:3d:
                    50:25:51:ee:d7:c8:8a:e8:06:80:90:87:9a:fb:28:
                    24:ac:0c:f5:23:0c:98:dc:e7:dc:97:80:56:55:d7:
                    88:1d:6c:7c:6d:73:33:69:10:eb:2b:65:32:03:0c:
                    29:2e:60:1b:16:96:7c:bb:18:76:14:fb:8e:f2:89:
                    69:8b:d6:f4:17:e1:75:09:02:0b:06:ad:b5:77:4c:
                    4b:b1:80:97:43:9f:98:f0:0b:4b:d6:d6:0b:c1:e6:
                    8b:20:0d:c7:ab:7c:41:89:5a:86:15:46:2e:27:ec:
                    6d:ca:e7:70:a2:76:1b:4d:43:94:09:dc:46:d6:75:
                    e4:b3:e8:6f:1b:c3:64:37:1a:76:c8:6c:ed:1f:b7:
                    c7:f0:a7:29:0b:63:88:48:3a:d3:ed:f5:da:43:38:
                    1b:dd:4a:6d:b3:ef:3f:2e:84:8b:bc:6e:c3:0d:98:
                    c0:c1:b0:82:00:43:a1:64:29:85:f7:1b:42:e5:08:
                    00:37:c3:ff:51:3f:d4:69:7d:62:b2:f1:3e:ef:f5:
                    13:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B9:F1:7E:70:F8:DE:11:46:09:F8:38:B2:99:D6:7E:C2:C8:8B:7A
            X509v3 Authority Key Identifier:
                keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ed:77:75:73:de:fd:75:3f:17:dd:cc:19:78:02:6c:10:d5:
         99:03:10:02:cb:e5:31:f3:3d:f0:fd:64:d6:24:66:88:e9:53:
         1b:5c:03:20:02:6b:b0:c5:ea:bb:d9:39:46:21:ac:ea:f8:98:
         f0:05:89:63:96:cd:70:06:d1:06:1b:c0:20:9e:40:de:0a:11:
         c1:de:ac:0f:f3:94:ed:62:4e:21:cf:72:c9:d1:de:9a:5b:83:
         a2:fd:52:49:81:11:3c:f2:a7:28:55:45:e6:4f:6b:2c:64:ea:
         ef:34:a0:87:7e:b9:ce:b6:c0:e6:a6:26:64:1d:04:e8:d6:d8:
         7f:5d:82:29:a2:95:60:0b:b0:c4:b4:a4:2b:b3:01:84:3f:aa:
         3e:9a:da:ac:f7:df:4f:89:38:42:8b:29:4c:fb:f7:6b:3a:fa:
         ed:1b:71:39:13:29:6b:9f:15:1a:ee:ba:eb:96:d4:d8:90:3a:
         74:6d:84:9c:42:3e:53:96:19:da:31:28:f2:1c:03:64:92:8b:
         85:f8:a3:1e:7e:1a:ea:ab:34:b3:f2:4d:e1:ca:0d:bd:71:ea:
         61:aa:55:f3:d7:8b:15:90:5f:bb:3d:13:ef:3b:1d:6d:38:e2:
         b7:b9:26:21:32:93:98:1c:a5:58:2f:47:bf:92:93:9d:1a:ba:
         a8:22:fa:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:54:23 2025 by rpki-client