Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
File:                     x5d6en0rE11ac3kcp889mtpYj2s.mft (raw, json)
Hash identifier:          eLISfJDMHYSvBfmMPEFibBcEpF1wFEE+fgHBbAbhxs8=
Subject key identifier:   86:85:75:D2:22:4D:86:E4:4F:A0:7A:AE:F4:63:F3:18:63:57:6F:04
Authority key identifier: C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B
Certificate issuer:       /CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
Certificate serial:       01959073FF966D89F2F9D76D8202309FB690
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
Manifest number:          1498
Signing time:             Thu 13 Mar 2025 17:01:15 +0000
Manifest this update:     Thu 13 Mar 2025 17:01:15 +0000
Manifest next update:     Fri 14 Mar 2025 17:01:15 +0000
Files and hashes:         1: x5d6en0rE11ac3kcp889mtpYj2s.crl (hash: fFXWjd6X9Dr3yJGJ51gvKpslQZQgqfpGONIPVdNK1sg=)
                          2: yrgIBtaF_Rl3-KfRiLgUYar-yd0.roa (hash: T90C90e5Of8IaOpnooa9JcWxTvLM03hzqcILUaCvjno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:90:73:ff:96:6d:89:f2:f9:d7:6d:82:02:30:9f:b6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
        Validity
            Not Before: Mar 13 17:01:15 2025 GMT
            Not After : Mar 14 17:01:15 2025 GMT
        Subject: CN=868575d2224d86e44fa07aaef463f31863576f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:eb:e1:5b:9a:b1:e3:f8:33:50:f5:82:b5:fb:
                    53:c8:d6:28:49:a9:39:54:db:20:1a:b0:f8:63:29:
                    57:ca:67:9c:69:aa:7e:15:50:1f:47:31:9e:dd:5e:
                    2f:9c:cc:b9:77:8f:af:a2:c5:f4:a4:f4:43:90:03:
                    b8:83:25:e1:d2:fe:7e:bc:6a:af:15:5e:02:a4:6a:
                    74:e5:d0:e4:cf:d1:a1:fa:03:a0:fe:8c:dd:66:48:
                    1a:4d:b0:f6:f6:af:35:a6:c0:99:fc:72:4a:69:59:
                    31:a6:d6:b9:93:0e:4f:81:ec:49:2d:fb:c1:67:94:
                    f6:9b:15:cc:c5:f2:c9:18:d1:53:65:80:6e:6e:ce:
                    7d:bf:f0:f8:16:90:e7:48:83:d6:c6:ce:5d:74:ac:
                    bb:0f:36:3a:a5:f3:46:de:1b:3b:29:8d:a2:1d:7e:
                    81:51:38:c7:72:02:48:2c:72:d7:5c:df:52:58:8a:
                    6c:73:c5:2f:97:84:a4:a4:68:fb:a2:2f:c4:f5:92:
                    a5:88:d9:09:e2:7e:b9:e8:0b:70:14:c0:73:9c:3f:
                    fb:0e:3d:f4:17:d2:0f:8c:40:17:0e:e3:1a:55:b1:
                    52:dd:60:2b:f1:e5:7e:f7:95:4a:a4:06:f0:e1:47:
                    2b:e8:09:82:37:7e:fd:18:6f:7d:48:fe:0f:b9:fc:
                    98:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:85:75:D2:22:4D:86:E4:4F:A0:7A:AE:F4:63:F3:18:63:57:6F:04
            X509v3 Authority Key Identifier:
                keyid:C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:8d:a8:cb:cb:9d:08:6e:ad:73:72:0e:47:84:30:d5:54:88:
         9c:94:75:8b:8a:45:1e:26:6f:3b:22:98:d4:84:1a:ef:19:35:
         0d:0c:a1:d8:c4:af:94:07:20:74:63:09:44:3e:3f:d9:48:ca:
         58:25:f7:14:03:39:06:fb:5e:80:9a:32:8e:36:d3:2a:47:be:
         7f:41:1d:a2:e2:68:47:bf:e6:e2:16:fb:e0:4d:1c:9f:5b:ac:
         b0:67:2f:cb:34:bd:ae:84:45:17:b7:b0:f5:59:f4:ae:33:8e:
         4b:b8:56:ca:0d:b1:a0:f8:79:15:cc:9b:b3:92:d7:be:61:e2:
         a2:5f:bf:cb:d8:27:c4:e9:f2:55:1c:68:80:e6:51:17:18:72:
         07:e4:4a:c4:01:fe:9a:a5:17:41:38:8a:01:55:87:87:81:5a:
         d2:4f:fe:e0:86:bd:bf:fa:4c:90:31:bc:40:92:b7:c4:18:22:
         42:c3:35:d5:b2:6f:57:6b:50:d7:68:aa:3c:3f:66:7f:56:7d:
         5d:0e:d1:79:55:73:dc:c4:b7:ee:58:6e:a3:92:0c:f3:a1:78:
         62:90:95:ad:0f:6a:77:d2:d4:4a:6e:33:52:5e:6d:78:bb:c9:
         4f:75:dd:3b:f1:6b:26:18:56:c5:04:70:09:49:e6:75:b8:59:
         96:ba:a6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:27:37 2025 by rpki-client