Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
File:                     A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft (raw, json)
Hash identifier:          33q22s8wDv5kAXOLlTuDsXl6Xw8B6olcbQXY/9IXBrk=
Subject key identifier:   F2:7E:89:F5:28:8C:5F:69:09:31:4A:AA:A0:B1:0E:BA:EE:D0:0F:D7
Authority key identifier: 03:A5:E9:5A:BB:91:D6:4D:73:B9:14:8C:0A:AF:59:B3:AF:3F:4E:6A
Certificate issuer:       /CN=03a5e95abb91d64d73b9148c0aaf59b3af3f4e6a
Certificate serial:       0196447B985B5725FF78E322ED77D0F30BC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
Manifest number:          1488
Signing time:             Thu 17 Apr 2025 16:01:12 +0000
Manifest this update:     Thu 17 Apr 2025 16:01:12 +0000
Manifest next update:     Fri 18 Apr 2025 16:01:12 +0000
Files and hashes:         1: A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl (hash: +xFkApIA6SKKdRjRRFH8sgN+OMGLtx4mTzypWEuuzDo=)
                          2: HE3ngXhibuMNnlUTqhNdyzJzI7E.roa (hash: vbHlj5WYFjRLuQiS72fylFam6l6ufmPPLhOlt+s0Jhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:7b:98:5b:57:25:ff:78:e3:22:ed:77:d0:f3:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03a5e95abb91d64d73b9148c0aaf59b3af3f4e6a
        Validity
            Not Before: Apr 17 16:01:12 2025 GMT
            Not After : Apr 18 16:01:12 2025 GMT
        Subject: CN=f27e89f5288c5f6909314aaaa0b10ebaeed00fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7b:e2:5d:91:15:9e:dd:71:e8:d0:f0:76:30:
                    eb:32:77:e6:25:d0:ed:49:71:b8:20:27:dd:a1:9a:
                    ee:be:da:2d:eb:dd:12:0b:76:6e:e5:cc:2c:bc:bf:
                    24:cb:ff:8c:b0:15:e2:23:f6:36:14:09:55:a7:07:
                    0f:38:18:ad:6a:34:4a:0f:49:ca:f5:41:0b:47:c3:
                    0d:7b:a9:89:6e:7f:70:c2:6f:79:c2:ea:e3:f3:b6:
                    62:ff:17:f5:1f:65:62:aa:7c:ec:d6:98:60:dc:30:
                    23:d9:60:25:5d:9f:3e:dc:4e:df:1a:17:7f:eb:00:
                    20:66:4f:11:c2:ed:1b:8e:21:be:5a:69:3d:65:85:
                    2e:8f:8d:c0:87:24:49:1a:d6:e9:0a:ff:9a:01:1d:
                    e1:d7:7d:b1:64:bf:93:a4:7f:07:4f:c2:bf:5c:5b:
                    6f:6e:96:bf:df:43:8a:bf:58:20:90:18:6e:6b:d0:
                    e2:48:a5:e8:ef:30:e7:05:76:5e:fa:a4:72:5c:8c:
                    ea:f7:4d:a4:a8:fc:b7:01:98:4e:ef:91:c1:cb:f7:
                    94:cb:63:41:6f:c9:34:77:9e:6b:f2:2a:dc:82:56:
                    12:02:b7:ce:ba:95:28:40:27:9f:71:5f:2e:19:d8:
                    cd:c8:25:d0:ce:59:01:a7:5f:1f:18:f0:cc:d5:2a:
                    9f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7E:89:F5:28:8C:5F:69:09:31:4A:AA:A0:B1:0E:BA:EE:D0:0F:D7
            X509v3 Authority Key Identifier:
                keyid:03:A5:E9:5A:BB:91:D6:4D:73:B9:14:8C:0A:AF:59:B3:AF:3F:4E:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:fd:f3:70:f4:3a:5d:62:de:b7:b0:0f:70:b1:df:99:aa:c7:
         89:fa:85:20:a7:ee:69:05:e2:56:a9:bc:b8:bb:f7:66:66:5b:
         1b:1b:76:23:be:8f:c6:cf:99:21:5e:90:95:67:b9:f2:bf:84:
         44:8c:a0:a2:1b:81:58:cf:3d:00:0f:e6:3c:d0:de:91:9c:9b:
         08:fa:a9:81:11:11:79:5b:ef:39:14:6c:79:aa:06:2d:dd:a6:
         61:61:9b:c4:42:9d:da:e2:b5:ff:45:21:28:29:5e:6c:b0:1d:
         fc:61:64:20:e3:4b:d0:d2:4e:09:5b:9b:a4:d6:ff:e9:da:f9:
         08:ea:2f:2e:f9:68:b0:d0:52:96:d5:de:38:90:bb:8e:15:fa:
         94:19:6a:45:80:e0:64:8c:13:59:35:95:ba:6c:f9:ea:7a:64:
         78:f1:31:f3:e4:8f:cb:a1:17:d5:c5:58:77:c7:4c:59:4b:ce:
         e2:cf:84:de:8e:81:89:6d:97:64:c8:6b:c5:6b:56:aa:44:d6:
         64:5b:26:7a:db:e0:a9:df:f7:d3:8f:47:da:ab:cc:e5:e0:4d:
         c6:2a:a8:bd:66:04:da:7e:bc:67:9b:09:78:c8:46:4a:ad:f1:
         19:7d:34:a6:b9:de:bc:4b:87:4d:d6:ec:76:07:e6:bc:fd:23:
         92:55:c2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:12:57 2025 by rpki-client