Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
File:                     J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft (raw, json)
Hash identifier:          xsip+zgW9sRfijsTByCMrLSNDKQ/OChYHhUKovc5TBc=
Subject key identifier:   24:82:83:C9:18:AB:6D:AC:62:DC:69:8A:23:C9:E0:87:1C:98:8E:B1
Authority key identifier: 27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0
Certificate issuer:       /CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
Certificate serial:       01964C6B79F63A65003E3308BC076C6D5D75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
Manifest number:          A6
Signing time:             Sat 19 Apr 2025 05:00:34 +0000
Manifest this update:     Sat 19 Apr 2025 05:00:34 +0000
Manifest next update:     Sun 20 Apr 2025 05:00:34 +0000
Files and hashes:         1: J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl (hash: KZOOzIrhc5Jzx7+yU6xPhm9v7jKsfjz3cKxnhyY0+Ts=)
                          2: fTfqf3RzH3ibTJ1sVk6qwuCUTso.roa (hash: zZbWW91JqjxpGk5DcSBhXzXRcrXTOVjIQL0IYt57KX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:6b:79:f6:3a:65:00:3e:33:08:bc:07:6c:6d:5d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
        Validity
            Not Before: Apr 19 05:00:34 2025 GMT
            Not After : Apr 20 05:00:34 2025 GMT
        Subject: CN=248283c918ab6dac62dc698a23c9e0871c988eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4b:f9:df:a7:6f:51:1a:d4:d7:3a:c7:5d:1a:
                    d9:2e:36:05:3c:0b:6d:8f:83:c3:e5:92:e5:cb:84:
                    9b:86:0d:9f:82:63:5a:dd:1a:81:5f:b3:b7:32:14:
                    d2:9b:f6:ce:1e:07:6d:30:68:8f:76:ca:c9:37:b7:
                    ee:1e:22:89:ff:e2:41:73:b0:4c:9e:c1:7d:13:59:
                    ab:5a:ca:6c:a0:b8:a3:88:72:bb:01:12:05:d9:9b:
                    a7:22:29:09:3f:b8:33:3d:99:c2:93:20:4b:73:90:
                    91:01:ba:b6:e1:20:65:3b:9d:de:62:06:03:e0:16:
                    8e:54:e8:5d:69:ac:8d:13:a5:9d:83:e0:a1:b5:27:
                    1a:41:d5:c2:6b:15:af:80:48:e8:8f:27:e7:30:08:
                    b0:2a:5b:79:05:2e:f9:ea:5f:22:d1:89:43:4a:25:
                    a6:a6:5f:f4:39:7f:6d:59:17:08:57:76:2d:d4:73:
                    79:d1:50:41:4e:46:8f:4b:ec:6f:1f:5b:d0:95:f9:
                    aa:65:c3:3e:ba:68:03:df:ae:b9:26:e7:ec:e3:bd:
                    5c:53:3b:31:0a:15:18:fb:c1:59:8c:b3:cb:0a:d2:
                    2a:5b:40:7e:5b:79:70:61:6c:b6:00:f4:b6:11:23:
                    aa:1a:57:ef:09:90:56:5f:74:33:53:99:75:b4:b4:
                    71:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:82:83:C9:18:AB:6D:AC:62:DC:69:8A:23:C9:E0:87:1C:98:8E:B1
            X509v3 Authority Key Identifier:
                keyid:27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:6d:51:34:fa:4d:dc:3a:82:23:45:ad:92:54:49:8c:f7:87:
         16:34:d7:77:0b:46:b2:4a:dc:d2:c6:a7:fa:c5:09:7c:0b:78:
         ae:51:5f:a0:da:dc:56:d0:50:75:bb:59:cc:2c:9a:23:3c:ff:
         56:fe:59:2a:95:b4:07:23:a7:84:1e:a4:96:1f:b5:05:4f:1a:
         88:4a:64:0d:f2:d4:ce:f1:8b:98:1d:ee:be:16:fb:de:62:de:
         7b:16:80:bc:4e:69:4c:82:e9:4a:d5:98:f0:03:c9:9f:be:12:
         2a:d7:d6:78:8e:2a:9c:b0:7e:55:90:a6:d1:2c:0d:f2:15:6b:
         b3:8b:82:79:84:e1:3a:fa:82:66:3c:1d:fb:4b:70:76:ab:a8:
         25:51:59:65:54:bf:13:6c:36:57:45:c9:d5:43:4f:44:e8:79:
         f0:89:63:30:2e:3a:6c:8f:3b:98:3e:3b:d2:96:bd:d7:88:da:
         11:55:c3:bb:a0:2e:62:62:33:84:cf:88:41:c9:4b:b8:70:41:
         21:f8:e2:17:ec:ae:fd:f0:c4:e4:26:09:4a:e7:1c:55:5c:e5:
         d3:3c:a6:6c:92:19:d6:b2:25:16:c9:ff:db:ea:6b:6f:81:9e:
         6b:b0:10:04:86:70:78:24:26:18:31:e3:2a:ba:be:0e:92:a8:
         dc:00:c0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:56:29 2025 by rpki-client