Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft
File:                     11ugWU0GWrciRlz6MF7_jUFhf6g.mft (raw, json)
Hash identifier:          o0gaHtKKExFWe9X6S8fa1sxZ5uUNZ1FIJOX4LZuts+4=
Subject key identifier:   C7:9F:D2:F9:3D:52:BF:FF:74:1C:B3:2C:C0:D8:8D:08:E1:D2:AF:26
Authority key identifier: D7:5B:A0:59:4D:06:5A:B7:22:46:5C:FA:30:5E:FF:8D:41:61:7F:A8
Certificate issuer:       /CN=d75ba0594d065ab722465cfa305eff8d41617fa8
Certificate serial:       01962B2A63C6A89A3E20600586525DFACFD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft
Manifest number:          0B9E
Signing time:             Sat 12 Apr 2025 18:02:00 +0000
Manifest this update:     Sat 12 Apr 2025 18:02:00 +0000
Manifest next update:     Sun 13 Apr 2025 18:02:00 +0000
Files and hashes:         1: 11ugWU0GWrciRlz6MF7_jUFhf6g.crl (hash: gOSN/a5FyCnENi+KvmfuAfMTs4/3Rt+LC18LQ83rJts=)
                          2: BZIfQV280o1RO6UXQb7qG3btz5c.roa (hash: yjsFnIbhow6GJJcPdKVr4HkLXwHEMiYNE9BzFU3IEyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2b:2a:63:c6:a8:9a:3e:20:60:05:86:52:5d:fa:cf:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d75ba0594d065ab722465cfa305eff8d41617fa8
        Validity
            Not Before: Apr 12 18:02:00 2025 GMT
            Not After : Apr 13 18:02:00 2025 GMT
        Subject: CN=c79fd2f93d52bfff741cb32cc0d88d08e1d2af26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:74:a0:88:65:bc:8c:6c:bd:38:27:93:a7:8b:
                    55:bd:2b:95:9a:e5:1e:58:60:32:8f:fd:5f:a3:a5:
                    b3:d5:50:62:7e:72:a3:e3:36:c9:20:23:63:08:67:
                    f7:4e:cf:53:31:e2:02:64:bd:17:9c:3e:53:87:91:
                    ea:10:d5:35:0b:bb:c8:a1:3f:ff:72:ad:b1:5e:1a:
                    3d:cc:66:8a:91:0d:c6:6c:2a:79:dc:74:c7:61:41:
                    9f:80:ae:e0:60:e2:e6:25:de:b9:46:29:8b:fc:a2:
                    d4:7a:c4:35:0d:f8:b8:2e:57:50:8a:eb:04:01:31:
                    0c:48:fe:6e:10:ce:ec:09:54:d0:b0:b1:bc:fa:56:
                    ed:d3:c2:de:86:89:d2:93:2e:9b:8c:f5:82:ef:37:
                    cb:54:d0:ce:51:35:2d:08:cc:8b:72:c0:4b:6b:b8:
                    30:52:96:6a:1c:8b:63:70:41:b5:38:77:7d:5e:9b:
                    d8:86:75:6d:31:c6:4e:c2:9f:97:49:7a:b8:30:9a:
                    85:5d:a9:1e:f7:78:5d:ed:bf:2b:53:68:33:96:eb:
                    ac:54:94:85:e7:09:aa:00:47:a9:86:09:de:4a:84:
                    07:09:4e:28:88:de:c4:74:a7:33:cf:3f:a9:61:be:
                    e5:7e:b3:56:29:c4:c0:62:12:b2:16:b0:bb:db:05:
                    65:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9F:D2:F9:3D:52:BF:FF:74:1C:B3:2C:C0:D8:8D:08:E1:D2:AF:26
            X509v3 Authority Key Identifier:
                keyid:D7:5B:A0:59:4D:06:5A:B7:22:46:5C:FA:30:5E:FF:8D:41:61:7F:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:99:dc:6a:83:68:f9:00:ea:02:11:66:9a:1b:31:05:db:df:
         e4:72:83:fc:c7:c1:5c:eb:30:e1:b3:82:a2:3d:57:bc:ee:8b:
         17:71:e1:a4:af:32:ab:29:f4:73:af:16:26:13:4f:df:2d:c4:
         30:47:f2:00:1b:01:a7:06:03:47:f2:7c:68:dc:a6:6e:bc:ff:
         eb:c6:1c:9f:0c:d8:d5:82:ae:fe:fa:90:6b:4a:68:bc:59:63:
         b0:05:4f:2a:e4:6f:e0:58:5c:21:12:1d:3c:ac:fe:52:dd:50:
         90:75:6f:e8:a2:c5:5f:18:df:35:ff:78:1a:47:9d:9f:c5:e6:
         fd:c4:50:56:39:9c:2f:41:a6:d3:ff:f5:50:3b:8c:18:fe:89:
         00:77:86:39:34:5b:f9:e3:bb:a7:99:31:14:f6:1a:d1:18:05:
         aa:93:dc:d0:4f:2f:6b:34:8d:bf:16:2f:fc:7d:2e:3e:34:56:
         3c:4b:5e:df:b9:2a:bb:fa:c8:c9:ef:16:28:77:91:f8:41:5c:
         32:34:af:1d:7d:ca:63:84:b8:a9:cd:db:f0:18:ed:c9:1a:ae:
         2a:33:8b:14:6a:d6:75:6c:97:91:39:be:0e:83:fd:ce:a1:3c:
         14:12:87:c6:82:e0:0c:f7:4a:9c:09:f3:c8:dd:7b:f3:3a:0d:
         91:7c:95:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:16:09 2025 by rpki-client