Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
File:                     q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft (raw, json)
Hash identifier:          vqDGjv2P7ys3OrY4/6WwI13U0s73LstNh5IpThGmi4Q=
Subject key identifier:   87:68:BC:CA:95:99:53:4A:8E:10:A9:70:7F:FC:0C:F0:00:5F:A2:C6
Authority key identifier: AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84
Certificate issuer:       /CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
Certificate serial:       01965F84317CE7A15B24920470C470D506C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
Manifest number:          096B
Signing time:             Tue 22 Apr 2025 22:00:21 +0000
Manifest this update:     Tue 22 Apr 2025 22:00:21 +0000
Manifest next update:     Wed 23 Apr 2025 22:00:21 +0000
Files and hashes:         1: i11QUMq5rxHIsS_Sujk7fM1Wmpc.roa (hash: 6iS4lGatjNwdjx3TWoy83KW0n9N+x6+eWhAvA99wwRM=)
                          2: q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl (hash: u2Wea7gEebYBeFmbOwiN13vDt/ucIXWM20pgf8oyc7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 22:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5f:84:31:7c:e7:a1:5b:24:92:04:70:c4:70:d5:06:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
        Validity
            Not Before: Apr 22 22:00:21 2025 GMT
            Not After : Apr 23 22:00:21 2025 GMT
        Subject: CN=8768bcca9599534a8e10a9707ffc0cf0005fa2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ee:95:d6:85:b0:9d:64:4c:a4:0d:2b:4f:5c:
                    ed:52:f9:60:b7:c6:a2:ac:07:4c:1e:97:ce:d6:e9:
                    de:c3:13:5a:b4:d8:63:ea:7c:fc:e6:ae:24:84:44:
                    a4:dc:1c:47:34:1a:c4:8e:27:75:20:ef:47:67:62:
                    0f:d0:f7:cc:71:85:f2:3a:e7:81:c8:0a:0c:a8:f3:
                    96:d4:59:fc:6c:f2:7e:55:cc:f2:8c:5e:2d:88:45:
                    fc:c4:4f:09:05:04:31:0a:69:8b:c5:cf:53:9f:f0:
                    2d:82:63:33:40:e0:1e:5c:be:4f:d9:c5:c7:56:95:
                    f5:72:a0:3f:aa:96:05:04:85:90:b4:ac:9a:8c:fc:
                    69:e4:94:da:30:72:4f:e2:69:6c:1c:ae:3f:62:54:
                    fa:df:be:a7:6b:11:05:05:8f:91:37:7c:e9:7e:25:
                    7e:71:4a:47:41:9e:e4:c9:8f:b3:c2:99:b9:d7:84:
                    31:7a:18:7a:3e:22:a5:36:dc:b4:44:fe:1b:68:a5:
                    82:d6:e4:5c:58:5c:9b:ca:ad:f8:25:5d:0c:03:c4:
                    62:46:a4:c8:2e:6f:72:9a:a9:a7:40:f3:85:12:ce:
                    83:91:f8:16:cf:59:6f:40:1f:56:7f:b2:b6:74:c6:
                    89:c4:66:30:fe:b5:ab:b2:97:a7:31:41:d3:b9:f0:
                    14:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:68:BC:CA:95:99:53:4A:8E:10:A9:70:7F:FC:0C:F0:00:5F:A2:C6
            X509v3 Authority Key Identifier:
                keyid:AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:3e:be:34:d4:c1:8f:2c:1a:27:7d:a2:8d:cb:e3:22:83:1c:
         45:1e:e7:85:f5:bc:b9:20:bb:68:2d:2e:a7:20:16:be:49:4d:
         50:79:7f:93:a1:b2:68:50:2e:2b:bf:9f:6e:8b:20:66:54:d0:
         61:18:41:07:82:91:e6:d4:15:63:4c:94:19:c6:02:ef:9a:77:
         49:86:be:71:f6:cc:8f:75:6f:a5:73:f2:d8:69:3a:91:8b:03:
         8c:3b:c3:f4:5c:9d:50:dd:fa:ef:9b:1a:c0:79:16:60:11:44:
         9e:e5:4f:5f:6a:47:99:c8:0a:4c:01:25:ed:bc:a8:ad:0d:2e:
         20:19:d5:f9:9b:d9:46:27:4a:a7:eb:93:24:a8:da:83:47:5b:
         c9:9f:92:b7:05:bc:4a:0a:73:58:5f:43:f6:cf:d4:47:25:0e:
         2e:c0:4b:92:5e:34:3a:06:de:cd:4d:de:ae:8f:f5:de:30:6e:
         92:35:bf:65:89:13:14:ea:19:f6:7b:f8:a7:27:27:83:37:96:
         45:75:de:67:a8:41:54:a3:f0:ea:3c:c7:e6:2a:eb:cc:9a:f5:
         6f:aa:a9:50:2a:a8:6a:0e:e2:d8:d8:1f:79:ee:d8:bb:37:28:
         b2:47:3d:2a:29:0b:bf:70:f3:47:5d:2f:50:54:cb:ac:e5:03:
         3e:f4:25:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:38:30 2025 by rpki-client