Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.mft
File:                     re6JwT1t5zqJRAS_fq-e5eQN6jM.mft (raw, json)
Hash identifier:          WMBCz1TnqcAMTQvD1HKUB1a1aBQ9eeUpN6YQWSP62Xo=
Subject key identifier:   08:EB:57:0D:E9:07:12:A3:23:A7:56:65:B3:BF:11:0C:46:3E:8B:41
Authority key identifier: AD:EE:89:C1:3D:6D:E7:3A:89:44:04:BF:7E:AF:9E:E5:E4:0D:EA:33
Certificate issuer:       /CN=adee89c13d6de73a894404bf7eaf9ee5e40dea33
Certificate serial:       0196520015132F6D6917DB5351ECCD103FA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/re6JwT1t5zqJRAS_fq-e5eQN6jM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.mft
Manifest number:          056A
Signing time:             Sun 20 Apr 2025 07:00:59 +0000
Manifest this update:     Sun 20 Apr 2025 07:00:59 +0000
Manifest next update:     Mon 21 Apr 2025 07:00:59 +0000
Files and hashes:         1: GGsR3CTZp_ySYvfRDUPF91N6wRs.roa (hash: +hbDhYAqa8s6kUaFV+M346NJRpWW83Nz49mGZoVut4k=)
                          2: re6JwT1t5zqJRAS_fq-e5eQN6jM.crl (hash: BuRU5JA9KVYTR8HPb4WK+0aDzQK3PVvA1TdXJoxFVqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/re6JwT1t5zqJRAS_fq-e5eQN6jM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:00:15:13:2f:6d:69:17:db:53:51:ec:cd:10:3f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adee89c13d6de73a894404bf7eaf9ee5e40dea33
        Validity
            Not Before: Apr 20 07:00:59 2025 GMT
            Not After : Apr 21 07:00:59 2025 GMT
        Subject: CN=08eb570de90712a323a75665b3bf110c463e8b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:74:aa:f2:c7:2b:93:37:3d:c5:6b:ee:c3:69:
                    1b:1b:85:7e:6c:fb:68:ce:dc:41:2f:35:ba:02:48:
                    47:20:a8:b2:d0:ab:06:8e:b0:42:a0:e7:b1:59:19:
                    b9:56:12:d1:14:e2:b6:f6:a5:ff:ab:c3:65:c9:e7:
                    4d:87:d5:bc:61:07:5a:4f:b4:5c:08:70:ec:2a:a1:
                    44:f6:de:6b:97:9f:17:d8:10:51:33:4a:de:7b:ec:
                    1c:a0:e0:a8:12:96:16:76:35:12:67:26:74:36:cb:
                    9e:b2:7f:ce:cb:e9:48:95:f9:25:d2:cf:f9:1f:49:
                    ed:71:da:e8:a0:96:ef:8f:f6:f5:59:f6:97:66:43:
                    a4:19:f7:26:bd:63:c4:91:35:a7:2f:82:3d:ff:67:
                    8b:83:df:77:e6:5a:ae:13:b0:3a:00:5d:65:ae:3f:
                    bb:ff:27:9f:9a:96:93:55:04:07:ba:c5:a4:e5:55:
                    62:26:40:f9:bb:0b:37:7c:8d:5f:7b:ba:09:20:53:
                    f5:2b:1f:ac:f7:c6:73:e5:f6:37:55:d2:98:49:6b:
                    94:65:6b:e1:b2:64:77:19:78:bd:4a:87:91:1f:fe:
                    7a:2a:02:c0:90:83:ab:3d:42:00:f9:5f:d6:94:12:
                    ac:74:81:e4:c0:45:6f:20:7b:4f:1b:0c:58:19:34:
                    5e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EB:57:0D:E9:07:12:A3:23:A7:56:65:B3:BF:11:0C:46:3E:8B:41
            X509v3 Authority Key Identifier:
                keyid:AD:EE:89:C1:3D:6D:E7:3A:89:44:04:BF:7E:AF:9E:E5:E4:0D:EA:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/re6JwT1t5zqJRAS_fq-e5eQN6jM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:3c:9f:10:4a:a2:b8:fe:7c:33:a2:61:74:e3:0b:a8:16:af:
         fa:1c:cb:9d:19:a7:63:ff:4b:ac:69:40:19:b7:c7:bf:8e:bf:
         35:d4:ac:84:e4:f4:ba:ac:fc:84:bd:8b:1c:85:98:ac:8e:77:
         81:50:c6:60:5e:c5:4a:dc:e7:19:1f:73:d6:d9:f7:ec:3c:89:
         fa:6b:38:ff:24:b5:6f:e5:0e:93:f7:52:b6:6b:f0:25:79:23:
         45:2b:2c:66:df:13:28:9f:21:3d:62:89:ef:77:e0:3f:21:43:
         73:e4:fe:e6:f7:ba:1d:10:f6:eb:09:92:4c:14:b7:cb:58:17:
         37:13:13:03:c4:b1:0b:60:55:ac:fc:42:a5:ad:3c:0b:b0:8a:
         d7:bb:d3:3e:a3:af:ee:d2:18:3b:41:f2:d0:5e:cb:23:66:96:
         20:59:50:6b:66:0c:8a:2d:72:62:5b:7b:6c:2d:95:6f:02:db:
         a7:d8:1f:38:86:aa:11:af:55:fc:90:b6:89:82:b2:da:44:f9:
         9c:38:53:78:c6:1c:88:fa:97:ab:a9:ce:29:43:69:11:24:9e:
         6b:d3:ef:ec:32:e2:b3:db:f5:dc:c1:4f:c0:fd:99:43:2f:df:
         7a:9d:4f:d8:a9:81:b1:c3:b9:90:b3:62:26:d4:01:42:25:6a:
         28:44:66:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:52 2025 by rpki-client