Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
File:                     Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft (raw, json)
Hash identifier:          MWqwymp9DNGFvZTA7kj92Xp2mHOjyfShf3bBsa74b3Y=
Subject key identifier:   11:4F:35:9B:20:59:E6:22:99:0C:99:40:75:27:17:E4:00:AA:3C:3F
Authority key identifier: 0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
Certificate issuer:       /CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Certificate serial:       01964D47420E937A0582478F711B0096AE02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
Manifest number:          0D06
Signing time:             Sat 19 Apr 2025 09:00:37 +0000
Manifest this update:     Sat 19 Apr 2025 09:00:37 +0000
Manifest next update:     Sun 20 Apr 2025 09:00:37 +0000
Files and hashes:         1: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl (hash: C5MRqo48pYlsSe1CjMhumfg6AZPNJ9/xW7E9KyyOg9o=)
                          2: q75mVExwlcu32JNTYIQla5p7m1o.roa (hash: x+d/+bvOF1j8LDo0fwzIQNZsHB7Abtd57CLyM/qqXNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:47:42:0e:93:7a:05:82:47:8f:71:1b:00:96:ae:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
        Validity
            Not Before: Apr 19 09:00:37 2025 GMT
            Not After : Apr 20 09:00:37 2025 GMT
        Subject: CN=114f359b2059e622990c9940752717e400aa3c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b7:ff:7b:6b:c3:16:c1:74:e7:e4:d0:44:60:
                    68:ad:fc:38:76:c0:e0:ba:45:05:6f:2d:24:87:13:
                    86:9d:ff:53:87:d8:df:8c:0d:98:1c:d4:1b:62:1f:
                    02:ae:5a:d1:27:da:2a:42:f6:02:11:bb:8f:df:c0:
                    27:81:e6:5b:48:03:fc:dd:2a:c1:23:8a:fb:90:c4:
                    ff:df:88:f9:a1:6f:fb:5d:f4:de:6e:90:69:3c:16:
                    46:4d:ce:32:e9:99:4d:1c:98:8a:18:4a:f8:b7:33:
                    ed:fb:33:ac:b6:65:92:59:54:58:81:99:21:0a:c9:
                    96:86:16:26:c2:02:9a:36:08:3f:43:c1:a2:b2:b8:
                    f0:a1:cf:b0:1f:f4:e4:10:aa:91:a8:33:2a:b3:c4:
                    1a:78:f5:cb:c4:d6:80:3b:65:5d:90:7e:79:d2:00:
                    19:b1:96:85:ef:a8:dd:97:4c:dc:5d:95:26:1b:8b:
                    32:bb:f2:18:f9:a2:e5:32:f1:7a:16:54:7d:93:b1:
                    2d:7a:4f:63:b0:01:58:1e:ba:85:ef:31:ca:6c:51:
                    44:f1:99:62:b8:7f:5b:73:5d:a5:5c:02:f3:e8:08:
                    bd:c8:6f:02:30:02:b1:19:40:1a:23:54:3e:f4:71:
                    e2:30:70:7c:bf:94:fe:cf:84:5c:b2:06:6a:bd:0c:
                    bf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4F:35:9B:20:59:E6:22:99:0C:99:40:75:27:17:E4:00:AA:3C:3F
            X509v3 Authority Key Identifier:
                keyid:0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:1d:f0:3f:a7:ec:31:65:49:e3:7f:18:39:2f:a1:f8:69:13:
         68:96:0b:76:2d:8a:73:4d:76:cf:19:20:4f:b7:eb:f3:9d:8c:
         e6:d5:a7:4b:8c:9c:f9:1a:ec:7f:ae:a9:b5:62:55:ae:1d:15:
         dd:76:74:85:5a:15:7a:d9:71:2f:9c:89:b6:71:f9:10:e3:9c:
         4f:ac:a0:54:07:14:97:ff:78:f8:a1:09:62:af:ae:c6:7c:81:
         bd:16:1d:01:09:7b:5d:af:dc:33:51:49:3e:54:f0:f5:3b:d8:
         4a:ed:f1:e8:93:5c:cd:62:fb:56:77:b5:24:82:95:42:43:70:
         e6:40:f0:57:8f:35:92:45:c8:ab:8d:9c:32:4f:3a:a9:00:c5:
         cf:9d:72:2b:6e:46:6a:a5:20:7b:34:4e:c7:36:98:63:c3:f2:
         c3:28:a7:b2:9a:ec:6b:41:fa:0f:9a:d7:4a:77:04:60:2d:97:
         2e:09:d8:0b:2d:7c:ca:81:88:8c:6e:8f:7f:56:33:8c:a1:9b:
         87:6b:59:3b:07:fe:0a:cb:08:02:df:0f:d0:e7:44:ed:55:e4:
         ff:22:48:e0:cc:63:22:d1:7b:c2:48:43:91:2f:81:56:6d:3e:
         c5:e0:b2:16:c1:0f:99:b3:bb:12:08:72:77:bd:6b:dc:f4:7f:
         71:51:8d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:18:03 2025 by rpki-client