Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
File:                     g103QIoiXxqJZPjXK8mdm75TMjQ.mft (raw, json)
Hash identifier:          ayoVlKQh/4zNLHrq8CB4C7lhAk/N64+mWAXDXv82bdM=
Subject key identifier:   26:9C:F1:47:0F:83:5F:85:E7:23:FC:55:80:32:6B:D2:4D:51:D9:75
Authority key identifier: 83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
Certificate issuer:       /CN=835d37408a225f1a8964f8d72bc99d9bbe533234
Certificate serial:       0196C728A611DA0E0F676E84936E13F5D043
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
Manifest number:          1509
Signing time:             Tue 13 May 2025 01:00:52 +0000
Manifest this update:     Tue 13 May 2025 01:00:52 +0000
Manifest next update:     Wed 14 May 2025 01:00:52 +0000
Files and hashes:         1: g103QIoiXxqJZPjXK8mdm75TMjQ.crl (hash: unfpLiMWKISGwEFxLXyUuEmrlTu3scEfDXV8EJbN9So=)
                          2: wmXlcNkh_2vesQLMJed5vd6SqTE.roa (hash: yFr4o4FxK8GJrbTrCTeUvkik35biGf8xB3yfWuA7Ue8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 01:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:28:a6:11:da:0e:0f:67:6e:84:93:6e:13:f5:d0:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835d37408a225f1a8964f8d72bc99d9bbe533234
        Validity
            Not Before: May 13 01:00:52 2025 GMT
            Not After : May 14 01:00:52 2025 GMT
        Subject: CN=269cf1470f835f85e723fc5580326bd24d51d975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:cc:42:9e:3c:88:a2:35:08:4a:4d:33:b3:
                    b5:c8:39:26:dd:18:fe:40:1e:e4:cf:a8:a4:49:83:
                    a1:7b:67:d5:ea:44:e5:10:db:bc:e5:86:c1:2a:d1:
                    e2:74:19:f3:9f:8c:6b:be:49:4f:ec:0a:93:c0:5e:
                    15:d7:8c:4b:8c:06:b2:de:eb:02:86:92:b8:c2:58:
                    db:5f:fe:33:60:91:64:38:42:e6:08:70:04:0d:9a:
                    22:be:4a:e9:2b:b1:fa:21:0c:06:ce:35:46:93:69:
                    05:b5:69:d6:c7:6d:67:ab:29:d7:26:f6:d6:7a:f9:
                    4e:3b:07:db:34:cb:f4:43:f7:9f:48:15:44:e8:f7:
                    8f:db:d7:2b:ef:dc:bc:55:d5:83:e0:26:aa:b3:a3:
                    40:6a:e9:c4:9a:ea:99:e8:03:13:bb:e3:6f:b5:1d:
                    f5:97:09:83:69:c5:56:8f:82:cf:a9:de:5b:8f:c4:
                    56:55:85:2d:ef:20:32:ed:e4:ac:96:51:66:32:28:
                    d5:a5:87:5c:68:0c:24:19:77:aa:1f:5e:83:1e:98:
                    02:5c:eb:79:17:ba:54:8e:c3:a0:ac:14:ed:a9:bc:
                    1b:0c:3a:74:44:bb:fc:ea:fe:6d:97:82:7d:92:03:
                    95:7b:b0:52:48:37:2d:ed:33:ad:24:44:b9:d9:2c:
                    60:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9C:F1:47:0F:83:5F:85:E7:23:FC:55:80:32:6B:D2:4D:51:D9:75
            X509v3 Authority Key Identifier:
                keyid:83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:1e:4b:55:f3:60:91:b3:d7:8a:6e:fe:6a:c0:f6:dc:28:84:
         a4:80:03:57:b2:5d:db:f9:1a:48:fb:16:b4:0e:a9:b5:0c:6d:
         be:a3:08:7d:ec:10:6f:da:cd:c9:a0:0f:a9:01:8d:3f:f3:2a:
         30:46:6b:48:95:57:e9:0f:a1:e6:7d:5a:8c:46:29:2e:d1:d6:
         37:48:08:34:0a:98:62:26:95:d7:87:ba:b6:e8:10:6a:c1:08:
         03:52:f3:6c:f5:ee:e6:09:42:c7:7f:c8:64:e2:09:18:ad:5a:
         22:eb:8c:1b:61:4f:cc:90:52:f7:c4:48:89:26:bf:49:11:9a:
         cd:28:e5:8d:63:49:a9:1d:d5:21:8c:e0:08:2f:46:2f:8d:e5:
         c0:44:26:9f:48:e1:59:4b:11:14:f9:7a:40:43:c1:5b:9d:9d:
         7c:50:f0:30:4d:2d:7c:3e:9a:e0:69:70:cf:ce:78:3b:fd:00:
         96:3f:99:37:93:cf:a6:7a:ae:7d:f6:4d:7a:c6:5b:69:3f:03:
         df:d3:7d:04:86:5c:23:ec:ee:da:d7:f1:ec:6d:ce:36:89:b3:
         dc:ac:f4:2d:d0:bb:c1:20:b5:08:a8:ff:e8:af:44:04:5b:06:
         e0:6b:07:c9:51:9e:b9:32:a5:71:01:df:ac:4c:db:53:db:cf:
         82:bf:74:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:55:41 2025 by rpki-client