Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
File:                     a0dcb7gDO14R19tfLJl8hLpyXKI.mft (raw, json)
Hash identifier:          ZrV6uL+ikvng0Y3/WMkPKRm1agtyCDRQIEfutiyTwZU=
Subject key identifier:   E0:90:39:83:F6:F7:BA:3F:07:E4:0C:C8:D2:0E:A1:F2:15:46:C0:75
Authority key identifier: 6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
Certificate issuer:       /CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Certificate serial:       019641E89936F8252C824EB0DB85E4FA3F85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
Manifest number:          1486
Signing time:             Thu 17 Apr 2025 04:01:24 +0000
Manifest this update:     Thu 17 Apr 2025 04:01:24 +0000
Manifest next update:     Fri 18 Apr 2025 04:01:24 +0000
Files and hashes:         1: OVBxJN_E7KClOVOyQO1dITqXrDc.roa (hash: gtF4A20X0QOWLiRvuhbFqEg7fy+sAd/zI+eINNfliv0=)
                          2: a0dcb7gDO14R19tfLJl8hLpyXKI.crl (hash: j7m2CtCvaEZHUyEv7oqk5+lr2rxXjkHvLUWKvbk07NI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 04:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:41:e8:99:36:f8:25:2c:82:4e:b0:db:85:e4:fa:3f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
        Validity
            Not Before: Apr 17 04:01:24 2025 GMT
            Not After : Apr 18 04:01:24 2025 GMT
        Subject: CN=e0903983f6f7ba3f07e40cc8d20ea1f21546c075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:05:13:45:7b:a4:17:20:bd:34:d0:69:0c:84:
                    3a:77:be:07:a4:49:97:39:68:3b:cc:03:fd:39:c6:
                    f8:50:a0:95:f2:ba:97:6e:42:5a:cc:99:8d:a2:71:
                    b1:d4:2e:f6:d6:72:2f:94:e2:7c:63:99:34:2d:38:
                    23:fa:df:00:f8:b0:13:ca:0c:40:e0:d4:a7:4a:cb:
                    75:67:3c:11:8b:06:dd:c9:4c:7b:3d:1d:b9:c0:49:
                    40:cd:93:a0:49:5e:35:85:6c:81:a0:fb:90:38:dd:
                    f0:42:4d:e7:b7:62:cd:05:84:e4:bb:40:f5:2f:46:
                    61:45:40:b0:e7:4d:6e:e0:2b:d0:b1:8c:5f:64:95:
                    e2:fd:3b:00:ea:49:c7:15:1a:b5:b4:87:fc:ec:d6:
                    22:1e:6b:f7:9f:f6:b3:e3:13:8b:56:5f:7b:4c:77:
                    2e:13:ed:a8:72:b2:88:0c:ab:02:53:ab:c0:f3:9d:
                    df:83:08:12:99:e5:93:ad:b8:2b:4f:72:70:98:f3:
                    77:11:f2:d9:30:2d:c1:98:af:00:2a:77:29:ed:ce:
                    7b:bc:32:83:96:90:a9:6d:e9:53:7e:41:e0:da:10:
                    d3:59:ff:ef:4c:d2:84:0e:9f:7d:4a:97:0f:56:8e:
                    2e:b7:56:13:4e:ce:46:a9:ba:e7:b4:b0:ff:54:8e:
                    cb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:90:39:83:F6:F7:BA:3F:07:E4:0C:C8:D2:0E:A1:F2:15:46:C0:75
            X509v3 Authority Key Identifier:
                keyid:6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:8a:9c:bc:cf:5d:ea:fc:61:d9:5b:f4:2c:2e:ec:44:7b:34:
         b7:c6:5d:7c:20:af:0a:9e:27:d6:29:7d:03:1c:f0:f8:6e:af:
         c0:63:60:6b:9f:14:df:73:46:13:6a:a9:d2:c2:09:06:35:ae:
         1a:5c:1d:3d:c7:e2:ae:2b:2a:17:d4:f1:1d:a1:81:ef:e2:cb:
         ee:08:68:8c:13:de:1e:b9:32:e8:f0:00:5c:a3:b2:0f:be:e2:
         f2:0d:48:18:a9:29:dd:8b:12:e3:e8:22:a0:a6:3b:b5:42:c9:
         b6:3e:7e:6f:70:ea:e5:87:43:9e:09:50:b9:fa:53:20:d8:3b:
         91:52:f7:d7:77:9a:c4:30:da:b4:2b:19:f6:a3:bb:57:55:b9:
         8f:b2:0f:f9:c2:08:11:99:c1:ac:6b:36:a4:60:64:64:11:1c:
         d8:db:22:31:4b:14:e3:b8:fd:3c:08:43:1b:27:96:d1:ff:d7:
         a2:1c:7e:3a:66:68:70:92:ff:5f:79:1d:53:82:74:cc:86:a1:
         3f:df:a2:f5:66:31:96:43:38:ae:a6:a9:ca:8c:0c:3d:b1:39:
         53:58:a7:60:4a:93:5d:e5:c4:88:9b:f4:c1:86:91:d4:de:60:
         bd:96:67:5f:50:be:12:f4:4d:f7:a9:71:3b:58:1d:f9:31:18:
         4b:e2:44:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:24:33 2025 by rpki-client