Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File:                     _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier:          CR8QJPtTzyZgTm3fG245uuVTrN/0b6VD16C7eLJSPoc=
Subject key identifier:   70:14:32:6E:21:F6:38:60:CE:63:14:C7:04:DB:06:A3:69:7F:0B:58
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer:       /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial:       01965425924C10898B9330AF535AB89646CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number:          0CC6
Signing time:             Sun 20 Apr 2025 17:01:10 +0000
Manifest this update:     Sun 20 Apr 2025 17:01:10 +0000
Manifest next update:     Mon 21 Apr 2025 17:01:10 +0000
Files and hashes:         1: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: eSN3DRR/1iDKGKxXA5vSSmQ+T/oTKN2/XllJrThxPx4=)
                          2: mmQZQMc3pi55Js-9aVzfnXjlBGY.roa (hash: 93uL4N1ZhKCAtYqh9gXaRNVs2vWfWmN+xYkYAO6a64o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:25:92:4c:10:89:8b:93:30:af:53:5a:b8:96:46:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
        Validity
            Not Before: Apr 20 17:01:10 2025 GMT
            Not After : Apr 21 17:01:10 2025 GMT
        Subject: CN=7014326e21f63860ce6314c704db06a3697f0b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d8:fc:7a:09:ae:bb:95:6c:46:1d:9c:1a:13:
                    2a:0a:ed:35:75:33:b9:75:1f:2f:7c:ba:b3:87:e7:
                    e1:15:50:70:a8:05:87:89:64:00:c1:5a:64:37:15:
                    09:0b:af:20:82:7f:71:a3:a4:01:d9:b5:2e:f0:2e:
                    4e:06:73:60:b6:c5:08:0f:fe:ef:8c:b3:27:1d:4a:
                    ab:7e:ae:1f:e6:46:ea:22:0c:00:6a:37:f7:95:5f:
                    cd:0f:57:66:8a:2e:ee:c2:14:e0:0c:2a:c4:20:84:
                    ef:8a:85:30:06:ff:7c:09:cd:3d:55:59:f8:87:23:
                    e5:89:66:9c:7a:a2:05:79:4c:a5:74:f7:7f:f7:a9:
                    99:9e:e5:4f:a9:d4:46:da:85:d9:4a:6d:cb:8e:d7:
                    89:8c:55:35:9c:ab:37:4d:17:0e:73:4b:a7:52:62:
                    54:1a:ae:d9:9a:f3:e9:c0:2e:88:b9:8e:83:11:3f:
                    34:c1:af:fa:fb:19:c4:22:b4:35:b3:26:2d:79:2a:
                    88:7f:dd:c6:3d:ba:d5:40:54:08:3a:f4:5c:06:63:
                    92:65:c1:23:f3:b4:4d:06:72:45:0d:44:d2:d4:99:
                    f8:53:57:34:ee:82:6c:86:7b:c9:18:b5:31:4a:43:
                    26:11:80:07:72:b8:49:4e:3c:94:aa:e3:1e:2c:28:
                    63:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:14:32:6E:21:F6:38:60:CE:63:14:C7:04:DB:06:A3:69:7F:0B:58
            X509v3 Authority Key Identifier:
                keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a2:c3:9f:61:8e:ec:7a:d1:6c:b0:f4:05:bd:64:73:64:e2:
         13:44:a3:5e:5b:4d:67:d8:55:0b:9c:70:eb:32:94:ba:44:60:
         2a:df:c3:62:73:ab:a4:75:00:9a:1b:98:39:7c:3f:a9:63:db:
         10:e1:00:cf:0f:62:64:98:8c:f3:83:1f:1f:72:6e:4f:28:a7:
         1b:1c:9f:e8:08:17:d5:a7:5e:e8:04:08:0b:a4:ab:30:3a:50:
         2a:14:ad:a9:ab:8c:db:0f:fc:e9:f8:53:6d:27:6d:78:3a:42:
         d0:e8:79:12:a8:ea:f6:91:81:0a:5e:1f:a6:e7:70:99:62:8f:
         52:5e:9f:90:a2:fc:cc:81:e4:0f:92:bc:71:1b:85:0c:a4:7a:
         36:f2:83:d1:b5:5e:4f:7e:8d:67:70:e4:43:8e:91:a9:b2:0f:
         0f:94:8d:dd:d5:aa:50:8e:c7:35:bc:64:2a:92:60:09:fe:e3:
         ad:41:22:3f:d8:f8:64:ab:c0:95:1b:7f:34:fb:80:01:dd:d4:
         42:da:87:f8:8f:41:ab:d3:07:cc:25:9f:d5:0c:38:df:ee:cb:
         f9:bb:6c:25:d5:62:f6:bf:cc:e4:be:72:12:d6:9a:16:30:07:
         22:bc:e1:6a:b6:0e:93:20:0c:ae:19:9a:98:f3:64:cd:40:13:
         82:47:26:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:34:01 2025 by rpki-client