Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
File:                     Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft (raw, json)
Hash identifier:          3IZhHpNwG1bMwa73/qyvjPgRyTI/O0QKCejK+Du4Z4w=
Subject key identifier:   2E:2F:ED:5B:DE:AA:51:E1:73:98:E9:B8:1C:C9:74:FE:56:26:67:80
Authority key identifier: 63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
Certificate issuer:       /CN=6353829c061a8af26de946fc9e81885c74c174c7
Certificate serial:       01964BC6ACA9EE32D75483694948487FA28C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
Manifest number:          06FB
Signing time:             Sat 19 Apr 2025 02:00:33 +0000
Manifest this update:     Sat 19 Apr 2025 02:00:33 +0000
Manifest next update:     Sun 20 Apr 2025 02:00:33 +0000
Files and hashes:         1: La2c1GzhO3LCYjtEuOjFcoNgj6s.roa (hash: hdTkzvggjd5erT4guotzR+j9YHEwpmHcJ+YP7gw1WZs=)
                          2: Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl (hash: p8z6riXlxcI6eyU+2G8L9C+8w9nVRvUK+ABx5K7mazI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 02:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:c6:ac:a9:ee:32:d7:54:83:69:49:48:48:7f:a2:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6353829c061a8af26de946fc9e81885c74c174c7
        Validity
            Not Before: Apr 19 02:00:33 2025 GMT
            Not After : Apr 20 02:00:33 2025 GMT
        Subject: CN=2e2fed5bdeaa51e17398e9b81cc974fe56266780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ec:54:25:c7:05:4f:f5:53:1c:90:83:39:20:
                    38:6d:db:1d:75:e9:80:b1:48:f6:90:fd:ee:57:26:
                    92:05:55:06:78:9e:58:15:8d:4f:e9:b8:cc:9d:4c:
                    c1:6e:cb:07:11:95:24:66:65:c3:af:e5:23:eb:f5:
                    4b:71:6a:51:81:68:1a:c9:e6:a5:f3:e9:0b:fe:7d:
                    8c:08:23:af:42:99:b0:a1:2b:5b:96:13:5d:c7:ef:
                    9e:33:05:d4:39:7b:4c:d9:78:e1:a9:87:79:18:2e:
                    0b:e8:28:1d:df:e4:02:f0:c9:3c:39:f3:65:fe:74:
                    23:10:0d:59:4f:9c:86:e2:81:32:9b:e4:0d:b3:2f:
                    52:93:01:e2:81:6f:72:13:0b:38:38:19:27:a1:31:
                    06:b2:f5:25:cd:dd:70:52:f4:05:03:47:f8:1f:89:
                    2b:07:11:f5:8b:d1:4d:06:e7:64:8a:d4:ce:5a:c3:
                    4f:fb:85:60:ed:66:f9:f6:2a:12:02:bd:e8:7b:d7:
                    e8:ba:b4:b6:91:d7:96:e7:2d:f1:8c:3e:9a:12:06:
                    a4:cd:11:d0:78:1a:d3:44:7d:f3:e4:aa:78:35:f3:
                    da:1b:d4:41:5e:69:5d:56:82:73:9f:8e:40:28:8a:
                    aa:78:e3:61:3b:d8:dd:34:53:d5:b8:d4:b0:43:92:
                    d0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2F:ED:5B:DE:AA:51:E1:73:98:E9:B8:1C:C9:74:FE:56:26:67:80
            X509v3 Authority Key Identifier:
                keyid:63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:75:fc:cf:ee:69:01:0f:0f:26:95:3e:c6:af:3b:c5:6f:d9:
         59:8d:e1:f5:65:3f:d2:bc:61:5d:2a:cf:03:c9:2c:88:5a:84:
         2e:3c:14:f7:a4:16:44:b0:21:d8:7b:e7:e6:13:b7:fd:af:2e:
         43:34:57:e1:86:4a:92:3f:94:58:b3:89:91:f3:83:d4:86:14:
         75:c4:43:87:29:f2:24:3f:b8:a6:24:29:25:a1:65:3f:4e:f7:
         48:7b:5f:a5:c5:a7:98:1e:74:de:68:9c:69:28:2f:f6:48:cb:
         3d:52:9c:3d:35:38:2c:ff:79:6b:cf:60:4d:10:d1:ee:fb:27:
         47:ce:8c:34:ba:d1:e1:a4:60:52:6c:42:b7:21:d0:af:92:33:
         a3:61:39:dd:5a:95:b7:77:b4:37:c9:03:cc:d0:ac:04:20:84:
         bb:e7:a2:8b:37:e6:cb:4f:52:e5:a4:3b:46:e0:97:22:59:3a:
         a3:65:b2:36:61:cb:12:2e:79:3c:6f:04:55:11:fd:ad:e8:c1:
         8d:f1:fa:b5:64:3d:4a:5d:12:41:d5:ab:92:61:5d:80:0f:b1:
         ec:95:81:3a:30:9b:be:7d:29:68:1c:dc:be:40:d4:12:1d:16:
         e3:23:c3:dc:b1:57:6b:42:9c:be:8e:7e:d8:dc:06:b9:00:0a:
         ce:78:b6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:18:20 2025 by rpki-client