Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
File:                     SqaReHb9eJJsGSe5_ceWWNdGyEw.mft (raw, json)
Hash identifier:          Cs9CgVfZ5KX6hXqspWyvRs8hqsHfFhw5wcsdpvyvliI=
Subject key identifier:   AD:FD:86:F4:16:52:14:02:91:AD:15:6B:08:C2:F4:87:5B:1C:F0:1E
Authority key identifier: 4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C
Certificate issuer:       /CN=4aa6917876fd78926c1927b9fdc79658d746c84c
Certificate serial:       01958B4DF19CDA2F5D45C9C4861F01C9480E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
Manifest number:          11F7
Signing time:             Wed 12 Mar 2025 17:01:35 +0000
Manifest this update:     Wed 12 Mar 2025 17:01:35 +0000
Manifest next update:     Thu 13 Mar 2025 17:01:35 +0000
Files and hashes:         1: IbpEEeU88LFNxh5nL5cwRSdFORY.roa (hash: 4vG5HojNCWpZzK5uMY8x1XnpP7QHbyElnVInTc+EUlM=)
                          2: SqaReHb9eJJsGSe5_ceWWNdGyEw.crl (hash: aknVROfA543rRPPf4Y55fQtVbLg1Xbg4agYqVH3j6uc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 17:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:4d:f1:9c:da:2f:5d:45:c9:c4:86:1f:01:c9:48:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aa6917876fd78926c1927b9fdc79658d746c84c
        Validity
            Not Before: Mar 12 17:01:35 2025 GMT
            Not After : Mar 13 17:01:35 2025 GMT
        Subject: CN=adfd86f41652140291ad156b08c2f4875b1cf01e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ad:00:50:24:f6:e3:63:7c:40:9d:88:f4:9e:
                    5e:73:90:1a:01:5d:f2:c4:d6:ff:4d:5d:85:91:44:
                    20:c3:23:10:c9:83:9c:ac:33:53:60:80:e3:a6:4c:
                    18:77:3f:1b:29:64:7d:f3:67:74:42:d9:6c:db:25:
                    6c:74:bd:86:02:cb:63:34:ac:bf:ec:34:fc:27:ad:
                    39:7a:24:63:a7:a5:19:d0:f7:ee:48:e9:df:63:02:
                    4a:72:54:ef:c2:57:65:07:c3:7c:af:1b:c4:b4:c0:
                    aa:ec:26:33:cf:38:e1:35:45:1e:f8:98:0b:c8:51:
                    42:cf:60:0e:e0:a3:69:7f:70:0a:9f:3a:39:4f:d1:
                    e8:91:30:4b:96:8f:e0:4d:36:7a:4f:04:33:11:64:
                    61:6c:fd:2e:71:8a:75:58:06:41:0d:4e:4b:0e:42:
                    e8:70:62:f3:b7:10:89:64:11:38:24:02:23:7d:b1:
                    e9:60:1a:b4:78:8c:61:a6:31:fa:94:07:7e:f4:68:
                    25:08:df:f4:ad:12:ed:c0:05:cf:f2:98:85:93:ab:
                    39:c0:f2:02:75:e2:7d:1f:06:b4:01:17:92:f5:68:
                    3e:30:e8:29:16:ef:5a:ce:58:64:5f:43:c1:13:7c:
                    37:e2:c0:26:4c:00:dc:28:86:64:64:db:40:ca:5f:
                    75:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FD:86:F4:16:52:14:02:91:AD:15:6B:08:C2:F4:87:5B:1C:F0:1E
            X509v3 Authority Key Identifier:
                keyid:4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d6:cd:d8:06:5c:bd:3f:33:49:b1:c1:cf:29:27:57:6d:b8:
         52:2f:e9:0b:be:e3:97:d7:b1:4d:61:41:d9:09:6f:72:71:66:
         2b:63:1f:53:d8:74:40:71:41:22:74:02:6d:23:11:5d:97:24:
         ea:ec:8a:ac:59:80:02:15:6a:dd:01:83:e0:b1:08:4b:93:14:
         41:65:ad:20:92:32:a9:39:4e:e5:3a:06:58:ef:d1:40:e5:06:
         0d:2b:af:7a:0e:7a:b4:9a:fe:a0:90:c1:40:5f:37:e0:b7:a2:
         28:b3:23:66:c1:b7:ec:89:83:37:8d:b6:95:6f:5a:1d:cc:d4:
         75:1d:24:4c:ae:84:7e:fc:61:29:e5:fd:1c:89:fe:8c:95:8c:
         71:e6:82:e8:a0:f1:57:f9:96:80:c1:7f:b9:9a:d0:c3:04:f0:
         9b:de:7d:21:f8:74:35:c3:86:04:9e:95:9d:63:44:9d:ad:88:
         2b:05:26:4e:0d:ed:81:b9:c2:0c:fd:89:a8:95:f8:d5:e9:1b:
         eb:32:78:8d:0f:03:40:51:36:05:6b:54:50:9a:d4:22:a8:71:
         13:4a:c9:5e:f7:0d:67:c0:d9:f4:f8:0e:8a:9c:06:5d:2d:29:
         b8:7e:3f:14:5a:f2:97:f4:ae:b2:fb:f0:0c:ad:e5:3e:cf:7b:
         d2:f6:16:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:45 2025 by rpki-client