Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
File:                     ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft (raw, json)
Hash identifier:          KAKuknzLUDB+7oiXYKb13f/Qv5vwKz3rU1RP/0l7Zp0=
Subject key identifier:   07:94:2A:5F:C3:02:BB:CC:D1:FE:1A:B9:53:1A:EA:C6:4B:71:48:1D
Authority key identifier: 8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
Certificate issuer:       /CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Certificate serial:       019511D9C87F846A186C29360088675C8114
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
Manifest number:          1455
Signing time:             Mon 17 Feb 2025 03:00:40 +0000
Manifest this update:     Mon 17 Feb 2025 03:00:40 +0000
Manifest next update:     Tue 18 Feb 2025 03:00:40 +0000
Files and hashes:         1: ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl (hash: 91c4WJcYseOGuBvzoyRiJO44NXzC8ZLcI2caVs+azYI=)
                          2: yIUv-9UBFSosZaxk_SAM-oPYWDg.roa (hash: A5HtFiQ3ZfwDO/6Fs5djNbIUq/3hrajgNOS9o/n1CuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:d9:c8:7f:84:6a:18:6c:29:36:00:88:67:5c:81:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b19f3d7ffea957261501e91664ff6823ed936ad
        Validity
            Not Before: Feb 17 03:00:40 2025 GMT
            Not After : Feb 18 03:00:40 2025 GMT
        Subject: CN=07942a5fc302bbccd1fe1ab9531aeac64b71481d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:ac:3b:26:c7:4b:23:aa:a9:13:86:c5:eb:
                    c1:d2:56:88:07:d4:e1:de:05:71:52:ea:24:4b:8f:
                    f3:6c:76:91:35:47:59:d3:79:f4:7e:77:ed:66:38:
                    c8:ea:d9:30:47:6d:c1:27:40:f4:7e:99:49:88:12:
                    c7:02:e8:b6:e0:2b:ad:87:11:81:dd:dc:de:29:a9:
                    d7:56:0b:51:ef:cf:9c:65:3e:64:51:40:a7:d5:78:
                    73:e8:94:b9:dd:0d:6a:a5:38:0b:fd:85:d1:8d:38:
                    56:9e:dd:98:57:74:3b:fa:38:ec:06:ea:2d:e1:6f:
                    6b:d1:53:f7:1e:87:97:ea:cb:a9:0e:9a:16:c3:23:
                    ef:8b:f9:38:35:41:96:8e:f7:41:a6:af:dc:dc:66:
                    7d:26:db:71:98:8e:f1:9d:03:b8:bb:69:a8:13:1e:
                    34:c6:53:60:5a:2b:36:ab:50:97:c0:e6:3a:a9:de:
                    27:9c:21:69:6c:84:75:39:7d:3a:c9:72:d7:45:c7:
                    8f:e5:e5:86:82:57:24:81:e0:56:da:25:01:43:33:
                    c4:09:10:5f:17:86:c1:46:df:b0:38:83:4b:44:bd:
                    f6:87:ce:4d:ba:56:ad:a7:45:49:3e:eb:82:1b:31:
                    2c:3c:65:81:be:4a:77:40:8d:a2:37:1d:d7:32:70:
                    fc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:94:2A:5F:C3:02:BB:CC:D1:FE:1A:B9:53:1A:EA:C6:4B:71:48:1D
            X509v3 Authority Key Identifier:
                keyid:8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:73:24:0f:db:f6:8e:21:10:94:97:16:e2:87:71:4b:a1:b6:
         a7:06:1d:f4:f3:ab:ed:9c:f5:4d:ff:ed:86:c0:82:af:08:95:
         3b:f5:62:55:59:94:bb:d8:02:a8:d1:07:bf:8f:b2:8b:2c:6e:
         f3:dd:3b:05:2c:9b:60:6d:93:6b:6a:2d:03:86:46:9f:3e:d0:
         d1:3b:6c:37:8e:d9:75:23:cb:9b:45:0b:69:6b:5b:fa:b4:aa:
         24:8b:54:e9:90:35:ca:f7:87:59:49:55:aa:92:1b:23:23:33:
         0a:83:03:d2:f6:6c:90:49:74:e1:dd:66:0f:31:47:c0:99:14:
         13:60:b9:32:f1:12:6c:45:c3:57:92:92:1d:fa:be:aa:2f:3e:
         69:58:7d:0c:8e:f4:da:dd:19:e6:31:ae:d8:5f:16:53:c1:76:
         2a:56:84:3c:9f:a7:69:7e:50:dc:67:39:93:70:85:69:ca:9a:
         76:f8:29:9b:0c:55:63:52:65:3f:90:b9:8a:ac:d8:8f:e4:ae:
         44:b9:f2:7a:0a:3c:0e:b9:7f:e5:c5:ea:a0:a7:43:7b:d6:16:
         76:c2:15:0f:01:08:1e:f2:a8:47:ce:a4:c2:ee:f1:7b:6e:f9:
         db:68:5b:e5:88:ff:96:ad:ce:ff:b7:bd:b7:95:44:f3:d0:e4:
         3d:95:6d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:48 2025 by rpki-client