Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
File:                     u-Sqx31jiC90NiBwTCTb7bGIDXo.mft (raw, json)
Hash identifier:          pGLFeaTCEe4Z8Yd8lLw6NnODYtqssklqISIMBxdHJrU=
Subject key identifier:   C8:12:5A:60:59:FF:C5:A6:4B:E0:96:C5:42:83:EF:BD:87:13:5D:C9
Authority key identifier: BB:E4:AA:C7:7D:63:88:2F:74:36:20:70:4C:24:DB:ED:B1:88:0D:7A
Certificate issuer:       /CN=bbe4aac77d63882f743620704c24dbedb1880d7a
Certificate serial:       0196760C285BBCC1F29B8549B943C7638DA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
Manifest number:          0469
Signing time:             Sun 27 Apr 2025 07:00:30 +0000
Manifest this update:     Sun 27 Apr 2025 07:00:30 +0000
Manifest next update:     Mon 28 Apr 2025 07:00:30 +0000
Files and hashes:         1: u-Sqx31jiC90NiBwTCTb7bGIDXo.crl (hash: tg8XPcE311ZS3wn2eptQy/4u4Xk4irP7P1tySBhUQew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:28:5b:bc:c1:f2:9b:85:49:b9:43:c7:63:8d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe4aac77d63882f743620704c24dbedb1880d7a
        Validity
            Not Before: Apr 27 07:00:30 2025 GMT
            Not After : Apr 28 07:00:30 2025 GMT
        Subject: CN=c8125a6059ffc5a64be096c54283efbd87135dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b4:de:7d:d4:0d:1e:21:bd:a3:e9:6b:6c:2a:
                    57:b8:be:c5:da:9d:c3:d8:10:23:ca:4b:be:f3:0f:
                    bb:54:7f:dc:03:71:83:e0:7b:2b:7e:ae:26:83:94:
                    49:0b:92:23:56:4d:bc:d2:57:1b:7e:f8:8d:20:8e:
                    02:fc:f8:42:6f:f2:91:44:fe:40:83:be:87:c9:0f:
                    d0:56:dd:c7:48:1b:95:a0:63:14:78:9d:c7:f5:2f:
                    32:9e:ef:b4:9c:d0:0e:05:7e:c4:d1:1d:69:f5:8e:
                    d7:f3:08:27:94:00:e0:6a:61:9d:ba:f0:b9:8a:4d:
                    d5:d0:56:3a:6f:76:45:d3:df:2d:31:64:1c:a4:2b:
                    b3:4e:26:b8:52:e7:64:12:b0:c1:45:ef:ba:c0:f5:
                    5a:f8:6f:7b:73:31:b1:d5:57:b3:e4:64:74:cd:6a:
                    c3:4c:ac:87:64:8d:f2:2f:65:d2:98:46:36:f7:69:
                    c4:41:64:f0:7a:9d:ee:b5:c5:02:a8:a1:27:61:f8:
                    22:ba:0e:96:b3:00:51:04:9a:b9:6d:e2:aa:16:1b:
                    21:40:d3:b5:3f:f8:72:20:08:7b:06:2a:50:a8:a4:
                    7b:e1:fe:90:3e:54:6e:ce:7c:36:64:0c:23:5d:fe:
                    21:e3:0b:d6:03:a9:5d:3e:b2:ad:06:cd:86:05:03:
                    41:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:12:5A:60:59:FF:C5:A6:4B:E0:96:C5:42:83:EF:BD:87:13:5D:C9
            X509v3 Authority Key Identifier:
                keyid:BB:E4:AA:C7:7D:63:88:2F:74:36:20:70:4C:24:DB:ED:B1:88:0D:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:06:d8:ed:56:30:f3:f9:c1:26:22:c3:ed:7a:9f:5a:7a:c4:
         f9:fa:ab:4b:e9:d3:6f:40:a6:3b:f7:65:ac:ca:5c:c7:b8:1d:
         fe:12:51:fc:cf:d3:4a:e0:5a:df:a0:65:26:32:0c:05:0b:8a:
         f2:0a:91:65:81:1b:cb:35:71:38:94:e6:5e:a5:4b:18:89:8a:
         39:d0:d9:c0:9c:ef:e8:30:d3:78:6c:9b:1c:23:f0:51:88:2c:
         87:13:14:d7:aa:47:cb:67:63:d2:b1:1a:03:c9:39:bc:d5:48:
         cd:17:fa:28:de:19:a6:7e:8b:6f:f2:f9:70:4d:7b:d9:2a:76:
         3d:20:4a:96:fb:f2:11:58:9d:67:71:01:d5:25:0c:43:23:9e:
         d5:da:94:e2:84:3d:fe:3e:78:4b:3a:1c:c3:39:06:72:95:5b:
         d0:a3:48:39:f2:02:73:6b:ed:cb:09:9d:f1:36:9e:00:30:7c:
         9f:21:8b:0f:ac:74:31:e8:e5:aa:95:c9:ff:c8:2a:9e:f7:7f:
         47:4b:2b:f0:2a:b2:bd:80:34:a3:b1:c0:cc:0c:9b:c9:f2:cd:
         2f:d1:af:af:86:c2:d0:4e:a7:34:33:72:33:0f:42:d6:ac:8b:
         f1:8a:48:54:df:11:f2:b3:14:e6:36:cb:91:16:e4:72:f5:d7:
         84:96:30:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:47:23 2025 by rpki-client