Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
File:                     1-nRo3MrkPCOfhTDoI146LU_NPnM.mft (raw, json)
Hash identifier:          me9S17aXhqymiZ2fTJ7B+sbrYL13MQI1IdinUoffoNI=
Subject key identifier:   99:E6:15:9A:B4:64:5C:87:8D:43:73:91:17:C8:1B:E6:22:BA:1D:89
Authority key identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
Certificate issuer:       /CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Certificate serial:       019683FEFFD664986CCA0E00704B6E44BC29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
Manifest number:          06B1
Signing time:             Wed 30 Apr 2025 00:00:49 +0000
Manifest this update:     Wed 30 Apr 2025 00:00:49 +0000
Manifest next update:     Thu 01 May 2025 00:00:49 +0000
Files and hashes:         1: 1-nRo3MrkPCOfhTDoI146LU_NPnM.crl (hash: iJAJ/fHAZ47QdTg05/aws9a3h8+9IHfvE/HlDiRLQxk=)
                          2: uCvD8eRBUAPr7t4AKxbWS0eik-M.roa (hash: S3XQTQGpmea5gdNAFZSLFW2D1IWdCXJx15hLcxcR7CY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:fe:ff:d6:64:98:6c:ca:0e:00:70:4b:6e:44:bc:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
        Validity
            Not Before: Apr 30 00:00:49 2025 GMT
            Not After : May  1 00:00:49 2025 GMT
        Subject: CN=99e6159ab4645c878d43739117c81be622ba1d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3f:ef:73:0a:ed:f8:a0:c6:0e:1d:a0:33:aa:
                    45:7e:94:ee:94:50:8e:24:98:4a:0e:04:02:c7:0f:
                    1b:7d:f5:9a:0f:70:8c:fa:d2:e4:7d:f3:9f:10:29:
                    15:6e:79:7c:f4:d1:63:5c:6f:61:4c:a8:b9:d0:65:
                    cf:ea:56:49:6b:70:1f:25:69:15:df:f5:a8:a4:ac:
                    92:04:8a:4d:06:a8:39:c8:d0:7e:fe:f2:9a:cc:14:
                    c4:35:4a:b6:30:66:56:19:da:37:28:2b:cf:bc:24:
                    c9:0b:12:38:f8:27:96:54:1a:50:cb:ad:32:d1:dc:
                    78:5f:7e:9a:59:83:28:cd:09:ee:97:6c:d9:a8:3d:
                    32:40:4d:7d:e6:44:51:8b:45:25:7c:55:9c:c0:08:
                    94:af:c7:59:fc:01:bd:9e:49:3a:ce:61:93:53:ac:
                    ce:b5:4b:58:e6:fb:68:55:40:93:d9:8a:ed:42:a7:
                    6e:5a:b8:91:94:c8:63:8a:16:db:0f:cd:de:55:f5:
                    2e:6e:30:8c:88:f4:e4:8b:8e:e5:55:cf:8c:25:44:
                    e0:52:1b:f2:0d:70:5e:60:95:ce:4f:d0:c6:4a:ac:
                    83:7f:e3:f8:88:69:ba:42:ea:1c:7e:cf:cb:c4:a7:
                    b4:01:64:ba:10:9f:78:88:ff:a7:06:e9:31:ee:e8:
                    0d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E6:15:9A:B4:64:5C:87:8D:43:73:91:17:C8:1B:E6:22:BA:1D:89
            X509v3 Authority Key Identifier:
                keyid:FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c9:37:a3:17:5e:44:73:2f:01:7c:6b:90:98:68:28:b3:1c:
         9d:56:df:42:f5:c5:3f:59:27:1c:4d:0c:79:70:8e:34:e8:9e:
         65:eb:df:ac:4d:dd:c8:b8:f9:c3:32:15:5c:57:40:7a:dd:f6:
         d1:1c:1f:83:a4:85:86:c2:51:c1:1d:f5:c0:34:c3:ed:70:f4:
         fc:75:31:75:4e:02:e4:af:cc:73:fb:3a:b3:10:8c:36:e4:a3:
         70:5e:c8:1a:fa:0f:a4:9a:eb:53:4a:cf:19:20:59:79:a8:c4:
         dd:9e:2c:6d:1b:67:b2:54:d4:81:ce:05:9a:24:12:86:96:3a:
         a1:6e:0b:4f:ea:25:44:79:8b:db:80:e8:55:03:7c:59:4c:54:
         56:b0:56:cb:c6:15:c5:c2:26:f2:8b:33:f1:39:89:5b:89:e6:
         ea:dc:b3:c6:97:45:3e:09:f7:24:aa:53:ad:6a:68:98:d5:04:
         62:74:35:a3:28:0a:c6:dc:de:4c:64:96:e0:74:67:e9:29:a5:
         29:8a:33:77:df:c1:41:a7:7a:04:51:15:db:e0:86:59:f4:b4:
         94:43:70:f1:18:35:5b:fc:1c:ce:76:68:09:28:fa:0b:1c:4a:
         d4:98:7d:ab:0e:20:92:d0:cf:a8:d7:da:2e:68:ef:42:f1:4e:
         b3:c0:6a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:18:25 2025 by rpki-client