Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
File:                     m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft (raw, json)
Hash identifier:          Yn+hwqcssDrgG0Pc4M64EodFVl+6A1nX83MSQfekYaQ=
Subject key identifier:   DB:16:C7:00:B6:C5:53:54:8B:3E:18:F5:44:6B:2F:E1:F0:0C:8F:2E
Authority key identifier: 9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5
Certificate issuer:       /CN=9be4717112fec119f6cfcace7cc4434fb47df8f5
Certificate serial:       0196790D576F0B0E3E60AE6ABB94383B0088
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
Manifest number:          1063
Signing time:             Sun 27 Apr 2025 21:00:39 +0000
Manifest this update:     Sun 27 Apr 2025 21:00:39 +0000
Manifest next update:     Mon 28 Apr 2025 21:00:39 +0000
Files and hashes:         1: QEBRn3jAI_lp2ryrgLPg_-qD0_w.roa (hash: 4DrVU+ddF+HESS/HTUefXV0kpzIAWWdGYlZL3aihd10=)
                          2: m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl (hash: Zpt1tRoq19Ip01hbprEJymbcOTHIdW9dv62ahkaTcfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:0d:57:6f:0b:0e:3e:60:ae:6a:bb:94:38:3b:00:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be4717112fec119f6cfcace7cc4434fb47df8f5
        Validity
            Not Before: Apr 27 21:00:39 2025 GMT
            Not After : Apr 28 21:00:39 2025 GMT
        Subject: CN=db16c700b6c553548b3e18f5446b2fe1f00c8f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:b7:0a:a9:29:f1:e3:fa:1a:a6:f6:c8:c6:
                    df:42:77:45:71:c9:a7:fd:b8:b9:72:78:d0:b1:28:
                    a2:15:ff:b5:a4:c2:54:25:f4:a3:08:a1:d6:cf:87:
                    cd:2e:22:91:ac:b5:86:52:c9:ec:b3:13:f2:b7:29:
                    4f:54:69:db:1f:5b:bf:d8:21:8a:55:d9:f6:9b:ad:
                    69:d9:c8:f0:5c:20:ae:e5:47:b6:42:a4:86:bd:78:
                    3b:2a:51:e7:12:c8:1a:27:d0:87:8e:6a:3b:40:2e:
                    57:8a:6e:5b:2b:9b:4a:1a:d7:42:18:cd:48:65:ef:
                    53:a7:3a:4d:01:6b:9f:a4:60:25:97:28:25:f7:08:
                    d4:e8:27:28:06:58:79:92:03:11:6f:d0:80:a4:95:
                    61:77:2b:95:7c:ff:7f:9a:64:64:3b:76:63:c3:79:
                    54:6a:37:d5:36:60:c6:45:50:a2:d8:bf:24:87:01:
                    b3:97:be:ac:b4:41:48:18:91:5b:4f:2a:1f:b0:02:
                    34:5d:cf:3e:e4:55:ef:f9:00:89:ed:af:c4:92:ac:
                    15:10:ef:07:8e:10:95:37:5a:e1:a8:41:b0:8c:1e:
                    18:ce:c1:68:60:04:1c:bb:56:9f:24:82:43:3a:06:
                    62:16:7a:3a:99:a5:8b:6f:d8:88:6d:2b:a1:40:1a:
                    90:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:16:C7:00:B6:C5:53:54:8B:3E:18:F5:44:6B:2F:E1:F0:0C:8F:2E
            X509v3 Authority Key Identifier:
                keyid:9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:79:0c:01:74:9a:a4:b1:97:cc:10:63:ce:cd:f0:23:e9:02:
         5c:76:c1:57:4c:e1:ac:25:1d:5f:d0:51:dc:e5:90:14:a4:35:
         12:2f:08:55:67:14:a8:2d:8a:79:99:9f:25:77:d5:bb:0f:74:
         4d:82:de:20:d2:b1:18:f6:7c:28:f3:bb:27:67:1e:be:95:18:
         d9:c4:2f:b8:45:91:a9:06:94:f4:c7:6a:bf:14:71:38:e2:90:
         2b:aa:7b:fa:93:c8:e5:e6:71:86:7e:0d:6a:97:be:0e:c0:1b:
         50:50:85:70:75:cf:4a:13:df:b4:38:c3:28:e7:13:0f:85:cf:
         78:10:5e:6f:e1:75:e7:dd:1c:3c:a1:36:61:fa:18:ea:1b:da:
         8f:a9:4d:bc:b4:c7:11:14:a9:0a:bb:c0:c0:dd:a3:e1:5b:a0:
         a1:07:5c:c3:fd:3e:d0:b8:69:70:3b:d8:19:48:3b:f6:e5:5a:
         f5:b4:5e:2c:ca:8f:02:f9:e7:58:51:5c:e4:26:45:7a:0a:f9:
         30:79:38:b2:c8:eb:67:54:d4:aa:b8:8d:bb:f0:15:b4:f0:6c:
         92:68:d9:59:56:59:da:94:fc:52:5c:7f:93:55:1b:46:9b:19:
         6d:1d:bc:8f:80:de:e1:db:5f:b1:cc:8f:3d:aa:f6:2a:d8:35:
         36:13:4b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:19:17 2025 by rpki-client