Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
File:                     ascqc0OS9s95Kz0MPtEYIChvGfQ.mft (raw, json)
Hash identifier:          sEPkuhuKq5boU/hp9dwBDkwJRXb0QXGAhScBIzMX47M=
Subject key identifier:   9D:93:15:8F:B1:D8:9D:15:0E:0B:96:40:CD:31:F9:2B:9C:3F:E7:C1
Authority key identifier: 6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
Certificate issuer:       /CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Certificate serial:       01967FEADA3A5F4DCB3835050E465085BDBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
Manifest number:          1053
Signing time:             Tue 29 Apr 2025 05:00:19 +0000
Manifest this update:     Tue 29 Apr 2025 05:00:19 +0000
Manifest next update:     Wed 30 Apr 2025 05:00:19 +0000
Files and hashes:         1: 4Z83aeiL1qKhRZ2WNkILMOJ_sWw.roa (hash: n41nIQZg7HLjUhRFvbwLNJk7mnBYZCymPOk6XFqJF+8=)
                          2: ascqc0OS9s95Kz0MPtEYIChvGfQ.crl (hash: ccGn0VQUPv6aGyc6XkBJXUIBYthxEF3FCWNTSTFwBCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 05:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:ea:da:3a:5f:4d:cb:38:35:05:0e:46:50:85:bd:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
        Validity
            Not Before: Apr 29 05:00:19 2025 GMT
            Not After : Apr 30 05:00:19 2025 GMT
        Subject: CN=9d93158fb1d89d150e0b9640cd31f92b9c3fe7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:09:83:f2:a0:48:bc:a0:8a:48:db:df:6f:
                    44:1b:44:b6:c2:e4:42:4c:35:43:9c:29:b8:2e:15:
                    07:f4:ae:cb:77:76:a9:af:4d:d3:03:56:17:69:21:
                    ec:92:66:09:03:2d:33:51:84:8a:17:0b:77:35:b1:
                    dc:4a:59:12:18:27:62:e0:36:bf:da:c0:7c:70:fb:
                    7b:a0:30:39:14:80:bd:a9:fa:cf:12:34:35:37:f0:
                    e5:c1:69:8e:9b:20:b9:f0:e8:11:98:7f:69:c8:bf:
                    55:97:bc:b6:4a:32:71:95:f2:8d:7a:5c:3f:46:0c:
                    81:97:cf:27:7b:6f:46:f3:fa:a2:c7:5f:c8:3c:24:
                    d4:b6:d5:74:11:24:c9:df:c0:b9:f6:89:0a:6a:a1:
                    3b:89:bd:c3:28:bb:8e:ac:b1:b8:d1:3f:1c:0d:86:
                    02:ca:8c:4b:1d:f3:96:d3:d3:45:cc:fa:07:63:5b:
                    62:fd:95:ad:2d:a7:ed:65:a8:20:e7:27:ea:e6:c9:
                    5a:a0:de:c9:e9:8d:6c:40:9d:25:71:d3:f1:da:1d:
                    6e:d6:0d:f0:d5:92:6b:b3:ae:90:02:2f:20:f1:08:
                    30:01:5b:cc:22:95:0f:5f:51:56:0d:2b:fe:46:6e:
                    c6:02:1f:78:91:29:e1:94:66:ff:01:73:42:16:4a:
                    32:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:93:15:8F:B1:D8:9D:15:0E:0B:96:40:CD:31:F9:2B:9C:3F:E7:C1
            X509v3 Authority Key Identifier:
                keyid:6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:72:21:77:de:8f:d7:9c:96:b5:63:19:17:1f:11:fb:b3:f1:
         26:ba:fa:82:1a:3f:c2:6d:41:f7:f5:c5:17:52:4b:c5:2c:92:
         a6:f3:46:ab:52:c0:c4:87:c5:ad:42:3c:38:bf:26:7f:53:cc:
         84:a9:84:10:41:be:60:60:3b:ea:b9:16:f1:19:7f:f8:d9:34:
         10:42:c4:5b:76:cf:05:d9:35:13:38:13:ac:8e:c8:fa:4d:f3:
         14:4a:82:8b:a9:71:5f:07:d5:81:5c:fa:5e:20:e0:78:d1:22:
         b0:2d:f6:4b:c4:1e:0a:11:4a:31:be:b5:e0:03:e5:74:72:6a:
         b4:f7:57:a3:ea:c0:96:21:6b:97:18:29:30:04:73:a7:e2:61:
         50:1d:fb:b1:b5:85:dc:6c:ae:fb:e2:df:aa:66:de:77:82:06:
         72:00:cc:1f:0b:39:d6:5c:10:87:82:1e:5a:24:08:34:89:d3:
         6f:76:74:61:b4:18:2b:e3:8c:e2:15:df:b1:c9:bf:f6:71:32:
         2b:ed:49:e6:d5:1d:17:0e:26:ab:04:fa:c2:c4:e6:fc:39:35:
         43:4f:bc:42:57:02:24:96:5b:4a:ef:09:a5:a3:2e:cf:7c:5e:
         05:20:7f:ff:68:89:e7:59:56:1a:62:63:2f:9c:46:be:45:95:
         33:f9:18:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:48:42 2025 by rpki-client