Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
File:                     qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft (raw, json)
Hash identifier:          OVw3Sr3mAKFb+CyHqy0Iw98FqYCxbDF+8nTJDGjo0zM=
Subject key identifier:   A6:A7:F9:99:9C:27:B1:13:C1:F4:C0:25:4E:99:FA:69:FA:D6:A9:2A
Authority key identifier: A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71
Certificate issuer:       /CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
Certificate serial:       0196748B9EFF64A1980EC562ABCFDC1BC709
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
Manifest number:          150B
Signing time:             Sun 27 Apr 2025 00:00:29 +0000
Manifest this update:     Sun 27 Apr 2025 00:00:29 +0000
Manifest next update:     Mon 28 Apr 2025 00:00:29 +0000
Files and hashes:         1: qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl (hash: g2kvq++UzOs8I2kRCO2HE6PwD2gb4JnnSQhZ4fHduoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:8b:9e:ff:64:a1:98:0e:c5:62:ab:cf:dc:1b:c7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
        Validity
            Not Before: Apr 27 00:00:29 2025 GMT
            Not After : Apr 28 00:00:29 2025 GMT
        Subject: CN=a6a7f9999c27b113c1f4c0254e99fa69fad6a92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:76:70:dc:38:60:82:9f:db:df:29:6c:9a:36:
                    ed:c2:cd:b3:23:34:35:78:b3:f3:94:47:f2:eb:b5:
                    1b:7d:d7:66:6b:27:de:c9:4f:9d:ba:a7:2a:33:22:
                    12:14:d3:0a:e5:ac:fb:2c:c6:2a:65:9b:db:06:c9:
                    b1:39:72:92:5b:9e:66:0d:1e:80:30:f3:4a:06:06:
                    b7:ba:43:f4:3d:e8:d4:a2:9e:6a:62:82:2c:13:37:
                    2d:c9:eb:d2:7d:07:ab:47:ee:1f:a1:64:54:88:bb:
                    31:82:a7:22:8e:09:1c:6c:24:e0:35:9e:7d:74:e2:
                    10:ab:68:bf:cb:13:0d:d0:5c:7a:d6:eb:e6:5b:a8:
                    b9:93:5c:d6:6d:24:b2:3c:02:04:fd:ea:ce:52:f3:
                    af:d4:ad:1c:56:6d:cb:ef:b9:59:5a:f5:70:37:3f:
                    a8:2e:dc:f0:4e:da:12:36:18:f4:01:95:68:90:a3:
                    78:44:d3:c0:c5:ac:1b:22:70:75:b8:75:a3:0a:f7:
                    f9:0e:c8:49:77:26:5c:56:5c:d2:db:06:87:ab:ae:
                    55:b1:45:f0:25:f7:b2:42:03:24:2a:63:d8:38:d5:
                    9e:3d:6c:05:7b:42:0b:dd:fb:4b:25:ff:c7:c4:4f:
                    8b:3c:3b:94:9f:39:18:18:1e:5b:f1:c1:c5:a6:b7:
                    06:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A7:F9:99:9C:27:B1:13:C1:F4:C0:25:4E:99:FA:69:FA:D6:A9:2A
            X509v3 Authority Key Identifier:
                keyid:A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:cc:8b:bf:35:f9:8a:af:45:fc:e9:4c:97:3c:cc:ef:f3:f1:
         4e:e0:a2:27:bb:71:05:18:b7:2c:93:cf:e1:7f:66:38:32:5b:
         44:ff:d4:22:f0:07:b9:a9:64:11:26:d6:4e:f5:63:63:71:71:
         e8:b9:d1:39:72:57:a3:d2:2d:4c:b1:3b:62:3c:57:bf:15:2a:
         57:0f:15:ea:11:8d:72:c2:7d:72:0c:0b:8d:d3:b2:38:56:d0:
         25:ff:8a:64:82:c3:10:ab:67:60:a9:4b:be:89:bf:b3:8e:a9:
         e6:e3:b3:5e:2f:3b:c1:42:df:2b:28:00:7a:9a:1d:aa:60:6b:
         26:7c:37:ac:f5:79:ec:0c:23:15:e0:f0:de:2f:db:09:bf:12:
         a9:81:72:b9:bb:9f:2e:7d:ba:44:37:54:f3:1c:4d:20:f5:9a:
         ec:54:77:2b:ce:1d:9e:ae:d6:88:44:dd:fe:79:72:72:73:d6:
         82:55:09:c1:1c:b1:78:13:c8:f3:f6:fd:a6:07:36:2e:29:a1:
         7d:d1:17:79:84:79:0d:5d:0a:27:7b:23:c1:d5:c9:80:31:32:
         11:59:26:55:fd:57:d2:25:3b:d7:33:16:02:47:01:e7:2f:8f:
         1d:bd:2a:ff:97:52:d7:cd:da:c4:21:da:e0:90:47:a6:80:2b:
         58:e4:4e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:56 2025 by rpki-client