Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
File:                     aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft (raw, json)
Hash identifier:          fGbYJ2umylr2VV53aILwrU3S+nZxikUFKfJiDhe1jDo=
Subject key identifier:   30:F2:36:58:91:35:31:8C:28:4D:19:4A:3E:80:60:D3:48:C0:90:D8
Authority key identifier: 69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
Certificate issuer:       /CN=69737c6e0602be3804e277580bab7e21e6e33474
Certificate serial:       0196760CFB248D0BDF62AFAB72C802025BA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
Manifest number:          056F
Signing time:             Sun 27 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 27 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 28 Apr 2025 07:01:24 +0000
Files and hashes:         1: 86oammqkU0TE8AzqwBVv1FmzBYc.roa (hash: H3QOeQw7Wu4vQlfZwSufbLTx40TDb5RrgWASWL9m9b8=)
                          2: aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl (hash: ZP2HZd6P2KMb6eiT0PD0o7eNno5oRUT2aqeQuPeNLd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:fb:24:8d:0b:df:62:af:ab:72:c8:02:02:5b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69737c6e0602be3804e277580bab7e21e6e33474
        Validity
            Not Before: Apr 27 07:01:24 2025 GMT
            Not After : Apr 28 07:01:24 2025 GMT
        Subject: CN=30f236589135318c284d194a3e8060d348c090d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f0:9d:01:f6:a3:e1:3b:ac:57:8a:71:ac:36:
                    35:53:27:94:d3:3f:23:c7:8a:39:01:7d:29:d3:43:
                    69:49:29:88:3a:39:ce:12:b8:9b:15:04:08:d8:f6:
                    88:8f:e6:db:64:ad:f4:4c:12:e9:36:06:a0:01:cc:
                    2b:6f:6d:a4:5b:eb:6b:2b:a7:c1:36:41:c8:47:1e:
                    38:f7:9f:09:77:76:46:14:a0:31:47:c6:16:77:fe:
                    a9:04:d3:ea:43:6f:81:d5:04:9a:7c:02:73:d3:07:
                    6d:f6:8e:a8:4a:be:91:44:80:d9:94:6c:07:f2:3f:
                    4d:5b:80:ce:84:0a:c1:2b:ed:8b:b0:cc:8d:86:0a:
                    ba:5b:1e:70:87:c4:4d:07:91:00:d8:d7:42:3a:2d:
                    7f:a7:cf:da:a9:d7:63:b8:ee:0f:f2:7f:d4:97:0f:
                    d5:f7:9a:e1:78:49:fb:71:74:72:a9:31:55:a4:9e:
                    f3:a5:51:30:ca:cd:ec:37:74:39:f0:13:b6:16:45:
                    32:27:bf:5b:c8:81:54:1a:82:29:85:26:25:0b:3d:
                    83:d6:f3:ef:b8:1d:cc:ec:28:2c:61:82:cb:85:d0:
                    57:4c:60:be:44:e1:55:18:df:84:ec:c2:92:7c:83:
                    1f:fa:38:ce:38:b3:be:cf:54:99:d8:9c:8c:40:10:
                    9c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F2:36:58:91:35:31:8C:28:4D:19:4A:3E:80:60:D3:48:C0:90:D8
            X509v3 Authority Key Identifier:
                keyid:69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:82:68:ea:7f:81:2a:a0:da:99:e1:c8:fb:05:87:b3:81:d9:
         64:93:20:ae:fd:4b:cc:9a:c0:00:70:ca:e7:bb:85:91:7e:fc:
         b2:82:45:8b:47:75:b1:0b:62:6b:a9:9e:ed:84:cf:b9:66:cd:
         1a:4d:e7:e2:55:41:9d:88:dc:60:6b:76:88:a1:11:db:9e:17:
         54:f6:c4:98:b9:90:2a:e8:5a:e5:c3:a5:3b:ea:11:17:da:66:
         67:2a:68:ff:55:58:f0:da:71:25:c8:ec:25:51:76:c0:b7:5b:
         d7:8a:98:da:4f:dc:08:7a:4a:e1:ef:90:7a:f9:e7:ad:c4:06:
         13:44:20:65:66:8f:b4:ae:9e:78:4e:85:45:bd:e8:a8:0d:1d:
         db:1b:19:ad:60:92:cb:cc:80:4b:7f:ff:ed:06:65:f4:60:6e:
         bd:7e:d5:b6:d7:5c:34:45:a8:db:61:73:49:50:ff:a2:84:12:
         f9:8e:3a:53:45:3a:be:f1:c1:7f:89:f7:ec:a4:36:0f:27:af:
         ef:3c:b1:e8:0b:71:03:75:37:6b:6d:d7:70:2d:74:6e:89:02:
         d2:90:f1:08:05:d7:cc:a5:30:56:52:a7:cf:91:4c:f6:54:38:
         df:a8:c7:67:60:fa:22:ad:b3:86:ca:5d:e5:29:e6:c6:88:53:
         9c:40:4a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:00:31 2025 by rpki-client