Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
File:                     q2yACAY3-ssW9RnF2X7Cez2FCX0.mft (raw, json)
Hash identifier:          Vr+1JHrXwC3YXO0rzWI/Lh/9LMNigGdYvpg+gJRX8og=
Subject key identifier:   5D:AD:AB:50:EA:5C:1C:4F:52:EB:BC:33:81:35:6A:74:E7:61:A0:11
Authority key identifier: AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D
Certificate issuer:       /CN=ab6c80080637facb16f519c5d97ec27b3d85097d
Certificate serial:       01967E33D308711EE79D813D321A4BC53543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
Manifest number:          0777
Signing time:             Mon 28 Apr 2025 21:00:47 +0000
Manifest this update:     Mon 28 Apr 2025 21:00:47 +0000
Manifest next update:     Tue 29 Apr 2025 21:00:47 +0000
Files and hashes:         1: q2yACAY3-ssW9RnF2X7Cez2FCX0.crl (hash: qkJVn0rFrfAU9jlxi8HibkNLjKQv/C418dot8hhvKWY=)
                          2: sV9tAEvP7CI_ytsSrwY5KYVQ0uo.roa (hash: z6QhtjWTggxEC3vWBAoujIqlOU7iqRgtEA7A/CNef2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:33:d3:08:71:1e:e7:9d:81:3d:32:1a:4b:c5:35:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab6c80080637facb16f519c5d97ec27b3d85097d
        Validity
            Not Before: Apr 28 21:00:47 2025 GMT
            Not After : Apr 29 21:00:47 2025 GMT
        Subject: CN=5dadab50ea5c1c4f52ebbc3381356a74e761a011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3f:65:48:55:0e:79:b5:b2:56:c4:a5:f9:32:
                    36:f1:6f:3f:ca:98:7b:28:7c:a5:78:ad:9c:50:67:
                    69:96:57:3a:1a:1d:20:ed:6a:8b:c4:10:51:5e:22:
                    81:3a:33:5a:2c:42:41:00:67:e0:53:33:5f:c4:01:
                    16:a9:52:e4:e4:ad:69:df:f1:35:30:44:2c:6d:ad:
                    79:6d:41:f5:c4:db:9f:c2:5d:66:87:ae:c8:8f:50:
                    ca:2b:ed:24:c9:4d:54:b8:a4:0c:19:de:f0:00:93:
                    b2:52:e8:57:a1:3e:04:10:f5:c3:82:e1:0d:73:b3:
                    e1:8b:10:cb:6f:0f:e0:55:7c:aa:f4:04:dc:46:c1:
                    31:69:1a:ab:cd:e5:53:9c:86:63:f1:5e:8d:13:41:
                    7d:4a:40:1c:03:17:dc:01:96:a9:38:f0:60:69:f8:
                    bf:63:7d:54:6b:1d:48:20:76:07:d0:8e:b2:7e:82:
                    64:79:4c:49:9f:2f:f5:4f:bb:4f:40:72:e0:a6:f2:
                    93:cf:28:60:77:51:ca:e2:b7:69:09:cf:8b:85:e7:
                    a2:19:ee:f3:f9:02:54:6d:98:80:29:2f:54:7f:0a:
                    17:d8:ef:35:e2:d0:36:a7:e1:c7:d4:7d:16:26:69:
                    70:ab:0f:55:45:0d:5f:2e:b4:8a:06:72:92:72:3c:
                    cd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AD:AB:50:EA:5C:1C:4F:52:EB:BC:33:81:35:6A:74:E7:61:A0:11
            X509v3 Authority Key Identifier:
                keyid:AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c9:a5:82:15:f1:1a:72:51:00:9f:61:f3:b6:c4:24:3a:93:
         fb:41:8f:24:73:19:15:1d:c9:31:4b:30:15:55:69:9f:55:03:
         3c:2e:6d:d0:90:19:4f:af:6c:a4:7d:d3:97:79:c1:b6:e2:7b:
         59:f8:f7:35:a2:d3:57:a6:e1:b5:f1:16:20:74:ec:cb:52:34:
         fa:8e:63:08:15:5d:a8:62:9f:83:69:e0:b8:b9:ba:59:ce:aa:
         98:94:8e:d9:6a:16:1d:fe:8e:bf:4d:45:74:b1:85:c1:f2:b8:
         26:55:ad:2b:9f:9a:19:2d:26:f4:c7:46:9d:35:1e:90:4c:f1:
         19:d4:fe:d1:71:1a:1b:95:3c:b1:f3:7a:ae:6f:31:8e:d7:ed:
         d2:5b:a8:de:68:39:4f:a8:95:c0:6e:89:95:f7:f6:1f:52:3e:
         28:43:0b:65:9c:09:67:fe:e7:bc:24:57:92:e8:ea:e1:b9:ec:
         2c:c9:93:48:5b:56:fa:d5:d7:6d:22:60:99:b7:8e:2f:d4:38:
         d2:ab:2a:8c:a1:04:3a:74:fb:a1:2d:ff:26:91:a1:81:4c:09:
         4e:e8:e8:25:0f:41:f3:3b:4f:06:88:b0:ac:ed:94:ef:32:5e:
         bc:2b:8c:84:69:fd:8f:39:2e:ab:38:f4:34:4b:41:72:b7:35:
         65:19:4a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:29:30 2025 by rpki-client