Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
File:                     ArYQzUO6_O2RSA-r_cquggSfv3E.mft (raw, json)
Hash identifier:          6NG3LJF4EGpIn2yPvwaBZN0gs8omXO7iPRUsEAJ28KU=
Subject key identifier:   6D:DA:B2:F0:D4:F0:DF:A6:56:18:43:47:49:D1:AF:F3:8B:29:7E:33
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Certificate issuer:       /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial:       0196827E34DCE8495C4E7FC245FF646F912B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
Manifest number:          151E
Signing time:             Tue 29 Apr 2025 17:00:31 +0000
Manifest this update:     Tue 29 Apr 2025 17:00:31 +0000
Manifest next update:     Wed 30 Apr 2025 17:00:31 +0000
Files and hashes:         1: 3jSOaatFzz9swrZhXqD6jHzeDww.roa (hash: tVwdSKcBd6/2MH/mbR0mS1QlYqRRE3gqHsHq5WvFQFw=)
                          2: 79gW3YAt2XuqijR7nl5mfFtOLk8.roa (hash: 4986fTnHGnlxMjpLE7ZRIeQ2cNZOfNLwZxbij5ru624=)
                          3: ArYQzUO6_O2RSA-r_cquggSfv3E.crl (hash: dKWgX4jY9mI1XngC+M3BuklRpzCKPQryMmdC2E5ye4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 17:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:7e:34:dc:e8:49:5c:4e:7f:c2:45:ff:64:6f:91:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
        Validity
            Not Before: Apr 29 17:00:31 2025 GMT
            Not After : Apr 30 17:00:31 2025 GMT
        Subject: CN=6ddab2f0d4f0dfa65618434749d1aff38b297e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:21:a8:bf:1b:b0:28:b9:c3:e8:3a:be:6c:df:
                    25:b9:02:06:a5:11:83:7a:df:90:62:bb:d3:6b:1c:
                    6f:37:f7:95:ff:3d:9b:4a:c3:33:5a:36:40:e6:75:
                    fa:18:61:b7:c3:58:af:d4:64:b1:0a:38:6e:0b:90:
                    d6:f8:19:3c:62:03:91:b9:98:4c:29:fa:07:5b:3e:
                    8d:6a:4a:4a:59:69:c1:c0:96:22:70:11:ef:30:c3:
                    33:46:da:de:8f:85:31:db:20:cf:53:2b:2e:d0:e2:
                    07:d7:7c:87:e3:4c:e0:fc:f1:0b:71:45:88:d5:4d:
                    66:c6:be:cc:e0:cd:bb:25:12:0b:b1:b0:6b:ec:97:
                    bd:bc:43:a2:c8:77:8c:9d:f5:b4:ad:a5:f1:86:1a:
                    a9:43:47:fa:7c:b1:53:6c:6b:2f:9e:22:5b:00:53:
                    cc:81:63:fa:5a:5d:88:6f:2f:1e:3f:16:39:6b:16:
                    23:ff:d6:c2:5e:2b:db:2c:da:e5:bc:d1:9e:ec:d5:
                    7b:4b:27:66:61:f5:da:c4:a8:05:0c:6c:06:a2:6e:
                    18:bd:1c:ef:b3:70:dc:03:4b:b2:aa:6f:93:f1:43:
                    1b:7f:fa:98:4b:bc:12:71:d5:e1:f3:df:20:ed:af:
                    e6:89:85:b9:81:33:17:b5:38:a4:bb:bd:fb:67:72:
                    ff:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DA:B2:F0:D4:F0:DF:A6:56:18:43:47:49:D1:AF:F3:8B:29:7E:33
            X509v3 Authority Key Identifier:
                keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:5f:a7:85:fa:89:cb:8d:4e:d6:73:f3:19:8a:b6:28:66:38:
         22:bd:a0:8e:90:0a:80:93:db:98:be:dd:49:db:e5:28:7b:b7:
         c3:6d:56:a1:47:d6:ab:0d:1d:55:ce:98:8d:47:05:a2:51:3c:
         8c:2a:41:8c:fe:db:48:94:5a:75:f6:45:67:5a:be:02:a1:b6:
         38:30:3d:8c:dd:a7:bf:65:52:32:90:8c:ff:e8:4b:fd:27:5e:
         0d:b2:3a:41:dd:22:f2:a8:67:3d:55:1c:60:83:35:90:7e:8e:
         27:42:5b:65:03:04:1c:79:6e:0e:47:46:70:a9:2d:19:a5:ba:
         11:2e:52:9b:91:98:12:b9:a8:ca:11:22:18:ef:43:74:e9:50:
         df:03:25:ce:6a:14:9a:cb:0c:08:93:c9:12:8d:2e:fa:a2:17:
         81:45:9c:c7:61:8b:fc:39:0b:34:0b:17:b1:91:b6:4e:2a:56:
         2d:35:b1:54:69:35:ab:00:0a:76:4b:68:16:fe:ab:22:56:d2:
         ca:2e:75:e5:b5:2b:89:d6:95:b7:41:db:02:8f:5d:88:d0:5e:
         b8:a7:c9:11:4a:59:31:67:f8:5a:0e:73:1b:7f:fa:5e:ce:00:
         49:f3:b2:de:59:20:e0:20:f0:34:fa:61:54:a1:09:86:23:a5:
         6f:94:2e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:27:28 2025 by rpki-client