Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
File:                     d6U9LpdwTb6oMaZEAHKQTukacbA.mft (raw, json)
Hash identifier:          8eOp9WKF4pG16M7LJ5wXPgUfdRsrUWnlVRdIMBesNAE=
Subject key identifier:   87:7A:A8:CD:9A:76:48:29:D4:69:21:94:88:DE:25:88:9E:80:EA:97
Authority key identifier: 77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0
Certificate issuer:       /CN=77a53d2e97704dbea831a6440072904ee91a71b0
Certificate serial:       019687DB822E45BC2C1A473A5CB103A37A57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
Manifest number:          11F5
Signing time:             Wed 30 Apr 2025 18:00:31 +0000
Manifest this update:     Wed 30 Apr 2025 18:00:31 +0000
Manifest next update:     Thu 01 May 2025 18:00:31 +0000
Files and hashes:         1: 8YLxHIrqEOpYdEsGGRi0e0TkaqY.roa (hash: ZSlp7CySsW2GetrGVI9UQkRD/3974H3lwSYsXYBiMcM=)
                          2: d6U9LpdwTb6oMaZEAHKQTukacbA.crl (hash: tJ/cd6NlC2NwFQu4QZhkGG+Zwo8kt7JGZGE4XtAxdB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 18:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:87:db:82:2e:45:bc:2c:1a:47:3a:5c:b1:03:a3:7a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a53d2e97704dbea831a6440072904ee91a71b0
        Validity
            Not Before: Apr 30 18:00:31 2025 GMT
            Not After : May  1 18:00:31 2025 GMT
        Subject: CN=877aa8cd9a764829d469219488de25889e80ea97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bf:3b:6e:d4:73:9c:39:b0:bb:35:c9:0a:d5:
                    5e:c6:50:8a:9b:70:52:9f:49:75:e7:00:b8:6f:16:
                    11:7f:41:77:e4:df:54:4a:bc:ee:bf:06:ad:61:bc:
                    62:5a:57:1d:45:f1:0f:09:ef:e1:ab:fd:47:be:b2:
                    17:f7:08:35:86:2d:c6:aa:a3:56:7e:4e:25:b9:07:
                    0e:50:57:d4:34:e7:21:fe:0b:68:28:22:4f:0d:f1:
                    fc:06:a9:cd:d5:0b:08:be:58:7c:78:ea:fe:16:65:
                    af:b7:7a:0b:51:a7:6c:2d:4e:21:46:e8:ec:6d:0c:
                    d8:43:f9:2d:07:34:bd:5a:fa:78:c3:97:f0:1d:c0:
                    fb:70:0d:d0:9c:8c:ec:6e:cd:83:30:e9:0c:12:93:
                    b4:75:99:d0:4c:20:1f:db:1f:96:d7:bb:bd:1e:ff:
                    de:92:6f:ae:72:b2:0d:0c:b8:a8:c3:cb:38:db:6b:
                    f7:84:6e:ba:d3:48:d5:c6:ab:0a:f1:86:94:0c:3b:
                    eb:0f:c2:8a:b0:e0:29:a3:e8:68:ca:e2:a3:c3:c5:
                    fa:bb:f3:cd:1d:7c:bc:b7:42:07:e7:6c:5e:36:58:
                    f3:f9:16:e0:ca:0f:e3:e4:bd:19:6c:80:37:5c:d6:
                    b0:7b:1a:66:49:ce:04:6c:aa:c3:45:c4:d4:06:5b:
                    4d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7A:A8:CD:9A:76:48:29:D4:69:21:94:88:DE:25:88:9E:80:EA:97
            X509v3 Authority Key Identifier:
                keyid:77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:15:c8:d0:9e:12:fe:31:4a:97:38:fe:29:9b:d9:98:75:fc:
         55:be:03:cb:b0:ad:d1:a8:0e:d4:91:4e:52:a9:df:dc:44:9d:
         b6:bd:97:a5:3a:4b:58:a9:0a:af:b3:b8:a8:3e:88:b7:ba:be:
         dd:9d:f6:60:84:f8:c5:4e:50:60:a8:a5:36:7a:7e:21:df:57:
         84:78:79:f9:9a:ef:88:18:01:2e:ab:37:fe:0a:59:ee:e5:2d:
         91:4b:cc:d3:a0:87:72:27:43:0c:fd:20:6a:5b:57:16:ac:fd:
         7e:99:c6:28:ec:41:f9:e4:68:ae:61:53:15:ed:d2:bb:6a:07:
         d8:cd:a4:b5:f4:09:13:d8:f2:8d:f7:2c:aa:b3:ec:9e:43:29:
         b5:53:9f:c5:10:f8:de:6d:f8:00:09:16:80:0e:4a:a0:cb:19:
         fe:2a:3b:c3:7d:09:5f:c0:87:1a:a3:90:16:a7:07:d5:f3:fa:
         b5:17:7a:ad:f2:48:12:80:c4:51:06:61:9f:17:6c:fd:bf:74:
         ec:27:8b:b2:8e:a6:b6:a3:08:4a:c2:c4:37:d9:d3:f8:f7:4d:
         d6:cd:38:e7:39:49:f2:cb:92:83:c8:08:e6:17:15:26:e2:3d:
         ff:e5:36:32:39:05:ab:02:95:4e:bd:c8:b5:9f:71:7a:07:55:
         91:7e:2e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:09 2025 by rpki-client