Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
File:                     Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft (raw, json)
Hash identifier:          IHHgkV26aqWrFpbbt6eb6Fy5m00b83H+1MwXq1hPPRk=
Subject key identifier:   B1:73:FD:FA:6A:2E:0C:8B:CC:3C:BF:E0:69:ED:54:2C:31:20:2D:A6
Authority key identifier: 63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
Certificate issuer:       /CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Certificate serial:       0196835A15C62BAE543A55C1A4F9B5700151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
Manifest number:          1446
Signing time:             Tue 29 Apr 2025 21:00:41 +0000
Manifest this update:     Tue 29 Apr 2025 21:00:41 +0000
Manifest next update:     Wed 30 Apr 2025 21:00:41 +0000
Files and hashes:         1: Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl (hash: EuhBuQrLN/sU7sj+IqoOV9yvhgqqx4toBLmlzpiA3jM=)
                          2: trc9WRrx0GcsdoyWUNx1ByDuLOs.roa (hash: O5foXyUGS0pgYakUN+dT6VqKLJZgwkNIaZ4jTeLOo7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 21:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:5a:15:c6:2b:ae:54:3a:55:c1:a4:f9:b5:70:01:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
        Validity
            Not Before: Apr 29 21:00:41 2025 GMT
            Not After : Apr 30 21:00:41 2025 GMT
        Subject: CN=b173fdfa6a2e0c8bcc3cbfe069ed542c31202da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:83:dd:1d:13:a0:b2:74:f0:a7:04:88:2f:6a:
                    cc:54:d9:ed:b9:90:49:f6:e5:26:90:eb:ef:d0:34:
                    31:5b:c1:bb:8a:45:19:81:9c:2a:72:3a:9d:ac:81:
                    4a:1f:bf:94:67:7b:e5:ce:9b:12:bd:d2:ac:9f:f4:
                    e7:81:1a:55:3e:0b:05:34:7d:14:36:dd:28:df:2a:
                    3e:d1:f0:33:84:89:aa:8a:4d:5a:4f:7a:2d:7e:c6:
                    25:a0:47:c3:ce:36:1c:f8:0a:2a:0a:0d:d2:2c:95:
                    48:d4:fc:33:7d:33:f3:5b:d7:05:a2:d3:be:99:5c:
                    71:bb:4a:81:92:4c:e8:5a:ef:5b:c6:85:4e:56:9e:
                    a7:f3:dc:df:e0:88:e1:81:b6:22:e0:d6:68:b1:5f:
                    4d:6d:d0:8e:ad:93:ca:6a:9c:e6:10:5d:21:59:b6:
                    8f:56:e1:6b:a2:a3:41:ab:52:f5:e1:ae:16:05:eb:
                    74:85:fa:26:dc:7a:ef:0d:e0:40:3d:3a:b2:63:47:
                    10:f5:3c:a4:ec:b4:5f:3c:8a:7e:ce:ed:bb:d3:26:
                    6f:37:dc:db:b1:b2:8a:de:a9:87:9c:92:7b:28:49:
                    31:4c:77:d8:49:85:1f:8f:af:7d:b8:e2:9c:ff:b2:
                    14:3c:6b:cc:3f:bb:c6:cf:fd:90:43:a9:50:a9:e1:
                    fd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:73:FD:FA:6A:2E:0C:8B:CC:3C:BF:E0:69:ED:54:2C:31:20:2D:A6
            X509v3 Authority Key Identifier:
                keyid:63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:05:97:f2:44:9c:a6:b0:f0:19:d7:84:cd:fe:68:4a:0d:37:
         52:a1:a0:fe:3f:39:85:6a:d8:7a:e9:51:6d:af:6c:14:43:97:
         30:c2:60:d9:c9:66:bb:df:0b:32:15:c3:1a:5f:ca:e6:ff:a6:
         a0:78:b1:69:bc:53:69:a8:e1:44:a0:6e:c6:11:67:c8:f3:df:
         32:63:e6:f4:b7:10:e9:3e:c9:0e:8f:6c:87:d9:64:06:7f:9f:
         f1:09:9e:eb:7c:de:a4:3e:fb:16:89:72:a0:67:7a:f6:04:22:
         e6:cd:ce:cf:ec:bb:6c:af:6a:4a:6b:f6:97:60:c3:12:f1:cc:
         31:be:be:46:8d:8e:60:b1:ea:e9:ab:33:38:d6:0b:dc:ec:03:
         6b:70:4a:c7:69:91:64:8b:01:9f:e8:83:a4:b4:4b:0f:1e:4a:
         bc:c0:13:a4:a4:1e:42:15:26:aa:ae:63:6e:d6:0a:82:49:f1:
         40:77:f8:d2:a6:0c:93:18:74:63:16:1c:8d:ef:9d:f2:3e:8b:
         2f:fc:26:88:55:b3:71:d3:31:1c:8b:49:04:7b:68:9d:87:7f:
         f3:03:65:6d:2c:af:fc:44:02:a0:6f:f1:af:96:d0:eb:9d:1b:
         fc:cd:09:0c:9d:19:32:7a:7c:4d:eb:18:da:1f:75:d3:95:fb:
         69:e7:07:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:25:30 2025 by rpki-client