Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
File:                     b9M_nmhWjdYFvJKvwe9raeEnq9g.mft (raw, json)
Hash identifier:          I4Iy8WSXmBayofWfPeurltkVlDEytU/qNHgUSvHgApU=
Subject key identifier:   FE:6C:00:08:DA:28:C2:0E:FC:AA:EE:31:0E:09:2D:35:31:4C:4E:49
Authority key identifier: 6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8
Certificate issuer:       /CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
Certificate serial:       01969039F4A2D29A7DE94C7790FC309726A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
Manifest number:          0E88
Signing time:             Fri 02 May 2025 09:00:39 +0000
Manifest this update:     Fri 02 May 2025 09:00:39 +0000
Manifest next update:     Sat 03 May 2025 09:00:39 +0000
Files and hashes:         1: QgZP-cnsGLbXLiB8i-j6fiH8Sys.roa (hash: S2EGBlisrDeYdPuuPvmxq5XQnasXOcn30j5uFZy7zjM=)
                          2: b9M_nmhWjdYFvJKvwe9raeEnq9g.crl (hash: zPHX883MYgvqGU74T081ukTfq0JhRzKLmSjIqbIOfLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 09:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:90:39:f4:a2:d2:9a:7d:e9:4c:77:90:fc:30:97:26:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
        Validity
            Not Before: May  2 09:00:39 2025 GMT
            Not After : May  3 09:00:39 2025 GMT
        Subject: CN=fe6c0008da28c20efcaaee310e092d35314c4e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0a:4e:4f:45:23:da:bd:87:b1:95:a9:c5:39:
                    b9:d9:a6:30:30:3a:49:58:5c:c2:fa:e3:e9:b8:b4:
                    65:4b:34:4c:3f:73:1d:72:bd:a2:f5:47:d1:53:b3:
                    dc:e4:03:a0:b2:15:18:93:03:4a:ce:15:cf:0a:a7:
                    30:30:05:9a:00:b2:97:b5:68:a4:98:59:36:af:f1:
                    2d:fd:e3:9c:ba:7d:43:77:41:87:90:e8:ca:0e:e7:
                    94:e9:ac:90:4e:83:64:67:d5:30:d8:17:da:1d:18:
                    04:53:10:4c:07:aa:0f:c1:a4:b1:48:65:12:bd:9e:
                    28:d6:5b:5d:cd:45:07:12:f9:64:81:40:fc:1a:95:
                    85:fa:57:2f:2b:44:9f:e0:dc:e5:17:c0:35:ed:b3:
                    47:5c:b6:ea:d2:c2:bf:c7:7b:3c:a5:79:bd:78:e3:
                    4b:be:3b:2b:2f:cc:2c:94:eb:d5:40:2f:23:4f:fd:
                    8c:37:9d:67:06:be:af:a2:77:cd:de:04:99:57:e3:
                    19:74:c5:18:cf:b6:fc:55:87:b9:59:9f:69:c8:c2:
                    70:b2:d8:df:52:cb:89:07:13:26:88:5b:2a:02:4a:
                    7a:17:3b:c1:1a:47:11:58:71:7e:6e:d3:29:d7:0f:
                    a4:49:3d:c6:a4:3a:89:36:2e:2e:66:71:10:98:ef:
                    53:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6C:00:08:DA:28:C2:0E:FC:AA:EE:31:0E:09:2D:35:31:4C:4E:49
            X509v3 Authority Key Identifier:
                keyid:6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:6d:82:d6:e9:bf:ad:86:81:c8:86:85:68:b1:74:46:5d:15:
         94:49:ed:63:1c:b8:fb:00:81:f6:49:62:41:79:cd:35:43:3a:
         a0:05:c4:63:20:2a:c6:d5:44:3f:2c:6f:0b:1b:72:65:1a:da:
         e4:34:b7:4c:44:67:65:a9:5f:31:19:cd:88:df:81:fa:69:23:
         80:52:59:b8:ee:96:fd:c9:69:48:b7:bc:fb:7b:59:9b:fe:95:
         d4:2f:07:be:aa:83:a2:98:33:d4:e1:0b:16:6c:61:fd:8c:cc:
         19:41:ab:ad:f3:ec:af:fe:ea:13:0c:f1:87:51:53:f0:6a:e6:
         7d:60:b2:ef:30:af:da:a6:92:ff:45:ea:99:d7:99:d1:e4:a5:
         3e:77:de:f9:45:8e:ad:3a:95:01:70:87:a4:ee:97:4c:69:06:
         8d:47:f3:68:5c:fc:cf:91:18:b1:26:a6:5d:bd:87:ff:cd:71:
         20:07:89:15:53:7d:39:78:63:b5:47:ad:88:b1:d9:ce:93:b7:
         bc:b6:ef:b7:ba:37:ab:43:d0:65:4a:41:38:36:1d:96:4a:5e:
         5e:d9:01:e4:e8:d9:a6:f5:e9:34:72:ec:2d:96:e1:ed:27:4b:
         53:a7:62:58:99:2e:e8:34:4f:45:51:7e:43:0f:9e:15:e1:53:
         b5:b6:df:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:59:40 2025 by rpki-client