Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
File:                     aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft (raw, json)
Hash identifier:          UGmbneMsr81bYJ+EyOa6R+aY1D+wqz3A1OTM5jeXQ/M=
Subject key identifier:   58:77:47:07:92:58:4D:AB:91:2C:2B:CF:3B:62:18:8A:4B:2C:1B:9D
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Certificate issuer:       /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial:       019680227E63656F1BB58ECFA4E8088AABBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
Manifest number:          151E
Signing time:             Tue 29 Apr 2025 06:01:06 +0000
Manifest this update:     Tue 29 Apr 2025 06:01:06 +0000
Manifest next update:     Wed 30 Apr 2025 06:01:06 +0000
Files and hashes:         1: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl (hash: 1RFpa4a7g1USxKTnE1KPYAOdNunfmxo+z7uyirOe9N8=)
                          2: oPeQLPX6uGsTa0wO6DH1EULp4f4.roa (hash: KrmKJHT/mJohWjDeVABcWMG4FCh9RJOamHor38/dr+U=)
                          3: paZxOmMKFpQKe-8Kne9bRfBeDj4.roa (hash: Ht8nkuSK3tnDGTAuNZ2+oouOY3eOWnt0ge3I9SzF5BY=)
                          4: tQhpXUNnvGff6XvuqvOKpCTzYwY.roa (hash: Hc4QZ0VrOY7vtGnelWFhq1jyckc5D//hAbmROwzCFcg=)
                          5: xs4Lhq2dtoSR5NylGdQYpzYAJFY.roa (hash: BY/PFQ7JiAuNhQeV/tshKqWnXgR5ng/nvPLH2dMAqLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:22:7e:63:65:6f:1b:b5:8e:cf:a4:e8:08:8a:ab:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
        Validity
            Not Before: Apr 29 06:01:06 2025 GMT
            Not After : Apr 30 06:01:06 2025 GMT
        Subject: CN=5877470792584dab912c2bcf3b62188a4b2c1b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:94:64:72:08:05:8a:a5:ae:d2:f0:2c:b2:5f:
                    dd:2f:24:11:c8:3d:95:ba:49:e3:c7:c8:60:4c:01:
                    82:84:25:40:93:53:5e:d5:64:b7:4a:a7:25:63:fe:
                    92:5f:af:b7:4f:ab:4e:e5:4b:09:7a:6c:8d:ff:4b:
                    b9:58:1e:b8:13:db:dd:6c:e5:52:f3:6d:eb:95:84:
                    fd:15:78:52:65:92:08:bb:e5:79:f5:1e:fc:39:f9:
                    25:f7:bf:2e:a9:76:83:8c:df:51:89:f6:e0:b2:46:
                    a1:1a:86:65:1e:6e:a3:fe:fc:06:2b:5c:34:d4:eb:
                    58:0a:1d:99:1b:2e:92:b4:e8:18:b5:0a:67:08:c3:
                    c0:8d:fd:10:7f:93:56:a8:e3:ab:80:f2:62:73:d2:
                    02:ce:22:cf:92:5b:d3:cf:b1:af:c9:46:06:c5:06:
                    d5:1e:4e:2a:d4:ed:da:64:06:d7:68:bc:17:1e:b5:
                    15:43:6c:b9:17:6b:98:24:88:5f:6c:60:a6:e5:d1:
                    e5:b9:f5:65:30:1c:1e:bb:22:88:a4:c6:51:18:23:
                    27:29:a7:f7:b3:eb:92:55:a3:ea:2d:40:96:8e:eb:
                    fc:59:f0:07:ed:da:52:5b:dc:81:7d:df:50:65:92:
                    64:1b:47:aa:7f:e7:43:20:c4:5e:3a:a2:b4:a3:a7:
                    b6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:77:47:07:92:58:4D:AB:91:2C:2B:CF:3B:62:18:8A:4B:2C:1B:9D
            X509v3 Authority Key Identifier:
                keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:08:a5:11:b2:59:3b:10:2d:ae:c8:4c:69:2a:d8:91:39:99:
         91:0d:a3:04:97:e1:01:07:09:50:36:16:6a:f5:77:e4:ca:ae:
         35:fb:b4:42:d8:88:52:f6:d8:bb:8f:7e:3b:7d:86:ab:74:bb:
         4a:ae:0e:37:a7:3d:fc:39:04:af:c8:42:82:54:b0:7b:93:64:
         2f:45:78:bd:60:50:88:b9:2a:be:c2:75:3d:5f:49:09:de:fe:
         3a:44:19:6f:ee:0f:fb:0f:18:58:99:f2:b2:1f:ca:a7:1e:f2:
         f9:4c:7a:85:10:3c:f3:c8:f1:d5:d5:b2:c7:cb:c0:27:b5:68:
         0f:27:9f:bd:cd:15:51:6a:3a:10:8c:0f:a3:53:0b:dd:e2:29:
         b2:03:32:ab:83:3c:e4:81:d0:ef:1d:91:0c:39:e6:c7:94:55:
         15:68:ce:6b:06:b9:e1:bc:e3:a8:cf:d6:27:95:90:cc:59:89:
         a0:79:a3:28:ec:3f:98:f6:07:bf:13:0d:02:14:cf:e5:48:2e:
         af:8e:4c:da:33:4d:71:bd:94:d7:68:df:fd:f1:2a:54:2c:9f:
         52:3e:12:e0:6f:60:78:1c:c0:28:60:cf:53:57:53:5e:7f:76:
         ed:dc:24:ab:28:d1:af:8b:1e:af:0a:ec:5d:c0:99:56:07:57:
         10:ad:5a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:12:56 2025 by rpki-client