Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
File:                     k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft (raw, json)
Hash identifier:          9zHE/kgqrjSDeeA1uLr+h6UkveFRa8/a5MvaCne2E4o=
Subject key identifier:   7D:8E:D2:BC:C0:35:12:9C:C4:40:51:FE:72:7B:68:17:E1:79:6F:5D
Authority key identifier: 93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
Certificate issuer:       /CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Certificate serial:       0196997401A34CC6C7C77A55A4CB6365ED98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
Manifest number:          0496
Signing time:             Sun 04 May 2025 04:00:38 +0000
Manifest this update:     Sun 04 May 2025 04:00:38 +0000
Manifest next update:     Mon 05 May 2025 04:00:38 +0000
Files and hashes:         1: k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl (hash: fLEPfCKYXptxeg+9gyzVXC1aMtd3W1CGGBW6qGYAOSA=)
                          2: rbPUmPqkKgwyzbr9KUKLWQwPFN4.roa (hash: q/Zy1zhtJFPNtR3NeMdcOz6lj9MRNn8je4kBturksZ0=)
                          3: tQFFGYfebId9C-wg4RS84BnFaNo.roa (hash: nMK/gVKD2fq6p/yTSA4UB4aZvcBtj7xYtsaQACWORBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:99:74:01:a3:4c:c6:c7:c7:7a:55:a4:cb:63:65:ed:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
        Validity
            Not Before: May  4 04:00:38 2025 GMT
            Not After : May  5 04:00:38 2025 GMT
        Subject: CN=7d8ed2bcc035129cc44051fe727b6817e1796f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:58:0c:6c:91:0e:34:4d:8a:03:cc:ee:5b:
                    21:39:04:88:c3:e1:09:ff:20:85:a2:f0:19:fe:96:
                    b6:7b:ef:bf:37:eb:4b:22:7e:df:ea:ae:12:0c:84:
                    3f:52:b6:e3:fc:12:fa:db:c9:aa:18:09:91:10:d6:
                    8c:7e:d1:ec:ff:7e:e7:bd:70:90:81:d4:4f:a5:9e:
                    9b:97:5f:62:e3:ac:6e:a5:8a:2b:a0:88:15:b8:1c:
                    a9:fb:62:20:37:16:9b:97:99:5d:11:52:fd:f2:9f:
                    38:3c:9a:d3:b5:36:6f:69:f0:48:0c:43:ee:d0:d6:
                    1c:6d:26:1f:4d:56:19:e6:c7:4a:00:47:e0:01:04:
                    3f:1f:6b:1e:43:8b:b3:e1:13:44:2a:f3:20:91:2d:
                    da:3a:af:26:18:26:40:72:0c:71:4f:ea:a9:ad:7c:
                    53:d3:14:14:40:9d:8b:0a:ef:64:ff:b1:0f:5d:91:
                    3a:c6:d0:50:8a:1b:9d:05:80:fc:35:65:fb:a3:31:
                    c9:a7:dd:fe:1f:a1:c9:38:fa:e8:cc:a2:24:8d:89:
                    85:a0:50:de:cd:ea:96:30:a2:90:ab:9f:1e:01:41:
                    0c:64:dd:c1:ff:c9:be:1e:d1:49:63:20:77:9b:9e:
                    08:6c:b9:17:e0:68:6a:ed:5c:95:7f:b0:17:34:dd:
                    30:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8E:D2:BC:C0:35:12:9C:C4:40:51:FE:72:7B:68:17:E1:79:6F:5D
            X509v3 Authority Key Identifier:
                keyid:93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:03:31:1d:25:00:84:ec:c9:6f:3a:ab:48:3d:8c:86:18:db:
         e1:b3:90:a1:64:d5:ea:75:c1:e4:38:97:a7:50:a3:26:3c:24:
         c0:4c:29:de:ef:0b:a9:3a:5a:5c:54:50:55:dc:40:dd:4c:57:
         b0:5a:12:13:26:ef:66:1b:82:e5:95:17:52:57:89:8c:66:bd:
         73:08:f6:eb:e8:78:0e:f9:f2:8d:ef:a0:d1:c5:05:88:aa:03:
         40:3f:7f:9e:cc:e7:55:27:b9:33:9f:f7:77:fa:bf:d2:46:0c:
         89:dc:b8:47:cc:e3:b8:ff:13:ac:d7:6c:a6:35:f6:fb:e0:c2:
         a1:3b:cc:7c:7a:b6:b1:49:56:68:6e:11:a3:17:70:bc:3e:db:
         cf:d7:9c:f0:84:f6:bd:ad:6c:59:b6:a4:b6:33:0d:f4:42:51:
         bb:7c:7f:47:d5:5a:42:1e:0a:10:74:56:01:bf:4b:ce:f6:76:
         ba:3f:93:e2:31:25:f1:e1:83:13:bf:56:b5:23:5f:04:71:fe:
         6d:5c:19:99:c6:44:12:25:1e:d3:14:b3:d0:c7:c6:35:0f:b2:
         38:f6:d4:b2:69:eb:56:71:8e:34:48:1c:e3:f9:a8:95:a7:51:
         6b:32:df:4c:5e:13:eb:be:78:18:f5:e9:b5:06:0b:6d:19:36:
         0a:87:ae:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 07:02:47 2025 by rpki-client