Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
File:                     xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft (raw, json)
Hash identifier:          kUunl7+NCB1T4PQwtQ6qHxakt+EYY73dKIEMtueG6uM=
Subject key identifier:   11:13:B6:94:0A:C4:C2:44:0F:98:A3:14:49:0F:9C:5A:D3:53:B3:46
Authority key identifier: C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
Certificate issuer:       /CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Certificate serial:       01967943FF264C4AF037EA7543C2DD0EC565
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
Manifest number:          0B10
Signing time:             Sun 27 Apr 2025 22:00:21 +0000
Manifest this update:     Sun 27 Apr 2025 22:00:21 +0000
Manifest next update:     Mon 28 Apr 2025 22:00:21 +0000
Files and hashes:         1: oEWWV1wTRtv4TPDh8KnSbxqUMOo.roa (hash: dy83XA1VuxS8pj9IoqOTnoyqLeOEntH2NHWNFfMk+x4=)
                          2: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl (hash: B2yF5oPIlsIM2QFTInK/ENK2X6PvtjZI2LMjwVbcENE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:43:ff:26:4c:4a:f0:37:ea:75:43:c2:dd:0e:c5:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
        Validity
            Not Before: Apr 27 22:00:21 2025 GMT
            Not After : Apr 28 22:00:21 2025 GMT
        Subject: CN=1113b6940ac4c2440f98a314490f9c5ad353b346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:3d:a0:48:9f:5f:27:eb:1e:51:32:e4:9d:
                    c9:57:22:ca:a0:66:66:5d:21:96:5b:50:40:df:34:
                    23:60:b0:40:63:70:e7:6b:1d:c9:09:26:94:27:ea:
                    23:13:48:90:02:d4:5f:30:37:08:59:6c:e7:dd:fd:
                    66:2d:42:b4:54:32:40:2c:13:2d:3e:7f:30:e7:e9:
                    dc:ac:87:23:b4:e4:42:c6:cf:44:81:5e:8a:76:b1:
                    66:26:09:44:22:9a:40:24:c7:20:75:07:1e:e9:6f:
                    ec:36:46:7a:1e:4c:13:3b:45:68:3a:67:53:44:18:
                    67:fb:ae:fd:62:74:e8:a9:63:04:b7:20:92:e9:58:
                    8c:2d:00:e6:5b:a7:50:1d:29:73:ca:18:15:e4:5a:
                    b9:4c:c9:ef:bf:b1:a9:2f:eb:50:9d:4b:49:00:da:
                    80:22:d3:b9:e1:9d:eb:65:f1:4b:36:5c:d5:d5:ef:
                    5b:bc:a1:65:c7:68:f4:29:c3:cc:eb:ef:cf:f0:08:
                    30:b8:fd:10:dd:99:af:48:f5:21:a4:15:68:a8:ea:
                    9f:a2:6a:63:81:d0:5b:9a:c5:86:ff:bf:6f:88:40:
                    08:28:6a:15:94:d0:25:81:6e:dc:57:82:2f:8b:2d:
                    49:57:cc:70:45:24:43:0e:ac:c7:b4:96:a2:a6:18:
                    43:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:13:B6:94:0A:C4:C2:44:0F:98:A3:14:49:0F:9C:5A:D3:53:B3:46
            X509v3 Authority Key Identifier:
                keyid:C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:89:fa:b4:bb:69:45:77:bc:89:d6:be:c4:4d:d5:d5:c4:54:
         64:3d:47:85:3a:10:8a:87:e5:3d:7a:ec:49:0a:e3:1f:7d:37:
         2e:6d:39:61:63:d7:23:28:26:9a:a8:b5:cd:ac:9c:04:8f:f2:
         24:d9:43:69:11:18:3a:74:46:ec:ed:5f:38:9a:a7:27:75:dd:
         bf:e4:53:3d:c8:4a:ba:64:16:d0:08:37:bd:23:88:2d:07:0a:
         94:63:8e:ac:5d:1e:73:d4:73:1f:e3:97:c6:c0:ee:5f:fb:6b:
         0d:c8:52:e7:4a:25:96:bb:62:94:50:7d:2a:b4:f7:75:37:38:
         f4:2e:a0:b3:1e:ca:91:b3:31:de:c6:4d:6f:06:47:e3:40:c5:
         f2:37:a5:a6:c3:47:bf:1b:0f:7e:6f:46:1d:46:c1:49:c9:87:
         75:e4:b7:5a:b7:34:bd:c0:a5:4f:5c:54:e5:48:d2:48:1a:d0:
         37:10:17:94:e0:e8:64:52:01:e9:6f:b8:61:18:71:e7:86:45:
         41:cf:c6:30:44:9f:d7:29:4c:ff:65:37:4b:63:dd:53:fe:4a:
         89:6b:9f:3e:cb:8e:38:78:6e:10:70:e9:63:7c:b6:79:1e:da:
         5d:f7:d8:41:d5:b8:0f:2d:6c:2e:6b:4d:0b:2e:f7:d7:2a:11:
         f2:3e:49:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:12:11 2025 by rpki-client