Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
File:                     aszbbJjXIrMtyQDuHdZuUcT0KNs.mft (raw, json)
Hash identifier:          zljOzSb7doTfGMdpMRP7aWU/mDP3Om3MlM8P0SkwNkM=
Subject key identifier:   B5:98:F8:06:32:39:85:4E:BF:07:09:BF:4B:02:F1:FE:E2:25:4F:46
Authority key identifier: 6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB
Certificate issuer:       /CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db
Certificate serial:       0196A9C2FA7885F40323A6BEA88E266F7DFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
Manifest number:          034A
Signing time:             Wed 07 May 2025 08:00:49 +0000
Manifest this update:     Wed 07 May 2025 08:00:49 +0000
Manifest next update:     Thu 08 May 2025 08:00:49 +0000
Files and hashes:         1: aszbbJjXIrMtyQDuHdZuUcT0KNs.crl (hash: x9JGFcInooKH9+3jQQcPXWDDCMAKttrfdT9PZUWa7dM=)
                          2: jlBmv3dPRy-aCAm4zGP5hP0eED4.roa (hash: x5w57iUiMtF5F3KiCgNFCVpxtjw/vaZ568ZRMFNq7qU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:c2:fa:78:85:f4:03:23:a6:be:a8:8e:26:6f:7d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db
        Validity
            Not Before: May  7 08:00:49 2025 GMT
            Not After : May  8 08:00:49 2025 GMT
        Subject: CN=b598f8063239854ebf0709bf4b02f1fee2254f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:d3:08:0b:68:a3:12:1e:99:8a:85:ef:04:
                    36:40:58:a0:35:de:a0:bc:eb:56:ed:6f:da:ae:38:
                    f4:a2:ce:68:2b:4c:75:52:d8:b6:fd:ba:3e:6e:06:
                    60:db:4d:be:f3:97:95:44:82:d2:0e:84:25:eb:ba:
                    05:7d:58:1a:8d:e7:40:ec:e7:db:c1:a6:a1:83:e6:
                    34:9f:86:2c:11:87:95:15:8a:cc:cb:f7:19:fb:16:
                    9a:a0:63:b4:62:62:99:db:b0:66:b9:30:8a:32:54:
                    b6:01:05:72:19:68:a2:4f:a8:98:d1:ed:c3:9a:3d:
                    ed:6d:2b:8e:e0:5f:2f:09:1e:4b:65:47:05:3f:08:
                    30:5b:c4:d4:57:93:b0:c0:88:15:e1:4b:d3:73:30:
                    61:e2:d0:78:48:a1:ca:ae:ef:23:96:72:de:48:9b:
                    9c:d7:c4:38:6d:3b:d8:d5:9b:84:11:38:6d:00:1a:
                    69:1e:5f:d7:52:5d:73:6a:02:ee:9c:d0:aa:0b:09:
                    23:24:a8:54:57:c9:26:09:66:1b:d2:c2:cc:7b:e2:
                    60:80:98:d0:f6:c5:b2:f4:95:4e:c9:78:4e:fa:42:
                    5e:82:b2:1a:e8:41:fe:81:34:72:bd:a3:63:e7:1b:
                    6e:c4:37:9d:2e:d4:e2:28:e0:8b:36:2e:a2:b2:73:
                    c6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:98:F8:06:32:39:85:4E:BF:07:09:BF:4B:02:F1:FE:E2:25:4F:46
            X509v3 Authority Key Identifier:
                keyid:6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:61:75:0a:3d:60:fc:15:eb:1e:c4:3b:f8:25:77:5d:86:48:
         f4:ae:f4:b7:35:32:9f:88:9c:05:21:1e:76:e6:32:61:df:63:
         9b:d0:cb:4d:c2:42:cc:0b:a5:58:31:94:29:51:85:74:e7:e0:
         94:1f:72:59:0c:61:97:a8:df:41:2d:4f:0b:19:a3:2b:e8:57:
         61:c8:9b:c6:08:05:1e:67:8a:fc:01:f8:3d:2a:ae:6d:9e:91:
         f8:b9:e6:b5:5a:22:75:74:47:f5:23:70:4a:22:64:fa:e8:31:
         c3:10:63:0e:94:33:ad:04:67:45:5e:fc:a0:78:f8:c8:3a:2b:
         dd:bb:ee:e8:1f:c2:23:61:88:d9:51:6f:bb:e8:00:46:49:f9:
         71:66:6c:ee:2a:0b:77:97:da:b1:20:15:0f:0f:82:40:af:c3:
         22:f6:69:f8:e2:0d:57:4b:52:95:bb:65:c8:7d:75:1c:ab:c0:
         83:9a:2a:69:37:30:49:cd:f4:15:85:c5:31:9a:ce:c4:58:7e:
         8b:ea:1f:aa:38:43:7e:bb:4b:13:96:60:7d:4a:ed:94:55:ae:
         2b:d7:46:7b:3b:99:e8:41:ed:c5:67:78:83:a0:76:d2:e6:48:
         e3:72:de:b7:20:af:9c:f6:de:da:7c:38:fc:04:9e:d6:ef:05:
         d1:b7:e8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:27:08 2025 by rpki-client