Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
File:                     rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft (raw, json)
Hash identifier:          HM0MGaoRserCTGPf5TJFqXONxM5L+BSn3kTqQv7JiCg=
Subject key identifier:   4A:AC:0D:97:63:29:5C:C3:99:40:32:14:60:67:1E:25:62:7F:2C:7C
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Certificate issuer:       /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial:       0196361A9A69046368E85F391BBF96E66448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
Manifest number:          14EE
Signing time:             Mon 14 Apr 2025 21:00:35 +0000
Manifest this update:     Mon 14 Apr 2025 21:00:35 +0000
Manifest next update:     Tue 15 Apr 2025 21:00:35 +0000
Files and hashes:         1: 5qbm6M-eiAs3Sax8KVJ3oyYfrrQ.roa (hash: wspJkKAHBhU/iiN7eXAG5eZQY0gy2K4ZxvhHdsXT2dg=)
                          2: KDzLGK1Ms1rQ3Sinf5MNoTfrlLk.roa (hash: bPUt0It2HOIJBVKWWo3dmSTmayPGgOml6jz8Zt5aBJ8=)
                          3: PfTK_laJnQS_hWcI1miH8YmD3XU.roa (hash: YfjG5i7yzO8QQ7ZO7iDAmyK16Fyt++8WwP+MEzSCTdY=)
                          4: ltmkR62UHp9Wf_efPpxh7HmSnT4.roa (hash: E1AG/jlqYwJrU9a3m+x6UqkYK+Xlbaxzv/rFzMbFu1E=)
                          5: rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl (hash: Z+kSoWOHmy61C4GlF6U/BeDk312/Ql9aIbNygmHB2tA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Apr 2025 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:36:1a:9a:69:04:63:68:e8:5f:39:1b:bf:96:e6:64:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
        Validity
            Not Before: Apr 14 21:00:35 2025 GMT
            Not After : Apr 15 21:00:35 2025 GMT
        Subject: CN=4aac0d9763295cc39940321460671e25627f2c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:09:48:25:e0:1f:b0:4b:93:cc:fe:fe:19:ae:
                    4c:bc:74:90:40:9d:3e:03:13:6d:7b:bb:bc:b5:7f:
                    7c:b9:36:33:2d:1d:14:f8:53:66:69:f3:fb:d2:8e:
                    b8:dd:06:56:76:f0:31:e1:34:b0:bb:53:4a:41:ac:
                    5c:37:84:65:1f:52:71:c7:22:73:ce:13:3a:82:a5:
                    e4:5b:a3:9e:33:3d:65:23:20:4e:4a:06:10:46:b6:
                    e4:ff:c6:fb:c4:0b:b1:ed:b4:96:e1:39:60:59:1d:
                    51:94:b0:5c:d4:e5:6c:bf:42:3a:d9:93:2f:90:72:
                    89:7f:8e:e9:90:de:27:47:18:53:32:87:99:2c:bb:
                    22:34:47:c7:87:b1:73:c9:e5:c2:dd:17:1a:18:f0:
                    40:d9:22:e0:90:5b:48:6e:a3:ad:06:38:f0:35:4d:
                    8a:35:31:a5:5c:cb:bd:96:5b:80:82:aa:c1:ae:11:
                    9a:d1:3d:ba:1d:6c:ca:0a:71:64:8a:4a:2e:7c:7b:
                    b7:6b:c9:5c:b4:8a:2e:a9:8c:28:2f:9a:5f:8d:87:
                    7b:b0:d9:40:28:33:51:36:6e:93:bf:d3:1e:a5:c1:
                    ba:fa:3b:96:0e:8b:c6:a6:b0:8c:81:f6:34:c9:12:
                    4a:c4:1e:5f:24:3c:23:eb:f9:be:46:4d:4f:7b:2b:
                    8e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AC:0D:97:63:29:5C:C3:99:40:32:14:60:67:1E:25:62:7F:2C:7C
            X509v3 Authority Key Identifier:
                keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:2f:d8:58:5e:c9:16:41:90:8a:02:0c:02:b6:7e:c6:f7:f7:
         23:39:c6:82:c1:d7:d4:10:02:09:c3:ca:20:d2:ef:97:7b:67:
         7b:6c:98:ce:43:f6:42:ae:91:03:f0:18:e9:3a:aa:b7:14:b6:
         9d:16:ce:7c:dd:d3:ca:79:08:75:bc:2c:ae:19:e1:4b:23:56:
         f0:7e:76:86:ec:d0:d3:fd:54:b0:db:90:e6:cb:e6:42:6a:8b:
         6c:8b:24:b3:0c:72:08:fd:be:29:77:3c:ab:1b:80:c7:8c:05:
         eb:15:ca:eb:f8:d2:31:1c:9e:73:15:dd:1d:32:58:6c:ae:0c:
         21:23:8d:d9:e4:af:9e:74:f3:49:c6:21:e7:50:ff:fc:33:67:
         0e:9b:30:e8:e8:c2:21:18:29:a7:28:2d:30:2e:d5:58:61:4c:
         dc:53:d2:ed:98:98:30:0e:8a:56:13:73:d0:4b:02:93:66:c4:
         b5:bc:04:ef:37:92:a4:5b:86:bd:92:4f:68:c1:a4:83:36:ce:
         4d:8d:bd:9f:67:92:60:2f:e4:dc:d5:5c:a1:7f:99:eb:29:a5:
         1e:ee:0b:6d:e0:4f:55:3d:50:8d:98:0c:81:85:6f:a2:cb:23:
         14:44:85:b7:49:d0:5f:fe:f8:53:de:87:c2:74:a0:28:d7:23:
         9e:0f:b8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 03:24:16 2025 by rpki-client