Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
File:                     E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft (raw, json)
Hash identifier:          44lkq4YxPHo3Fp7sHukZ4pNmcmIWSLHWx/UU5j0tfBY=
Subject key identifier:   14:DA:7C:16:8E:B8:AE:F5:19:40:0A:45:60:78:47:2B:B8:E5:E7:0C
Authority key identifier: 13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
Certificate issuer:       /CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Certificate serial:       019656139C8294A255C5C1B5BF7B4B077566
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
Manifest number:          1505
Signing time:             Mon 21 Apr 2025 02:00:47 +0000
Manifest this update:     Mon 21 Apr 2025 02:00:47 +0000
Manifest next update:     Tue 22 Apr 2025 02:00:47 +0000
Files and hashes:         1: 1nNXrg9kNJmrbwr01_wdlr4zRG8.roa (hash: jP5XT6aNraFgRF1RUdhNykj84LWIdETmEVMazBCC7NY=)
                          2: E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl (hash: 3tKR86Q4BhR9CC9QKSbCiqu6kHWXtQOgkpuMpgxvd2w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:56:13:9c:82:94:a2:55:c5:c1:b5:bf:7b:4b:07:75:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
        Validity
            Not Before: Apr 21 02:00:47 2025 GMT
            Not After : Apr 22 02:00:47 2025 GMT
        Subject: CN=14da7c168eb8aef519400a456078472bb8e5e70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f0:c5:0c:c4:cb:a5:bf:57:aa:d7:ed:25:5d:
                    f4:1c:f2:b2:1f:85:5e:d1:28:4b:fb:14:db:5e:cc:
                    77:94:cb:b4:1d:8b:3d:ac:cc:65:91:9e:d8:66:fe:
                    6b:37:e8:2f:62:8f:3c:e4:2f:1f:c7:25:7f:dc:9c:
                    56:39:e5:ab:e3:25:75:7d:cc:2c:2e:e8:26:e8:71:
                    96:56:98:2f:1e:3d:e0:8c:0a:83:09:9d:4a:c1:6d:
                    ea:86:c2:62:6f:ff:61:46:5b:9f:06:58:a5:6e:03:
                    9f:16:92:f5:ea:63:1d:5f:38:9a:c9:c4:2a:87:16:
                    05:30:32:a9:6c:58:a1:71:f4:40:1f:6f:ce:d3:58:
                    67:1b:45:2f:7d:06:53:06:e3:b4:1b:d4:c3:d9:0d:
                    af:9d:b1:ea:97:7c:1a:e1:36:a9:de:0b:3b:66:f8:
                    2f:a2:83:72:dc:e6:79:cd:f0:ac:f6:ff:c0:b7:ca:
                    77:bf:52:f7:c7:6d:dd:fc:a6:82:d8:df:f4:4d:06:
                    75:bd:76:e9:b3:f9:91:12:e7:c7:09:12:ee:fc:d1:
                    e0:94:f0:c3:d7:39:1a:93:5d:67:8a:46:1b:c3:5a:
                    91:ec:0a:cc:a2:01:cd:bf:a4:4d:a5:df:22:cb:6d:
                    57:f3:c9:c2:7c:1e:25:44:27:dc:a0:5e:a6:b8:f4:
                    b9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DA:7C:16:8E:B8:AE:F5:19:40:0A:45:60:78:47:2B:B8:E5:E7:0C
            X509v3 Authority Key Identifier:
                keyid:13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:0c:6b:09:2e:df:f2:00:d5:d9:6c:66:99:66:f7:6a:63:ad:
         93:16:cd:bd:5e:eb:27:7d:90:eb:ae:8d:93:73:e0:45:64:a6:
         72:2d:c3:4b:08:69:7c:63:03:ee:0e:65:36:aa:8a:ca:8a:2e:
         a4:6b:8e:a8:10:10:1c:d8:2c:ad:27:e7:d5:f6:61:63:aa:ef:
         56:5c:42:1d:7a:ee:ac:78:83:6f:04:b3:9d:91:48:f2:55:06:
         25:00:47:f4:be:2a:1d:97:ba:1d:6e:11:57:4e:8a:68:c1:09:
         e5:b5:7b:da:b7:82:64:1d:92:b4:6d:bf:99:bf:5c:0a:98:f8:
         be:91:1c:e3:73:94:42:1c:ce:56:a2:cd:a3:3c:fb:6f:b3:79:
         e7:a1:57:be:48:91:b8:2c:c7:72:71:f9:38:76:78:a7:c2:a3:
         53:26:4a:66:b9:fe:7c:c6:36:c4:95:dd:3c:4a:df:03:96:35:
         8f:e9:4b:d8:26:4d:f3:05:9e:a6:61:ec:23:9d:82:77:1a:99:
         6d:35:8e:37:b5:c4:c4:57:e4:2d:0c:46:c6:b8:45:80:2e:e4:
         11:11:3f:77:b6:77:bb:53:d7:5b:cd:1b:c8:13:f8:49:a2:04:
         73:74:1d:39:10:45:d7:ed:e7:f8:74:51:b9:91:db:2a:f9:58:
         f0:57:1e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:57:32 2025 by rpki-client