Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
File:                     rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft (raw, json)
Hash identifier:          rbhsT6h9mPdwMMuhuYi1IIwxq28cp2OBB2/1+XXeX+U=
Subject key identifier:   47:FD:69:A3:73:42:C9:6B:B2:CB:4C:92:AD:14:CC:38:A8:15:87:21
Authority key identifier: AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B
Certificate issuer:       /CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
Certificate serial:       0196556EC48719DB997B8ABA04F590806B2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
Manifest number:          14FE
Signing time:             Sun 20 Apr 2025 23:00:44 +0000
Manifest this update:     Sun 20 Apr 2025 23:00:44 +0000
Manifest next update:     Mon 21 Apr 2025 23:00:44 +0000
Files and hashes:         1: T4ejI0o1-ZTfFiV7QKtB9D7UcpE.roa (hash: GaQ0ytKrYJcgBIWcbLoASBPxVTSW9++rXI3zKEi5m5Q=)
                          2: rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl (hash: t6Et+zW5b58rLRVVRDqEe7HhK2BaOabkklsmQzRkOCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 23:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:6e:c4:87:19:db:99:7b:8a:ba:04:f5:90:80:6b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
        Validity
            Not Before: Apr 20 23:00:44 2025 GMT
            Not After : Apr 21 23:00:44 2025 GMT
        Subject: CN=47fd69a37342c96bb2cb4c92ad14cc38a8158721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a9:b0:95:67:04:0b:eb:6f:69:60:93:67:8d:
                    f4:62:85:ca:c4:07:4a:d8:90:e0:f6:59:63:2c:d0:
                    73:bc:dc:89:78:c6:d5:aa:a5:41:83:10:54:7c:79:
                    02:49:55:9d:d6:34:29:56:91:a3:33:77:d9:63:39:
                    a5:b0:38:af:c2:b3:a4:b6:a2:5c:7c:e9:19:a8:36:
                    cf:ae:00:3f:8c:94:ff:ac:53:02:34:c8:10:24:be:
                    e4:b6:f1:64:d8:27:f2:2d:65:da:b3:85:01:51:d5:
                    89:aa:a6:07:2f:55:29:8a:31:c9:14:c4:ac:86:a1:
                    d7:59:5d:95:69:9f:df:8d:d0:29:c8:65:8c:c2:5d:
                    ab:b7:49:66:aa:a5:38:38:5f:a1:68:0a:b8:86:e2:
                    d6:95:f6:21:95:ec:d9:37:9b:07:d3:ec:5c:9d:53:
                    2b:8d:9e:1f:1a:3f:05:1e:69:7d:82:0a:ae:a8:08:
                    9c:a9:11:da:18:f2:3e:b7:6c:86:fd:b4:d0:8b:75:
                    4e:85:8c:56:64:03:73:57:a1:e4:58:81:41:eb:77:
                    e6:a2:9c:a8:96:97:38:55:90:c3:bd:dd:84:a9:12:
                    d8:a5:69:fb:80:69:47:86:ad:97:9b:0f:38:09:37:
                    de:cb:d4:0d:4d:bc:ed:14:29:61:4c:73:ef:2f:de:
                    24:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FD:69:A3:73:42:C9:6B:B2:CB:4C:92:AD:14:CC:38:A8:15:87:21
            X509v3 Authority Key Identifier:
                keyid:AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d0:77:9d:76:76:53:58:fe:d4:87:0d:b1:c8:53:1a:eb:ae:
         09:ae:28:e5:a8:4b:d4:6b:5c:85:a0:52:07:04:25:17:d7:f5:
         30:17:ee:64:93:80:c0:c0:cb:db:b8:82:3f:51:8a:56:a8:24:
         6f:37:b2:7a:10:4f:1a:5a:6e:fe:46:bc:ab:c3:d0:1c:a5:56:
         ca:5f:86:28:dc:df:49:71:ec:3d:8b:f0:29:23:c5:54:41:25:
         0d:fe:a9:a4:39:3d:f5:82:b7:51:61:1d:dc:a5:80:f3:f9:6f:
         f3:21:59:23:f2:0e:54:bd:e8:b5:77:22:e4:c5:1a:91:e8:d4:
         3e:22:44:a1:e6:9e:de:24:18:2e:22:32:f6:7a:6d:ee:52:e8:
         4c:db:17:7c:f2:68:e4:a1:24:5d:24:97:07:90:3a:4d:44:a2:
         d2:68:d3:e3:42:17:0b:1a:4b:1c:ed:c5:ca:3d:eb:e6:4f:6f:
         27:fa:55:2a:9e:ab:0a:b4:bc:ef:d6:2e:9d:67:fc:4d:8a:7a:
         68:1c:cd:36:e2:27:ac:0d:6c:f2:95:b3:d8:74:e3:fa:c8:da:
         bb:bf:70:7d:dc:67:54:65:cd:a1:50:4a:22:3e:24:6b:eb:00:
         8e:d3:e5:78:f5:28:e3:20:ad:1b:8d:d7:ff:03:21:e1:73:4b:
         3a:aa:b2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:35:49 2025 by rpki-client