Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
File:                     A-VjR3yiveae95Q5kflTMwV7PjY.mft (raw, json)
Hash identifier:          QAzt3yOdoDyiTxIB2jbt3ObpTnYrQpkzynN7Vxf8GAw=
Subject key identifier:   34:C4:FD:3F:B4:B6:8F:ED:98:FB:4D:61:C8:E4:43:E0:84:9B:6F:1A
Authority key identifier: 03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36
Certificate issuer:       /CN=03e563477ca2bde69ef7943991f95333057b3e36
Certificate serial:       01964D4731E3C2B8BCCBA98F32223A3975EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
Manifest number:          032E
Signing time:             Sat 19 Apr 2025 09:00:33 +0000
Manifest this update:     Sat 19 Apr 2025 09:00:33 +0000
Manifest next update:     Sun 20 Apr 2025 09:00:33 +0000
Files and hashes:         1: A-VjR3yiveae95Q5kflTMwV7PjY.crl (hash: Dz2P0iZCd86xCe71ipKmBgH+JqRvmnvXmroembnF9RA=)
                          2: YPMFe5Bu5pnUfONKrKR7BiqfdCg.roa (hash: zPktxLB6En3ydjnKgIDNJDbBFlDMgM3cJospsMff0n8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:47:31:e3:c2:b8:bc:cb:a9:8f:32:22:3a:39:75:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e563477ca2bde69ef7943991f95333057b3e36
        Validity
            Not Before: Apr 19 09:00:33 2025 GMT
            Not After : Apr 20 09:00:33 2025 GMT
        Subject: CN=34c4fd3fb4b68fed98fb4d61c8e443e0849b6f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d8:c1:53:cf:b4:e8:67:4c:42:eb:13:94:69:
                    e7:b7:29:cb:e7:94:e1:b7:1d:97:d0:62:d8:42:99:
                    1d:dc:dd:f0:fc:75:2e:01:79:21:e0:af:80:e1:4a:
                    9b:56:b2:2e:84:79:16:62:52:ed:21:32:ff:03:ad:
                    64:2f:6c:e3:ed:4e:92:e6:72:f8:f0:96:db:68:81:
                    0e:59:61:d9:da:cb:6e:3d:8b:65:c5:5a:59:c0:fa:
                    77:5b:92:94:31:63:79:22:ea:1f:fe:04:1d:59:4e:
                    1b:b8:88:64:f5:72:55:7a:4b:44:69:cf:2e:69:ad:
                    c2:03:8a:48:ad:c6:a9:cd:fc:a4:60:44:10:c8:d1:
                    ae:2b:1a:10:4a:17:ca:7e:9a:be:d0:37:2a:01:96:
                    98:26:fc:7d:de:4a:b8:78:82:17:f6:16:cc:72:b7:
                    09:66:18:c7:cf:c6:f4:58:9b:0e:42:3f:2f:1c:16:
                    80:3b:4b:54:37:73:14:91:85:62:ad:54:f2:fe:07:
                    d8:7c:6b:c4:3a:ef:3a:7c:0c:65:f1:79:07:6b:77:
                    6a:db:2c:e3:1f:20:82:73:8e:21:51:8e:ac:1c:50:
                    e0:ed:13:1f:f8:54:5f:04:bd:ae:23:0e:d5:a3:3a:
                    a9:99:29:2a:27:a9:8d:a1:2b:e3:a2:f5:34:fa:6e:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C4:FD:3F:B4:B6:8F:ED:98:FB:4D:61:C8:E4:43:E0:84:9B:6F:1A
            X509v3 Authority Key Identifier:
                keyid:03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:7e:53:56:2a:74:93:83:8c:a7:73:a5:90:bd:fa:7b:7d:07:
         03:58:28:c2:23:2d:0f:0e:ea:ff:c6:dd:65:77:5f:44:a4:84:
         f0:50:ac:c6:67:71:22:5c:3f:9a:70:75:fd:74:f7:02:25:e3:
         f4:6a:d4:eb:42:6b:5a:86:1d:19:db:86:af:80:c3:a9:0e:8d:
         3b:23:19:e2:4c:b4:e0:ea:7d:85:90:c0:1a:8b:cd:50:09:32:
         a7:12:a0:0c:63:35:51:ba:72:67:9f:31:d7:4d:63:c2:ff:04:
         08:5d:6d:9a:57:75:03:64:fc:cc:28:d7:c9:35:65:c8:72:92:
         70:90:76:94:d4:3a:a6:90:62:bf:d9:9a:08:6b:a3:f5:a9:ae:
         cb:c9:08:31:c5:b6:79:de:6d:5c:3e:b9:2a:fa:38:3e:3b:e7:
         60:e8:71:97:f7:c7:70:12:21:f6:02:28:dc:06:dc:35:55:45:
         ec:0b:a5:3c:5b:2f:86:69:ec:1d:46:83:05:49:ac:35:59:c5:
         ab:3d:dd:79:b3:a2:56:3f:17:e9:f1:99:e4:08:49:80:c8:cf:
         04:74:e6:28:29:42:e9:e9:49:e4:c6:58:01:90:a5:ad:a4:33:
         03:cb:b6:ff:47:06:16:fc:e5:09:cb:ca:13:85:ca:da:24:ec:
         7d:0e:aa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:44:43 2025 by rpki-client