Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
File:                     _EQpfpJxxu3wZJFfYYCuEmkN2os.mft (raw, json)
Hash identifier:          bZ1uFJdoIr+ZekfC2x6zDnFsh7AobRWFOKG5kurusU8=
Subject key identifier:   1B:27:4F:F7:89:39:B1:25:C3:19:C7:99:05:69:94:AE:4B:18:E8:4E
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Certificate issuer:       /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial:       01960942D8D6355018A10297A8323DD383A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
Manifest number:          14EC
Signing time:             Sun 06 Apr 2025 04:01:37 +0000
Manifest this update:     Sun 06 Apr 2025 04:01:37 +0000
Manifest next update:     Mon 07 Apr 2025 04:01:37 +0000
Files and hashes:         1: 32yhRz_S8ITRiOsBYkmV4NnQCYc.roa (hash: dVgxRZDbIbYdq2fLtDV8WTt0Yh4BvCJtbiIWE/I7V9o=)
                          2: 3YfXMGxAROTBpSHK0nXhT4XXVLA.roa (hash: t9FN1AE/iUXMjLgMElEEh/Ci+Kik/9ynPh+dOX7Z5u8=)
                          3: 4CRh1_CvU86oKkepqeWz0p8Z20g.roa (hash: eECawWd/eK8DTrkxHmdqWQ83awsrOYEANzuH8VdAHYk=)
                          4: 4yVwhdNr1x7QWhuQZt7jnU3WVfU.roa (hash: Avv1mWPFCgDH8L+bShCZ3laRZSIOjbCtfz5vWH2fX7s=)
                          5: 7hrowrIyQ_yhCn7NqJyPwlbnjvU.roa (hash: jaDUXbK3NwGZnP8kMILOfU6k2MmyLuZSMbC+5y9ZUnQ=)
                          6: EC4-LQ6kidGJzuS4NcMwvpf6NbU.roa (hash: p11JEQANSGpxSsSCC9KDVq2xpHH5TNvaJmupLy6k704=)
                          7: He_wIqs9WbeGj8B22HW3VzQspCQ.roa (hash: tlw/MPCRV5MVLGPRtjnV6Ynl8QAazIvng9cpXGa9Jjc=)
                          8: HuL3gMV6_zC2v4RtUtbhqokAt3o.roa (hash: oOaz6NQBz4nDsaAkIEoLusftKpiuLlvRyaHsm/ZmfH4=)
                          9: QOp8bh5ZPSuznKCRrGZLlhCTgcs.roa (hash: 7hAuGp/9PxCmWRCRnl/vszI74VutrV1FkyouYG2D0Ok=)
                          10: VoBqKFmkzHKUMH66kT01ur4Okdk.roa (hash: wrQGRmCWA6MmV9E979fU5JGLxSuHzNsXWbXUIKZWDCY=)
                          11: ZWOY1CQejAaInI5dPiW91XYX-d8.roa (hash: 99cY9onRLW//cQHI0vGgH4e5SQS2hb6TJu75LNYg/pg=)
                          12: _EQpfpJxxu3wZJFfYYCuEmkN2os.crl (hash: yhjCN2wV03JisEu+Zet1P9XZTLUGOI4BYtuvDV5X8G0=)
                          13: bvGIb4I9tPNSFQAgMarPZLbQdco.roa (hash: z2ND/X4p7VMdJla0AX/t4QpyjiykeGek/GP7iei/AGM=)
                          14: tineMtUjOADbmljZnXO2AjKqXkc.roa (hash: 0BfJzskVZ3BO+kzng4r5uCUBjRTYeY/YcraQ9f9oslk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 22:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:09:42:d8:d6:35:50:18:a1:02:97:a8:32:3d:d3:83:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
        Validity
            Not Before: Apr  6 04:01:37 2025 GMT
            Not After : Apr  7 04:01:37 2025 GMT
        Subject: CN=1b274ff78939b125c319c799056994ae4b18e84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d2:fc:6c:6c:05:29:b2:7a:6a:0d:97:6b:bd:
                    2e:b2:e9:22:5c:45:ff:7d:75:28:67:9d:92:2c:cf:
                    6d:8b:a3:de:c3:7b:43:07:b9:ab:e5:23:0b:fb:41:
                    b5:db:e8:1e:59:fb:7c:a3:7c:11:1d:3e:07:54:44:
                    65:53:c7:b1:19:a9:bd:ef:14:3f:15:0a:b5:11:44:
                    8b:5b:73:4c:e0:34:85:19:c9:cb:ce:62:11:a2:6b:
                    fa:52:6c:ce:79:78:83:da:1b:fc:74:53:0e:01:95:
                    ec:35:ea:c6:b8:0a:01:27:f5:42:a2:53:8e:6f:6c:
                    cd:ec:1a:c4:af:bd:ee:0b:e8:8a:28:33:7a:eb:6a:
                    0d:ab:20:46:a4:16:89:c7:d2:0e:6d:6e:b5:09:b2:
                    5e:31:d1:1b:48:93:ce:00:6c:f3:3d:13:57:ca:a1:
                    69:79:a7:8c:a1:50:25:c3:0b:af:22:08:da:ec:af:
                    27:01:94:8e:7b:0b:de:2b:f1:57:06:02:f0:6f:8a:
                    1b:69:f1:38:fe:82:7a:fc:8c:20:65:4e:90:4a:08:
                    8d:f6:97:cd:56:c4:2b:c1:bf:c5:36:6a:19:a6:1e:
                    2c:7d:12:7e:e3:40:ad:ea:65:57:de:64:63:cc:8c:
                    1b:ac:01:2b:32:b9:2e:6c:c8:44:55:5f:64:d3:64:
                    79:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:27:4F:F7:89:39:B1:25:C3:19:C7:99:05:69:94:AE:4B:18:E8:4E
            X509v3 Authority Key Identifier:
                keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c0:1e:4c:ac:87:5c:b0:e8:86:08:fa:83:a4:3a:5e:7e:51:
         09:a6:4d:32:74:dd:3a:ae:a7:b8:3b:f9:a8:e6:6c:fa:89:a0:
         94:cb:32:49:da:94:ec:f9:c9:33:00:f5:21:89:01:ee:9e:27:
         53:2c:a4:0c:c2:f0:46:13:9f:dd:4a:47:32:e6:03:bb:64:84:
         96:ca:c7:4e:79:ab:17:eb:39:70:da:36:e6:93:9f:eb:6f:89:
         37:9e:8a:8c:72:f1:0b:44:84:19:98:51:1c:53:a4:be:66:89:
         02:ff:ca:5c:46:1e:a8:44:00:23:97:2a:62:9f:02:1b:18:53:
         48:3a:5c:6b:57:c8:b0:89:85:72:b5:f8:df:07:5f:24:a6:d5:
         4e:ee:0f:1f:1d:b7:48:e6:21:35:c0:34:de:fe:e6:f9:8e:1b:
         09:1a:e7:f8:ef:d2:dd:b2:1e:5a:58:d9:e4:d3:5d:5b:0c:e2:
         9f:6f:26:68:85:2b:1c:18:0a:f8:2c:24:5f:b1:95:1c:29:33:
         83:c2:ed:cf:68:77:85:01:d3:ff:ca:7a:72:2b:59:7b:32:21:
         5b:a4:55:cb:34:20:29:19:49:9d:72:4a:37:fb:8a:ae:9c:f2:
         6b:8a:bb:ad:6b:7f:05:f0:bf:0f:7e:57:78:79:f0:d7:b3:97:
         85:89:b5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:08:45 2025 by rpki-client