Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
File:                     3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft (raw, json)
Hash identifier:          TTcwxRxxt78SD7FnZN0RUkfUJxm839n9NPThVKvGcNc=
Subject key identifier:   F0:91:A8:9D:CE:40:FE:CE:AD:7A:20:43:F1:75:F5:10:BB:2A:15:C8
Authority key identifier: DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
Certificate issuer:       /CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Certificate serial:       019653B6E45E9E027828EE5B62EB6EB9AF4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
Manifest number:          14FF
Signing time:             Sun 20 Apr 2025 15:00:17 +0000
Manifest this update:     Sun 20 Apr 2025 15:00:17 +0000
Manifest next update:     Mon 21 Apr 2025 15:00:17 +0000
Files and hashes:         1: 3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl (hash: sX++jDBd5rAPg8S48lIzV7Y+c2wecZAXhtx3tFI2Ccc=)
                          2: BgyYhjdlX54FNLBOgRi8uw75ivU.roa (hash: zzLTHJ8bOyhzXoEVwavpxvrPBboJmkVXfTzNirwZrsg=)
                          3: Hpy8N_-5qbg4r5UvdSXzVzdiWx4.roa (hash: 2QUmH1Q4U8nkWLgbGItfFRsuYPfdbrlhi1xdBt64+Zw=)
                          4: ImxZW674_5fXdmlZfvGnuAIzuOY.roa (hash: 9/kVoJM9dkwpP3u46CBs9jfgtCbtD6Yrvc+TFbbmgkw=)
                          5: UKl3alsL8yH60mBrWhBQKGsUsvQ.roa (hash: NEBoD+GODx6lckBJaJWB/4++/wxgc2RbKTzZ6lIXc7I=)
                          6: h81MQCGUH4YWhsU7_noNE9t-6Ag.roa (hash: B55fQoBAEqhRk0fmuOYVFDE0A21yTHmBQBoOyLnBQrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:b6:e4:5e:9e:02:78:28:ee:5b:62:eb:6e:b9:af:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
        Validity
            Not Before: Apr 20 15:00:17 2025 GMT
            Not After : Apr 21 15:00:17 2025 GMT
        Subject: CN=f091a89dce40fecead7a2043f175f510bb2a15c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e0:87:b7:d0:66:ae:79:b5:a8:1b:fd:6b:2d:
                    c0:01:d0:c4:44:9f:f4:8e:bf:a3:5b:d3:12:15:ca:
                    4a:c4:b7:8c:2a:2d:70:cf:b6:45:f4:d7:14:5f:8a:
                    9a:f5:3b:18:63:b5:60:6f:08:bb:ee:8f:64:09:27:
                    53:b5:ec:84:27:43:a3:3a:49:b5:68:1f:cc:50:4b:
                    6a:a9:2f:14:3a:3d:f4:21:8e:9f:12:38:84:4f:ab:
                    94:3a:6e:b4:33:b4:43:3c:a1:e9:95:f9:a8:e0:4f:
                    4c:c7:25:ab:a7:ec:bd:d3:5f:02:92:f2:e4:be:0f:
                    4d:02:3d:a0:09:c1:ff:cc:19:97:be:65:5f:cf:64:
                    c3:6c:59:c3:35:e6:09:31:ed:7f:f7:27:62:3f:69:
                    56:79:1f:83:2f:79:96:9a:0b:df:3d:35:aa:94:e9:
                    6f:7e:f7:7a:17:89:c1:69:7a:ae:9f:84:82:53:97:
                    b5:e9:37:cc:bb:3a:a5:06:fe:cd:3d:80:54:bd:b2:
                    18:8c:7c:2f:f2:9d:ad:f2:6a:ad:e5:b8:2f:97:d4:
                    5c:b8:7c:ce:e9:7d:ec:89:f9:61:eb:c6:5f:1f:48:
                    38:d8:4d:c0:3d:43:16:ac:d1:cd:b1:81:6c:c4:ea:
                    58:6d:74:f3:fc:bf:e3:31:76:79:47:7c:e9:f5:15:
                    0b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:91:A8:9D:CE:40:FE:CE:AD:7A:20:43:F1:75:F5:10:BB:2A:15:C8
            X509v3 Authority Key Identifier:
                keyid:DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:89:41:06:92:fd:3f:2f:27:29:3a:0a:33:af:36:8f:00:71:
         58:71:25:7c:61:43:5a:7e:ed:2e:91:d2:6c:bb:d8:d0:24:92:
         26:f7:88:2b:59:9e:6a:39:7d:87:4d:72:6b:e1:dd:96:ab:cb:
         96:26:5b:44:df:85:36:83:37:d4:04:54:1f:57:cb:cc:64:ef:
         54:2c:14:89:71:ce:ec:37:6a:8c:1f:1e:56:d9:1a:f1:89:04:
         b8:1c:f5:c2:68:f5:8a:79:da:61:69:dc:8f:78:ba:5a:02:c8:
         e4:7a:f1:77:a6:a6:d3:f2:d0:35:19:54:f2:c7:3e:3c:b8:87:
         60:b3:c6:96:87:7b:c6:4d:eb:f6:99:3f:89:68:2b:22:aa:28:
         0a:15:6e:98:87:7c:ea:bc:be:80:65:72:4e:37:c4:7d:da:24:
         50:b1:5c:83:af:7f:49:eb:d0:60:5d:02:63:ea:75:b9:71:ad:
         e9:98:d6:24:67:7a:7a:62:48:9f:bc:4e:fa:1a:a6:f4:7f:2e:
         7d:7e:ae:39:14:03:2b:30:a7:69:a5:bc:31:7f:2c:18:ea:9c:
         c7:d5:6f:e4:b3:e5:37:0f:30:59:45:74:b0:16:9d:9f:96:ec:
         04:fe:df:b1:a7:7d:12:3b:9f:05:5f:91:74:81:85:4f:0b:52:
         f4:36:9c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:31 2025 by rpki-client