Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
File:                     x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft (raw, json)
Hash identifier:          ejeu54RwiNsXUUY4wUfiXQPNOFz0g80IeI/Zjh2Rwi4=
Subject key identifier:   41:95:16:37:5E:A7:74:D6:4B:92:63:EB:75:93:CC:46:97:5F:26:86
Authority key identifier: C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5
Certificate issuer:       /CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
Certificate serial:       0196553856B9F40DC5EB42389F3B8716EF99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
Manifest number:          14FF
Signing time:             Sun 20 Apr 2025 22:01:17 +0000
Manifest this update:     Sun 20 Apr 2025 22:01:17 +0000
Manifest next update:     Mon 21 Apr 2025 22:01:17 +0000
Files and hashes:         1: Oh5MBrSNQL-MIQM7mvcTSl4Bxlw.roa (hash: hR4K2IN0h854R5KFI9PRtJJgGILNncSrA/6ie+JyY0U=)
                          2: x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl (hash: zbdjGiz0tGWCu0icaFpeZVpDa6v3SXYwe3ACKb6fZ9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 22:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:38:56:b9:f4:0d:c5:eb:42:38:9f:3b:87:16:ef:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
        Validity
            Not Before: Apr 20 22:01:17 2025 GMT
            Not After : Apr 21 22:01:17 2025 GMT
        Subject: CN=419516375ea774d64b9263eb7593cc46975f2686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f4:f9:6f:cb:fc:12:93:5f:33:5a:68:cd:6d:
                    83:29:bb:e3:30:f2:93:75:a6:b6:4a:cc:ff:ab:a5:
                    95:fd:49:81:80:d0:49:38:31:dd:ad:ea:9f:34:5b:
                    95:1a:a4:35:0d:3b:56:be:25:34:b3:b8:fa:a1:c8:
                    76:69:be:0e:b5:a6:9a:e2:87:1c:ca:c7:be:0c:51:
                    2c:6b:96:81:7b:a3:8f:38:58:71:c9:41:29:e9:9c:
                    9c:6a:c0:fe:6f:b0:52:99:83:ae:ef:4e:e4:06:b9:
                    17:a3:44:9c:cd:6c:4d:4f:0b:0f:32:8b:72:36:af:
                    48:c3:46:96:fd:26:0a:a4:79:51:94:f5:13:c7:62:
                    56:2e:24:e7:f1:90:01:8b:7d:82:48:ec:b8:e7:ec:
                    b3:e4:1f:62:f5:80:f7:2d:cd:05:a2:b0:7c:f0:eb:
                    6f:6d:83:29:41:cd:45:b1:e9:d8:f3:b0:70:e6:7f:
                    6d:94:01:67:59:82:82:2c:9d:e1:54:e3:7f:69:65:
                    61:66:a3:8b:43:af:d0:73:65:c0:fd:4c:15:86:99:
                    bd:26:a1:bd:b3:82:4e:70:55:a8:14:07:45:c4:96:
                    d6:8a:95:eb:15:e6:45:4d:09:d4:b0:49:72:a1:85:
                    7e:bf:a9:8b:94:5f:1f:5b:fa:60:00:2e:c7:66:2b:
                    c0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:95:16:37:5E:A7:74:D6:4B:92:63:EB:75:93:CC:46:97:5F:26:86
            X509v3 Authority Key Identifier:
                keyid:C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:03:e4:aa:e9:d8:d6:bd:e9:1f:85:88:eb:bf:28:49:c9:5d:
         02:7d:f6:59:b8:c1:f5:f6:89:2c:c4:20:09:a2:a0:e5:1e:a8:
         90:16:15:85:3b:6e:fd:0d:4a:37:5a:5c:6e:a2:3d:f8:0f:7d:
         96:d9:9a:48:04:47:13:aa:1f:db:09:ac:97:c3:c5:41:a9:31:
         1d:06:13:6d:be:82:19:8e:bf:70:b7:73:8f:31:b7:35:d0:15:
         3a:d3:ed:eb:f2:b0:3a:a4:d3:93:d7:66:b3:cf:26:51:cc:50:
         f1:e7:b3:99:9d:c0:b2:25:9f:58:70:67:0f:be:4e:04:8d:99:
         31:4c:b7:63:b6:5a:f2:f3:f9:42:45:29:b8:ad:32:a4:e4:20:
         58:f8:48:aa:e9:7d:a0:8c:41:b8:94:3c:99:ea:a2:9c:5c:be:
         91:a2:e5:15:1a:b5:c9:29:1d:6a:21:14:21:73:25:98:3c:49:
         80:e8:d3:94:c4:bf:eb:f1:6e:2c:1d:f9:96:3b:0d:7a:3f:1e:
         56:06:2d:48:1e:63:df:2d:a9:03:24:72:60:ac:a7:3a:22:91:
         6b:39:6c:e5:1c:ec:45:9c:15:ce:3f:ad:fe:e3:1a:c3:84:ac:
         c6:3c:ec:16:fa:48:7f:c5:48:1f:05:bf:2b:ac:02:fa:50:2a:
         23:1d:38:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:45:04 2025 by rpki-client