Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
File:                     sUP6cD--4Eu9kc5joyFIs2uOVao.mft (raw, json)
Hash identifier:          Oip7b4VaUxu+JuwIPlfJwxzn4hKOb7+K9/1wiibYrlw=
Subject key identifier:   5A:7D:C5:BE:86:5A:62:53:ED:3F:5E:42:DB:0F:0D:AE:1D:55:04:D4
Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
Certificate issuer:       /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Certificate serial:       01961056F4A5F2B8E9FD12B0CBF0F7BE0BC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
Manifest number:          14DE
Signing time:             Mon 07 Apr 2025 13:00:56 +0000
Manifest this update:     Mon 07 Apr 2025 13:00:56 +0000
Manifest next update:     Tue 08 Apr 2025 13:00:56 +0000
Files and hashes:         1: 58fbPOFYsvSvpunLR9rNMDG4HkA.roa (hash: ReuETm25IMaI+/tSCMwYNSlxDNomkPKvSSM3DvSw9hM=)
                          2: 5bh70NDw7zp64NXJ_51b90SAuu4.roa (hash: 4ywVwFnAjMHvhsAsLPg1qryIBj6T959YwjsSeW0RTBc=)
                          3: bmIFkmc46wZv6ewcgJwZwj1cvlM.roa (hash: t+xCiPV9KaRJxGAZeXjb1sny70g09pMUXGWJ9TkswqI=)
                          4: sUP6cD--4Eu9kc5joyFIs2uOVao.crl (hash: bu2rM2COZaCTKnDZjtl2SRKyu7QPHyvBM+dgaz0cz7w=)
                          5: uQ91Nqx0wJ0hnu7-KkzAQL_V-cs.roa (hash: /lYRhYLBo69SAVI30wQHJh+caFfwu0pd662lIZiJCC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:10:56:f4:a5:f2:b8:e9:fd:12:b0:cb:f0:f7:be:0b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
        Validity
            Not Before: Apr  7 13:00:56 2025 GMT
            Not After : Apr  8 13:00:56 2025 GMT
        Subject: CN=5a7dc5be865a6253ed3f5e42db0f0dae1d5504d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:74:03:fa:4f:f8:68:97:66:60:08:0b:a8:ba:
                    87:0a:d9:e4:5c:71:4d:91:b6:76:bd:84:fe:fb:bd:
                    0a:0f:c3:65:b0:48:aa:f4:03:2d:ac:74:8c:78:84:
                    7c:b1:77:ae:f5:03:89:f6:b2:55:ce:f1:aa:7b:ca:
                    c3:28:dc:ec:b4:27:b0:65:08:93:ba:d0:10:86:fb:
                    2d:b9:17:ff:ad:f0:58:cf:0b:05:35:16:52:f1:bd:
                    2f:86:ab:d8:c9:2d:6f:41:1f:4a:66:ed:2f:1d:ce:
                    af:92:64:11:5f:36:8b:db:5a:54:c2:33:4b:74:29:
                    1e:c3:a8:5f:54:ea:33:4e:ed:2e:a3:74:40:b5:d1:
                    d5:ab:19:7d:95:60:13:a9:31:3f:a2:0a:c4:e1:cc:
                    a9:a9:e1:af:f4:25:6b:76:71:6f:fc:50:e8:11:f5:
                    de:df:d6:7e:3c:f8:fc:e3:8b:3d:e3:e3:84:46:f2:
                    3a:6f:8c:2b:8c:f4:52:e1:1d:60:56:f5:da:0c:be:
                    94:7f:a8:e0:30:35:dd:0f:3d:40:c4:92:29:e1:f6:
                    fa:eb:47:07:d9:c4:ce:e7:b4:14:d3:90:2b:8c:76:
                    dd:b1:6b:31:b7:59:1f:21:0e:d1:5c:05:4b:2b:ed:
                    a7:63:cf:f5:f9:92:c1:fa:9f:63:41:77:93:f7:5d:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7D:C5:BE:86:5A:62:53:ED:3F:5E:42:DB:0F:0D:AE:1D:55:04:D4
            X509v3 Authority Key Identifier:
                keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:e3:12:06:9d:13:bd:d6:27:80:cc:82:e6:b5:58:b0:46:9e:
         03:f5:32:c3:31:5f:60:d9:b6:76:1b:9f:21:8d:c6:71:c4:9d:
         45:9e:06:ac:c4:0a:4a:2e:90:bf:71:79:77:be:0f:fc:6f:4b:
         b7:60:6f:b6:c1:b0:77:1f:dc:b8:56:23:97:39:75:c4:37:15:
         55:f9:4c:d6:6d:3a:1b:41:1e:a9:9a:ab:7e:f2:60:24:f4:d5:
         cc:22:fe:1a:20:4d:b8:27:1a:f9:55:af:f1:03:ef:89:53:b4:
         43:1c:f2:62:97:f5:7b:d1:3c:56:e9:08:8a:fc:ff:84:b3:a3:
         83:63:53:75:21:2c:ce:81:5a:e0:a1:96:17:c1:61:dd:09:3c:
         42:6d:4c:f6:bf:1a:c8:8b:a6:2e:99:f5:4f:af:77:54:52:7c:
         8e:34:2e:c2:4c:dd:c8:cd:28:32:d2:25:ae:bf:9e:d5:03:ee:
         dc:96:00:40:d9:0c:2a:16:ef:b2:2b:21:de:ff:c0:69:c3:df:
         80:42:63:fc:9b:4d:69:8f:63:8c:a4:cf:83:bd:ce:f9:48:27:
         3b:2f:21:3b:06:27:a5:cd:01:57:f3:27:5c:75:c3:8a:75:17:
         52:68:7c:c9:c5:a2:e7:5e:6a:68:c5:e9:19:46:7b:52:6a:7d:
         3a:3a:36:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:10:35 2025 by rpki-client