Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
File:                     yex331ntcqVFfezmpT0F7QrmAKo.mft (raw, json)
Hash identifier:          OJUIDJcxuFXMTlRTymmDUtmIxcEurhW1PIhm3YuVJP8=
Subject key identifier:   7C:D2:59:49:09:35:17:4C:A2:47:C6:F4:8F:35:46:44:16:C6:B8:BF
Authority key identifier: C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
Certificate issuer:       /CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
Certificate serial:       0196451FEDBB4250A1748DE767AA204704E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
Manifest number:          14F5
Signing time:             Thu 17 Apr 2025 19:00:42 +0000
Manifest this update:     Thu 17 Apr 2025 19:00:42 +0000
Manifest next update:     Fri 18 Apr 2025 19:00:42 +0000
Files and hashes:         1: usN8GZVfJ54q0l8hKewfBSWmGHw.roa (hash: IakOdZo+PiFdg1ApCygqDDOunMse1hhehFbuFFIfZ5o=)
                          2: yex331ntcqVFfezmpT0F7QrmAKo.crl (hash: Kaokk0E6K5qg+b+3lekj39J19ZVqe/CUDe4ip15T4Tg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:1f:ed:bb:42:50:a1:74:8d:e7:67:aa:20:47:04:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
        Validity
            Not Before: Apr 17 19:00:42 2025 GMT
            Not After : Apr 18 19:00:42 2025 GMT
        Subject: CN=7cd259490935174ca247c6f48f35464416c6b8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8a:ce:94:4d:ef:6b:b1:7c:bf:80:f9:77:41:
                    80:4f:43:a3:0f:64:46:1c:03:0d:92:90:90:28:d4:
                    ce:fb:47:6b:2e:06:94:80:fe:1b:29:a4:a8:d3:c0:
                    0c:06:02:67:b3:0b:80:84:7e:e5:df:62:6c:2b:c8:
                    ce:f2:91:33:53:14:c0:b4:61:df:7b:93:d9:12:2e:
                    4c:76:74:f4:11:9d:c0:cf:35:c0:6b:5f:13:42:29:
                    2d:42:f2:e3:22:98:a6:87:e9:2f:9d:0f:e4:65:73:
                    b8:b5:b1:84:82:2e:07:dd:1b:74:83:08:95:20:77:
                    1c:49:e8:44:22:64:62:aa:29:08:90:e5:a1:60:13:
                    02:35:ef:93:be:e3:07:e4:f8:12:2d:ca:2f:d4:66:
                    10:e6:0d:f8:86:4c:f3:2b:e9:75:e6:ad:ac:d1:58:
                    eb:89:10:1b:e0:33:28:c0:04:89:cd:db:88:1c:2f:
                    a3:ff:1f:61:55:69:91:c9:2e:62:ab:c2:59:3a:b9:
                    da:ca:99:d0:0d:33:fe:ce:f2:76:f3:ed:9a:bf:17:
                    76:f3:53:6f:76:62:c3:9c:8f:09:c2:90:67:88:2a:
                    fb:dc:64:92:5c:ec:2e:ea:da:56:6b:59:c9:40:a6:
                    ef:df:aa:3b:2b:b4:fa:9e:ce:b2:4b:54:fe:87:65:
                    54:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D2:59:49:09:35:17:4C:A2:47:C6:F4:8F:35:46:44:16:C6:B8:BF
            X509v3 Authority Key Identifier:
                keyid:C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:83:1b:2e:7f:be:2a:32:68:12:72:b1:69:4e:27:30:ed:f7:
         f9:85:c2:c7:9a:ee:92:48:8a:05:15:d1:06:db:6b:ff:bd:1f:
         25:06:7c:ef:39:61:e1:19:6e:69:38:58:4e:90:4a:5e:04:3c:
         b0:c2:2f:ea:51:5e:2e:7b:8f:a0:34:35:50:ae:16:3a:c9:e3:
         bf:b2:f8:67:04:94:40:04:ba:51:40:fd:5b:14:35:7b:89:8e:
         03:5b:50:02:b2:39:80:72:e5:9c:26:46:5b:0a:d6:c5:4d:ee:
         0d:a2:6a:67:2e:1b:d9:9d:ca:d5:40:3c:fc:7b:c8:08:2d:a3:
         ec:ba:7a:5e:f9:c1:4b:53:7e:17:a4:6b:90:18:88:60:2b:11:
         7a:42:bc:03:30:b6:26:d4:c9:13:13:33:83:c0:f3:fd:17:95:
         00:91:87:ea:cc:23:76:eb:3a:cb:d0:51:7a:32:d5:32:30:c8:
         be:a9:ea:96:5e:5f:2d:6b:b2:68:ce:2e:63:0e:84:ea:40:c9:
         6c:7c:7d:41:cf:ea:d0:5c:79:58:74:51:32:86:3c:1f:cd:08:
         89:cf:d0:53:e1:b1:46:27:ba:db:e8:b3:04:96:cd:7a:d1:35:
         5c:59:38:de:8a:62:b1:61:d4:45:43:5e:5d:c6:2b:93:bd:86:
         9b:70:2f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:21:04 2025 by rpki-client