Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
File:                     Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft (raw, json)
Hash identifier:          yArBYgRXHePQJLkJDska+7GEf1mc+i2Mh7XfZEBxqck=
Subject key identifier:   67:E2:D2:17:3C:8F:B9:D8:27:AD:39:3A:F9:F2:F6:F8:77:D5:8B:8A
Authority key identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
Certificate issuer:       /CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Certificate serial:       0196526D57935F806D9175CEAA22A707F3E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
Manifest number:          14FE
Signing time:             Sun 20 Apr 2025 09:00:19 +0000
Manifest this update:     Sun 20 Apr 2025 09:00:19 +0000
Manifest next update:     Mon 21 Apr 2025 09:00:19 +0000
Files and hashes:         1: 23ykqlSoxhCVfaY9IS92DsNyWBE.roa (hash: EcOQRm/PU+EVIJkGyqpMDHmRcGo4Swnj7UgNzWEeajc=)
                          2: Ukpz258Pu7bNWf8NOO8xTSDm6ac.roa (hash: N3tcSeOhnfUpzG6xjoUCZ9+KDhbzHATSPGgHhTJK3Ng=)
                          3: Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl (hash: Jw2+WZmh8EKCzOx2T0M2X7g2x5VR05Azzkv8oSwmO1M=)
                          4: eWric6r-5T_Rp4hV5FAy7I4IoJY.roa (hash: NkPTqBN+TTAOu9SJvsMG3iRYoMiT60DbDNclBXlGKDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:6d:57:93:5f:80:6d:91:75:ce:aa:22:a7:07:f3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
        Validity
            Not Before: Apr 20 09:00:19 2025 GMT
            Not After : Apr 21 09:00:19 2025 GMT
        Subject: CN=67e2d2173c8fb9d827ad393af9f2f6f877d58b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:05:b3:c7:ef:43:e9:18:c2:27:0b:87:32:2a:
                    d7:fc:85:12:30:71:86:d8:97:b8:24:54:f8:b0:68:
                    fe:6b:67:2a:41:54:84:ea:02:6f:04:52:de:dd:15:
                    cf:99:d9:7c:53:fa:e9:31:63:c4:23:c5:f3:29:7a:
                    0b:e4:55:8f:c9:6d:1a:69:4c:6b:98:e7:ec:ab:18:
                    f3:31:19:3c:ab:db:0e:e2:25:79:6b:ee:11:ca:6e:
                    0f:d3:68:74:bc:76:7c:af:00:10:93:de:16:2d:83:
                    58:8a:fc:a1:d3:05:9f:7e:a3:aa:ef:82:a1:5a:27:
                    41:5e:95:a2:bb:ba:0a:11:22:f8:ad:45:d0:8a:15:
                    d3:1c:25:45:09:a1:ed:d8:d6:77:73:ba:b7:86:c7:
                    bf:ba:08:ad:89:0d:25:bd:79:d8:d4:0a:05:e0:23:
                    9f:25:cd:01:3e:59:bd:18:e4:15:f9:eb:40:09:58:
                    c6:b9:7d:7d:3f:2a:ae:ce:cb:62:f1:3d:f2:e3:94:
                    91:85:c4:ce:17:55:41:bb:99:f0:1f:b7:02:3f:b2:
                    ac:79:20:a9:ad:d9:23:91:fc:72:d7:96:e4:70:2d:
                    78:61:a7:fa:69:15:85:42:26:1a:eb:ae:a1:94:45:
                    ce:23:f7:5a:29:df:a9:2e:2f:7c:c5:ee:d5:42:76:
                    31:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E2:D2:17:3C:8F:B9:D8:27:AD:39:3A:F9:F2:F6:F8:77:D5:8B:8A
            X509v3 Authority Key Identifier:
                keyid:52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:1c:df:7c:4f:13:a2:31:59:77:13:52:25:6c:aa:cd:6d:fa:
         16:79:39:c8:c7:59:f8:3b:6a:a6:e1:0b:77:42:ee:a7:92:dd:
         60:b8:f2:36:e9:09:d1:7b:7c:eb:e4:25:13:d2:38:ae:0e:64:
         74:42:47:fb:e0:18:f8:3c:20:12:2a:9c:75:8b:47:b4:80:2d:
         22:ca:1e:fd:6a:ce:9f:39:35:dd:7e:d8:50:04:71:e9:f7:a2:
         b4:d2:e4:bc:02:bb:9c:5a:67:06:ec:16:23:b1:91:f8:19:1d:
         05:4e:df:32:4a:3c:ce:01:30:63:1a:4e:53:f2:f9:e8:af:73:
         61:0a:ce:8b:cd:57:63:fa:c3:8c:24:cf:91:4a:a8:70:00:ed:
         ed:52:2b:24:16:8d:f7:39:16:b9:a7:7f:9f:c8:c9:14:58:fc:
         fb:c3:db:29:b5:cb:68:90:d7:c0:1c:c7:c9:2f:b3:e2:21:75:
         d4:90:f2:6e:45:c2:9c:be:fe:49:14:a4:88:0e:8f:55:ae:84:
         a0:3f:11:fd:c2:d7:55:aa:1b:73:96:b7:a8:c7:89:ef:6c:1b:
         bf:d8:45:e1:6d:2f:5b:c9:29:da:a7:bc:a0:6d:eb:27:31:16:
         ce:2b:41:17:ac:6c:94:78:37:8d:9a:c3:3d:3d:2a:97:a9:c4:
         96:06:d5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:01:19 2025 by rpki-client