Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
File:                     Z2S57soliueMTVEyGovf75orajw.mft (raw, json)
Hash identifier:          DRhrqSQHtHtAQO3HmwTG2jxVb/cTHx0M/lrrtZ+kFPM=
Subject key identifier:   1B:83:B6:43:1E:AF:F6:E8:FC:FB:49:B3:7A:4F:34:E3:C4:62:2E:A1
Authority key identifier: 67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
Certificate issuer:       /CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Certificate serial:       01964A7D2C06DF2BCE91DD149CB0664EF25B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
Manifest number:          14FB
Signing time:             Fri 18 Apr 2025 20:00:39 +0000
Manifest this update:     Fri 18 Apr 2025 20:00:39 +0000
Manifest next update:     Sat 19 Apr 2025 20:00:39 +0000
Files and hashes:         1: J8TxeAmZBzINa9syBZ1B4yTXcxY.roa (hash: 2QfjawOPNl3mivz2h5LwmzlkbdOnVy10wna7TIvLBVY=)
                          2: MwzfvZntetFg-_eX5DgAKUVWZK0.roa (hash: px93WC5fRlO4NzSq6ywwEqfisL0ff50EWTLfIp14D3o=)
                          3: Z2S57soliueMTVEyGovf75orajw.crl (hash: BTDXxiXb3DfpEDZ6Ph4/7LQ2aTn1ANaM2/hQHD1L8F0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:7d:2c:06:df:2b:ce:91:dd:14:9c:b0:66:4e:f2:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
        Validity
            Not Before: Apr 18 20:00:39 2025 GMT
            Not After : Apr 19 20:00:39 2025 GMT
        Subject: CN=1b83b6431eaff6e8fcfb49b37a4f34e3c4622ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:73:05:09:e0:bf:82:52:51:49:8c:c7:23:7a:
                    9e:e9:1d:b8:56:ce:42:f9:0a:b5:f0:6e:18:cf:93:
                    63:6d:cb:61:36:96:a1:e9:bc:74:8b:3e:ea:34:b3:
                    75:a3:dd:2c:0c:e1:32:b7:2c:3b:a4:cf:e5:35:f2:
                    58:d3:3e:44:51:74:dc:c6:df:a1:e6:cc:0d:91:e4:
                    db:7f:98:86:93:5d:83:bc:f4:9b:5b:ad:03:89:79:
                    70:d9:2d:03:20:d7:5d:f0:aa:87:3f:af:a5:47:b9:
                    f0:9b:e4:42:22:4c:ea:1c:92:1e:7a:97:4e:9d:a1:
                    e5:c2:67:e1:40:47:d5:6f:dc:32:3c:c2:5c:bb:33:
                    64:3a:ce:1b:d7:a8:16:85:56:42:59:39:09:c8:f7:
                    bc:ab:40:e1:44:f9:af:e1:65:91:2a:2c:51:26:81:
                    32:00:0a:c3:77:bf:48:8f:4a:f9:4f:62:9c:d7:1f:
                    2d:94:7f:b1:22:20:2b:cc:e1:4b:63:93:bd:c2:c8:
                    86:73:22:37:d9:f3:04:f7:63:50:8d:41:27:ce:2f:
                    64:75:ce:ca:4b:d2:ae:e4:78:bc:0b:f3:9d:01:23:
                    11:72:ed:84:fd:28:ce:df:35:06:18:56:03:35:a9:
                    00:44:35:ea:c5:3f:c4:3f:a4:ba:c6:32:91:63:e1:
                    b1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:83:B6:43:1E:AF:F6:E8:FC:FB:49:B3:7A:4F:34:E3:C4:62:2E:A1
            X509v3 Authority Key Identifier:
                keyid:67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:06:08:b1:5b:89:18:2b:e5:de:50:2e:f3:17:61:68:b3:d3:
         5e:7d:0a:14:09:37:1a:9e:eb:4d:89:5e:42:b1:de:3e:ca:98:
         4b:95:2f:cf:f7:d5:81:1b:65:3c:e5:45:0a:4b:73:fa:5f:cc:
         55:1d:83:ab:e0:25:b8:88:0c:8c:c4:0d:8d:ca:7f:32:ce:0f:
         85:d4:a5:b8:ad:ba:35:55:2e:92:61:43:7f:9d:bd:89:7d:9a:
         3c:3f:e1:18:ac:0b:69:8e:25:98:3f:3a:6a:3b:b2:2e:87:f2:
         58:4b:d1:3b:aa:08:a2:4f:a0:80:5f:c6:58:5b:b1:7c:b1:b7:
         d3:4b:d2:ca:ab:9d:6b:21:d8:0e:87:8a:84:52:fa:a9:b5:f9:
         12:b6:7b:51:7a:62:d1:31:f3:61:c3:02:16:f6:1c:f9:aa:7a:
         10:14:0b:dd:e1:f7:8a:f5:f1:0f:06:33:1b:ed:0d:4b:1a:5d:
         b0:1d:cb:4c:97:64:13:4a:ad:7c:9b:8d:1c:d7:bc:31:c3:ce:
         1e:d8:3e:45:9e:d9:42:b7:ac:69:0c:f5:23:3b:55:23:fd:16:
         c0:92:3a:f6:1b:9e:da:d8:a6:b9:31:96:2f:fc:c5:3e:72:0f:
         6b:71:77:81:28:70:2b:60:60:ea:75:08:51:74:ee:52:c9:77:
         c9:64:4d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:45:32 2025 by rpki-client