Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
File:                     V76Px5yTUE_CH_cPukaaTLvi8Ck.mft (raw, json)
Hash identifier:          8u4irtoYgoUwrNXQYGQHyhbJGarjcZf6N+Aqd/1gE/c=
Subject key identifier:   F2:A2:17:05:03:99:0E:FB:36:88:B3:31:EE:8E:B3:79:76:AE:E1:C5
Authority key identifier: 57:BE:8F:C7:9C:93:50:4F:C2:1F:F7:0F:BA:46:9A:4C:BB:E2:F0:29
Certificate issuer:       /CN=57be8fc79c93504fc21ff70fba469a4cbbe2f029
Certificate serial:       01964BFE09B84481B4B55099C667550403C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
Manifest number:          1442
Signing time:             Sat 19 Apr 2025 03:01:01 +0000
Manifest this update:     Sat 19 Apr 2025 03:01:01 +0000
Manifest next update:     Sun 20 Apr 2025 03:01:01 +0000
Files and hashes:         1: GSq3J2YJnNyhzth3hnZMQLtfyVg.roa (hash: YjJTMfChs1ee9zRQg+5qYR9IzIwhQNNIZQcGrlL7UTQ=)
                          2: V76Px5yTUE_CH_cPukaaTLvi8Ck.crl (hash: YoncMoHFwR1G5gL1xzd65E+dm/7ZwRkNrP6xvwzsZ1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:fe:09:b8:44:81:b4:b5:50:99:c6:67:55:04:03:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57be8fc79c93504fc21ff70fba469a4cbbe2f029
        Validity
            Not Before: Apr 19 03:01:01 2025 GMT
            Not After : Apr 20 03:01:01 2025 GMT
        Subject: CN=f2a2170503990efb3688b331ee8eb37976aee1c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:be:5d:c4:6e:2e:c3:de:b6:51:ad:c8:b2:66:
                    01:88:1f:90:42:a8:a2:6d:de:52:e0:11:92:f3:f0:
                    e0:3f:e9:d3:da:61:1d:35:34:4f:cd:20:b5:a8:93:
                    f4:51:63:f5:5e:3b:93:61:a8:d8:1b:b5:06:a4:bf:
                    da:81:77:fc:14:51:a7:1e:6f:c8:62:62:7e:22:27:
                    d3:af:c8:a8:01:bc:68:d5:3c:28:dd:4a:f7:82:f1:
                    12:63:03:8b:6c:df:58:ef:fc:f3:8a:cd:fb:22:85:
                    bf:c4:b7:6b:5d:cb:b5:b7:35:df:d0:b6:c6:84:54:
                    cd:91:8b:3a:26:93:39:bd:b5:76:1c:a8:2a:b3:4d:
                    57:07:79:4c:53:dc:b4:cc:4f:06:ac:b9:8e:a2:4a:
                    67:2b:18:2e:81:e6:43:9e:27:e3:21:db:35:16:30:
                    2a:f7:5b:24:cd:9d:72:7c:25:a8:d9:30:2c:6f:ef:
                    e4:ec:dd:06:3c:8a:00:e4:76:1b:da:39:63:df:7a:
                    cf:6f:d2:41:67:0d:b7:09:bb:bf:b3:fd:3a:36:db:
                    a5:f0:05:51:6d:a9:f1:a0:f6:02:77:34:14:f4:cd:
                    d6:da:ac:77:01:8f:06:e4:ac:d3:42:19:cb:30:45:
                    2f:6d:54:ee:13:99:89:68:3c:44:76:9d:db:7e:38:
                    ec:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A2:17:05:03:99:0E:FB:36:88:B3:31:EE:8E:B3:79:76:AE:E1:C5
            X509v3 Authority Key Identifier:
                keyid:57:BE:8F:C7:9C:93:50:4F:C2:1F:F7:0F:BA:46:9A:4C:BB:E2:F0:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:83:b8:7b:56:85:52:f9:ea:27:86:25:53:76:eb:57:61:ea:
         51:cc:08:de:1b:3e:63:37:f5:8b:0b:19:67:bd:d3:3b:e3:59:
         60:e8:ed:6f:49:35:90:64:e3:70:fc:9c:c1:d5:54:e0:25:23:
         b9:74:dc:f8:a9:9b:36:dd:ff:d5:62:57:e4:6b:b1:63:3b:0e:
         7f:cb:93:a5:80:37:01:28:4c:3a:7d:43:3c:2b:20:e6:d2:f6:
         70:3b:e8:51:21:57:9c:4d:5b:e3:77:d3:85:08:b7:56:3c:e2:
         28:e8:ae:f5:be:e8:03:9b:e4:55:88:7e:12:b9:20:33:e3:50:
         20:8c:2a:b4:dd:49:b0:75:24:8d:4c:fb:90:9b:39:e4:b4:dc:
         60:b8:3d:9d:38:79:87:ae:bb:3a:eb:cf:21:22:11:ba:44:8d:
         dd:19:bd:bf:8e:94:d2:2a:c6:57:9a:52:42:c1:a5:4a:5c:b3:
         1e:ab:0c:2f:68:1c:27:57:e6:81:19:02:20:14:23:04:ec:c0:
         fd:e9:65:f5:e1:e2:c6:9f:72:57:e9:39:af:25:ad:04:1c:b8:
         51:fd:7b:9d:20:fa:fb:89:12:a7:e6:30:d2:d1:06:25:ca:14:
         69:46:f5:f9:e7:71:19:f9:fb:cb:17:2c:0f:ee:5a:18:ac:f3:
         5f:2a:84:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:08:45 2025 by rpki-client