Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
File:                     KgzEYwHIsf1GOSkwGPulNlOiZbI.mft (raw, json)
Hash identifier:          rHHfEjjZDU+9i1bUPAIPR+CL4PivlEfItiAv/LSkg3w=
Subject key identifier:   6A:82:EB:26:7B:01:49:EF:A8:4E:FF:15:17:AA:58:04:44:09:4D:E1
Authority key identifier: 2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
Certificate issuer:       /CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Certificate serial:       01964A7CF43098A32B273C2C3E8E116F5E04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
Manifest number:          14FC
Signing time:             Fri 18 Apr 2025 20:00:25 +0000
Manifest this update:     Fri 18 Apr 2025 20:00:25 +0000
Manifest next update:     Sat 19 Apr 2025 20:00:25 +0000
Files and hashes:         1: 25LU7394eXHg-PBe4_GLTG3VIkw.roa (hash: HyP22/g9CSOKH8mPcT6JDAYedjiAUR/5O/lp9cDajCk=)
                          2: KgzEYwHIsf1GOSkwGPulNlOiZbI.crl (hash: F16qGSuO5y1iw+vd/WDCiRN4jhnbVYBwl8d5q60d3H0=)
                          3: VUqvat4WtfuUczhMBY4TDvxEK_s.roa (hash: Zqzw2dEApvnq4zRqyWAKudIEokzGJ+rSfWzcaKX+at0=)
                          4: jfIFCuUZlCfoxkAB48zp-OMBSv0.roa (hash: tfMbXizXQYE7ANVbZs7KN2qDtk5wxuAhU53t/l8imds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:7c:f4:30:98:a3:2b:27:3c:2c:3e:8e:11:6f:5e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a0cc46301c8b1fd4639293018fba53653a265b2
        Validity
            Not Before: Apr 18 20:00:25 2025 GMT
            Not After : Apr 19 20:00:25 2025 GMT
        Subject: CN=6a82eb267b0149efa84eff1517aa580444094de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b9:ec:a7:d0:ee:22:4f:da:f5:c7:42:fc:f6:
                    8f:e6:21:3a:22:c9:d9:69:c3:e6:a5:c5:21:86:f9:
                    2f:61:ca:23:24:26:2f:03:64:a2:d0:9b:a6:0a:d8:
                    94:ef:1e:98:4f:af:55:18:3a:70:07:80:e1:b7:20:
                    75:d5:18:6a:24:95:d5:a9:45:d7:62:3d:af:98:aa:
                    fc:b4:04:10:91:2e:b0:b4:2a:25:1b:7b:65:c1:1e:
                    e4:a6:5b:ed:df:a9:67:12:71:61:cb:d0:81:72:4a:
                    4a:2f:8c:0c:a8:80:31:02:ac:1c:f4:ff:b7:28:5b:
                    a1:31:fe:ef:34:14:0b:f5:6a:5f:2e:37:ee:af:48:
                    a6:17:fd:d5:76:ba:e4:8e:40:a9:73:62:6b:09:de:
                    76:b8:3e:ab:98:33:89:a3:62:46:c7:0a:26:23:29:
                    46:7c:b6:c4:35:5b:2a:b1:e1:ab:b2:15:0c:64:1d:
                    de:8e:27:d1:63:17:b5:48:53:ec:c3:fe:2a:dd:f3:
                    4c:9a:be:17:9c:72:9f:6b:c2:7b:4e:3f:ac:3f:fe:
                    81:4c:57:5b:a6:f3:14:fe:39:3b:a1:8c:bc:52:cd:
                    c0:46:29:f6:d3:d9:13:74:eb:0e:d9:2d:d8:37:1b:
                    cf:ba:35:f0:af:4f:c3:f4:57:84:fb:5d:e3:de:10:
                    2f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:82:EB:26:7B:01:49:EF:A8:4E:FF:15:17:AA:58:04:44:09:4D:E1
            X509v3 Authority Key Identifier:
                keyid:2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:65:6f:b2:41:75:7f:d9:18:da:ef:5e:de:f6:c2:b0:43:bb:
         24:0c:e0:d4:fd:00:5e:5d:a2:9f:48:20:e9:11:91:ca:6e:53:
         dc:32:ac:25:d9:3d:1d:de:ee:9f:93:dd:86:c5:28:bc:f4:e8:
         8a:7a:09:b2:77:f0:f5:d0:1d:f0:32:51:d4:c0:60:bb:01:a4:
         93:2b:ad:3e:9a:16:bd:44:c3:7c:c0:8a:18:50:fe:1a:af:d2:
         2f:60:d7:9d:8a:9d:44:72:b0:11:d7:68:37:20:fa:db:c6:78:
         9b:1b:1e:16:96:a1:b2:14:1c:ff:71:c9:c4:a8:72:4b:bb:29:
         b0:af:ab:46:79:7c:ef:98:8b:a2:c1:60:35:5f:b8:8d:46:7e:
         42:18:06:f7:6c:f4:a0:46:01:66:d6:89:07:f3:d3:66:f0:38:
         71:e1:17:90:4f:b8:2d:fd:b9:ff:ee:3b:11:a6:48:6f:5f:d8:
         74:35:1a:00:03:90:63:5a:a8:66:77:27:7c:6a:52:12:cf:07:
         68:7e:55:a2:1a:92:01:ac:3b:66:8c:ab:26:a6:0e:f3:98:6d:
         60:af:14:71:aa:a5:33:6b:d9:b6:67:5f:dd:ce:a1:ae:c3:3f:
         6d:0c:95:37:ea:7d:dd:ec:17:ee:6b:3c:45:f3:a0:17:de:6a:
         6b:64:ad:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:25 2025 by rpki-client