Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
File:                     Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft (raw, json)
Hash identifier:          GMd+2DMUWOm2jQ0CQagK3HVhO873oqMqz2Wshyy4/O4=
Subject key identifier:   CD:C6:C7:5F:C0:16:2E:DB:EB:95:3D:CB:1E:28:11:D6:EE:3C:AE:42
Authority key identifier: 49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D
Certificate issuer:       /CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
Certificate serial:       01964EC78B9CD64ED077203636A42407976D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
Manifest number:          10E0
Signing time:             Sat 19 Apr 2025 16:00:22 +0000
Manifest this update:     Sat 19 Apr 2025 16:00:22 +0000
Manifest next update:     Sun 20 Apr 2025 16:00:22 +0000
Files and hashes:         1: NSiBzROOhgmJ9ypJm8Za0IGQ3F0.roa (hash: o2v8vxJ4hYMUAZbmBnTv+Psah74MuG6cFMK+pUBuCMg=)
                          2: Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl (hash: Fx2ibZBQnmUDGoPi8D7Zxn2CpFGhagZARsaRvtJsOAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:c7:8b:9c:d6:4e:d0:77:20:36:36:a4:24:07:97:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
        Validity
            Not Before: Apr 19 16:00:22 2025 GMT
            Not After : Apr 20 16:00:22 2025 GMT
        Subject: CN=cdc6c75fc0162edbeb953dcb1e2811d6ee3cae42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:30:21:2a:cc:fe:2c:87:77:39:a6:78:28:1a:
                    29:42:d6:c5:91:59:02:a8:6f:46:2d:ad:94:88:05:
                    9d:24:3a:c0:a5:69:62:e8:ce:91:09:7e:78:a9:96:
                    fb:58:7c:ee:63:0f:d0:b4:91:e1:7d:2f:c1:e3:2e:
                    a3:f8:32:64:8b:28:48:29:87:3e:1f:a4:35:ad:2d:
                    7b:40:6b:63:41:ec:68:fa:5d:17:b9:27:b8:3f:75:
                    7f:77:39:7d:58:aa:44:34:a0:76:80:31:4d:fe:65:
                    ac:7a:4a:c9:38:5e:bc:6a:7a:b5:61:7b:1e:a1:b3:
                    69:4c:43:ab:5b:1b:9f:01:d5:fb:c8:3e:c0:b5:7d:
                    15:8c:2d:37:27:ce:22:4a:79:a8:08:76:8d:85:ca:
                    51:8b:50:c7:01:96:d9:d7:8a:ca:fe:58:a6:69:eb:
                    4c:d2:e2:60:df:bd:2f:77:70:34:47:96:da:a8:8a:
                    3c:c6:17:0f:11:59:c9:60:72:22:11:95:6a:cd:e0:
                    92:d8:61:a7:22:75:63:3a:ce:5f:3c:d9:09:9b:8f:
                    55:02:ad:d2:ad:68:d5:00:a2:44:7b:c9:e4:f2:37:
                    31:b8:8a:28:ea:e0:dc:b4:50:05:28:9d:97:88:f7:
                    39:11:7d:47:7d:85:84:70:47:ee:b2:28:68:19:a7:
                    51:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C6:C7:5F:C0:16:2E:DB:EB:95:3D:CB:1E:28:11:D6:EE:3C:AE:42
            X509v3 Authority Key Identifier:
                keyid:49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c2:12:c2:4f:77:40:de:a6:47:db:35:d4:8b:6c:22:ed:d3:
         64:2a:41:c8:b9:59:cd:8c:76:b5:9a:fa:0e:60:23:1c:3a:52:
         5d:58:25:27:9c:5b:28:c6:6c:ab:98:59:b9:c3:75:3b:b9:bb:
         a0:b1:6c:fc:e6:1e:5c:87:6c:99:d5:8b:24:71:3f:46:78:f0:
         91:3d:3c:96:87:20:94:5d:50:09:8e:09:6f:5d:2b:92:d1:cc:
         e6:3e:03:71:dc:33:e4:79:61:92:fd:8d:be:b6:8a:4d:19:a9:
         d4:f5:46:02:d5:c6:b3:cb:14:e3:9b:cb:eb:e9:e4:10:3b:1a:
         2c:50:6c:8b:d2:89:9d:dc:41:7c:8f:c0:79:fa:dc:cb:29:53:
         d2:e9:46:bd:2a:df:3c:05:fd:a6:dd:20:18:98:e8:49:f2:7e:
         54:76:50:21:43:de:a0:85:42:6d:b8:76:cf:84:52:42:3b:14:
         d1:38:d5:25:a7:3a:c6:b3:6a:ec:11:4a:12:c9:6f:86:1c:34:
         fe:a2:03:79:c4:7e:e1:78:76:e3:b9:a8:ab:ef:d6:ae:4c:8d:
         e3:33:51:b6:0b:4e:ae:1d:09:de:0f:39:a6:81:fa:cb:54:1b:
         95:0e:55:e6:c8:8d:1c:15:de:86:5a:28:6e:94:45:73:1b:40:
         db:3c:18:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:54:36 2025 by rpki-client