Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
File:                     zE4rrFHZy3KbGnVijua0ycHp_8g.mft (raw, json)
Hash identifier:          kAlJCIBGxoIYauVGFu0DOod5hWZTCQh/L/7HkQTFrI8=
Subject key identifier:   11:B5:96:88:DE:DE:06:57:E2:C6:B8:86:76:32:F5:2F:8A:17:63:EA
Authority key identifier: CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
Certificate issuer:       /CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Certificate serial:       01963EB0229C6B540B373B1A5904D5ED11AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
Manifest number:          9D
Signing time:             Wed 16 Apr 2025 13:00:52 +0000
Manifest this update:     Wed 16 Apr 2025 13:00:52 +0000
Manifest next update:     Thu 17 Apr 2025 13:00:52 +0000
Files and hashes:         1: O_wHUsAPrNDflBZDUMtdY6xsx-Y.roa (hash: ARirtfJZlvrV6Gh7ZW/gDyQsG60JpK7a/eIqEIlcaSo=)
                          2: zE4rrFHZy3KbGnVijua0ycHp_8g.crl (hash: yIgeUExz/xJVX7S2M/5s8Mn3iaC2ocr58urYtGfpOOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:b0:22:9c:6b:54:0b:37:3b:1a:59:04:d5:ed:11:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
        Validity
            Not Before: Apr 16 13:00:52 2025 GMT
            Not After : Apr 17 13:00:52 2025 GMT
        Subject: CN=11b59688dede0657e2c6b8867632f52f8a1763ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3b:ef:43:b1:1b:72:4a:a3:88:77:68:a8:7b:
                    a5:a0:a8:72:fa:cb:5f:68:76:83:7c:59:ba:1f:62:
                    9a:0c:73:f9:52:06:fe:84:07:fe:14:88:db:86:ca:
                    22:2b:a3:b0:a2:e2:27:83:4f:8a:95:a2:52:09:9b:
                    7c:cd:11:79:83:64:57:f3:e2:74:db:cf:80:aa:55:
                    a2:be:81:d5:b8:c2:86:37:34:fd:18:b1:88:85:a2:
                    70:76:bd:49:94:d0:be:49:67:fb:23:e7:37:f2:3c:
                    c6:03:cc:10:c0:3a:43:13:80:e8:85:a9:91:ad:ef:
                    04:f9:aa:f0:e8:41:20:15:99:77:94:d8:d5:58:fd:
                    27:83:5a:93:a9:1c:c6:82:ae:fd:83:11:55:2c:78:
                    b4:e6:8e:28:f1:63:bf:be:1e:ce:4e:d1:da:7f:df:
                    45:c7:17:ab:29:ae:08:be:8b:2f:47:46:d9:7f:19:
                    b1:70:45:e1:50:85:dd:0a:5c:33:2b:3e:69:82:af:
                    2d:47:f2:e0:99:66:03:de:f1:72:af:06:89:b0:fc:
                    f8:81:b5:2a:b7:c3:8b:9a:35:5d:00:3a:c2:5c:88:
                    fb:2a:b0:69:da:f1:42:61:b0:81:4e:e6:7c:ab:12:
                    76:c7:b1:e9:52:1c:56:48:27:2e:d0:d1:ba:ad:80:
                    9e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B5:96:88:DE:DE:06:57:E2:C6:B8:86:76:32:F5:2F:8A:17:63:EA
            X509v3 Authority Key Identifier:
                keyid:CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:19:c2:cf:6c:dc:b0:00:55:cc:27:a0:99:58:e3:fe:62:d9:
         37:89:be:9e:18:0e:1b:ea:2f:f4:df:1c:2f:1d:c1:41:c1:2a:
         ce:6a:5c:06:2f:f9:c3:34:9f:f9:37:9e:2a:2a:fc:9d:1d:89:
         20:31:0a:6e:20:0d:1c:76:b8:65:75:c7:0e:4b:0f:a3:50:c2:
         f9:21:4c:5c:db:e2:b1:70:24:55:83:a8:77:ea:36:d2:76:82:
         37:39:a9:68:f4:b8:18:6f:be:88:f4:fe:43:bb:83:fc:ab:71:
         76:10:cc:7b:03:d4:02:89:8d:d6:b5:d4:93:f6:f4:07:ed:af:
         2f:ae:e1:66:ee:ea:d6:fa:fb:6a:0f:22:61:85:b3:e1:f0:0d:
         ce:b6:1e:9e:3c:53:4d:01:5e:91:fb:ad:07:01:a6:ae:0e:63:
         1b:3b:69:bf:fa:10:d7:e3:11:ae:d0:12:22:9b:1d:f6:4b:34:
         83:e2:12:4a:94:85:1c:21:ab:7d:51:e1:f1:ed:68:35:95:e0:
         cb:50:d7:4a:b3:ca:b2:bf:58:22:9a:24:24:b2:e6:b8:6f:23:
         27:63:dc:bb:7f:38:b9:c4:2b:01:77:d2:f1:c9:c4:4d:63:ee:
         3c:9f:86:67:48:0b:0b:23:b6:87:cb:64:1c:cd:cb:cd:13:8f:
         e7:61:f6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:52:13 2025 by rpki-client