Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
File:                     ynRI_Amz9zINqAV7-o7qm6-c7jk.mft (raw, json)
Hash identifier:          j+IZqz+SFTiuEbDtJWw7JOIEIECoEyMUkfgDwjv04O0=
Subject key identifier:   92:2D:D2:05:22:AC:51:4A:0B:A8:3F:CB:9A:6F:A4:14:2F:D6:88:3A
Authority key identifier: CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
Certificate issuer:       /CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Certificate serial:       01962C7382F765AE56C16A317F99A26495D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 00:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 00:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 00:01:29 +0000
Files and hashes:         1: Zz3HiEMl3Xhoe_NeOZYASowUK4I.roa (hash: 0qkYuAOmtXdpU390WKpuoXcdObuMpe6kCjVAADqT7/s=)
                          2: ynRI_Amz9zINqAV7-o7qm6-c7jk.crl (hash: K9dA2BHNa4uc07pkSeXiRTKVs3xQwqVLBIFBqaG5RLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 23:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2c:73:82:f7:65:ae:56:c1:6a:31:7f:99:a2:64:95:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
        Validity
            Not Before: Apr 13 00:01:29 2025 GMT
            Not After : Apr 14 00:01:29 2025 GMT
        Subject: CN=922dd20522ac514a0ba83fcb9a6fa4142fd6883a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8b:50:c3:69:e6:05:52:8f:b2:8f:1b:3b:ef:
                    d2:05:a5:bf:db:44:04:99:72:c6:08:e9:0e:16:7b:
                    2a:f5:53:09:f9:a1:8b:b2:53:6b:95:85:ad:26:c3:
                    6d:36:ee:31:60:22:63:df:d6:11:94:ec:2b:f1:de:
                    68:b1:53:60:78:c6:44:ae:92:1b:fe:8c:01:12:de:
                    2a:aa:7e:7c:15:8e:f1:b4:41:1d:32:a8:06:42:52:
                    2b:27:bd:35:b9:c4:f4:e4:df:11:02:8c:9c:66:7f:
                    aa:9d:fd:63:4d:50:5e:e4:c4:db:91:df:c8:68:8a:
                    1e:61:b9:09:6b:2e:68:e7:7c:21:0e:ed:1a:8e:1f:
                    f0:43:43:6f:36:e7:d5:b1:78:41:54:65:23:a7:cc:
                    2d:fd:01:b9:8d:ae:71:2f:e5:c6:a2:5b:fd:87:ce:
                    d3:d6:5a:34:be:ac:9c:32:4b:04:6d:2e:6c:fb:fb:
                    a6:cd:09:f9:ea:5b:73:b7:6a:b2:bf:1c:87:64:b3:
                    c8:00:3c:22:e3:33:e1:cf:70:ef:38:a1:fd:49:75:
                    ca:43:35:15:ec:cb:72:2f:a4:31:cc:70:81:bf:d9:
                    19:c3:76:93:46:1e:ef:81:88:91:5e:9b:13:f6:09:
                    ba:ec:58:0a:c4:2f:d4:79:dc:60:f3:ac:59:cc:23:
                    b7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2D:D2:05:22:AC:51:4A:0B:A8:3F:CB:9A:6F:A4:14:2F:D6:88:3A
            X509v3 Authority Key Identifier:
                keyid:CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:f1:4e:a6:f8:7e:7b:cd:4c:e0:46:53:5e:a0:38:76:5c:40:
         a8:88:db:e6:b0:26:40:9e:fb:94:85:b7:44:66:c3:4e:e8:d5:
         e6:3f:91:df:d8:f1:46:be:93:2b:ed:61:65:ee:d7:10:30:56:
         bc:2b:dd:f3:7b:73:a3:e6:5e:0b:cc:88:81:87:65:ae:7c:6f:
         5c:e3:b9:9c:44:a9:d6:63:88:a9:f5:ef:d7:6a:34:98:68:f3:
         47:3a:74:0a:53:cc:4b:b6:14:37:2d:36:fa:f1:6b:b1:61:b4:
         f7:1c:0e:ff:bc:a3:5a:e1:d2:6b:6d:74:8e:2a:5e:dc:dd:c0:
         10:b4:0c:92:e3:9c:c7:41:8a:d7:18:64:3e:17:1d:40:ae:74:
         0f:22:13:07:77:e7:7b:59:e4:45:35:96:c4:9a:12:9e:9b:97:
         a5:c8:27:5e:f2:d7:4d:81:f4:c5:43:88:11:3c:20:d6:69:54:
         e4:73:0c:65:83:80:1f:b1:38:5d:41:81:b4:c3:b2:ad:a4:41:
         57:94:e8:00:d4:cc:79:69:91:a3:95:f2:25:21:9c:b1:8e:e3:
         d0:7f:11:53:59:97:d6:94:cb:56:3f:85:c5:c2:dc:c0:85:c8:
         5f:19:1e:6f:eb:9b:b7:2c:49:42:6c:a8:4c:cb:ac:1d:68:d6:
         0e:0a:63:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:08:30 2025 by rpki-client