Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
File:                     0sKw7hh5KECQZdGe6cCFjowX6hM.mft (raw, json)
Hash identifier:          DSfg1459qhbH7YApYfvKQdQH8p5tsE8ZsrLrgBMTFug=
Subject key identifier:   AA:66:FC:7D:FB:4F:FC:C0:01:BB:FE:8B:BB:C8:79:B2:3A:9E:05:45
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Certificate issuer:       /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial:       01962AF3130F2975B8F90A5054E991AFB69D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
Manifest number:          14E8
Signing time:             Sat 12 Apr 2025 17:01:35 +0000
Manifest this update:     Sat 12 Apr 2025 17:01:35 +0000
Manifest next update:     Sun 13 Apr 2025 17:01:35 +0000
Files and hashes:         1: 0mHHxrKDuXooxqRJqM3AcObFutU.roa (hash: 0sIJmx7yyuOdBXcmte6YeWeL6TZg8JAjxBTze6wfptI=)
                          2: 0sKw7hh5KECQZdGe6cCFjowX6hM.crl (hash: 0RvfvfF00Rjf4+cU0w1Soufmr2dabAWczvyOdibVuPc=)
                          3: 7CJziOdAfq9jwl7KYFdQlPSS2HM.roa (hash: oYgf2+8vVMNQWr/UIAh3TmOHiKE3yvmzUsWvpHQBY4E=)
                          4: AA2twhj3JjqNeEtfXh_nvFIhwUI.roa (hash: 7pwyUMMRmENXJp1YdVN9DBuKjXp76GQ7r0RF+5Zw+oI=)
                          5: NKe-wrE2WicgBb0c0Ud-bVOtGPw.roa (hash: gADDqpEfldBNZqdg/FkPxqfMdnRA+6kZ643uxJ4620k=)
                          6: dV3eLvyh7dkJSKTfdErtuw7Jadc.roa (hash: NpVV1N+SDAUUoPHhUF4/SnqeySzcrRHlw0l3druFyDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2a:f3:13:0f:29:75:b8:f9:0a:50:54:e9:91:af:b6:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
        Validity
            Not Before: Apr 12 17:01:35 2025 GMT
            Not After : Apr 13 17:01:35 2025 GMT
        Subject: CN=aa66fc7dfb4ffcc001bbfe8bbbc879b23a9e0545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b7:28:cb:aa:4d:89:e3:68:cd:ed:a6:72:c1:
                    a4:a2:1b:3d:82:2d:20:a3:2b:34:14:15:a0:30:bd:
                    22:a1:3e:b0:1e:02:42:94:a9:3d:be:b2:49:83:bf:
                    12:6a:ab:f4:d9:41:38:0a:d1:16:73:bd:cd:b1:da:
                    8d:4f:24:c0:8f:96:e5:ef:2f:09:b8:13:fc:bc:b2:
                    c3:ef:34:f8:b0:07:0a:53:4e:47:39:06:07:4f:69:
                    2b:c4:d4:22:9b:0d:dc:f3:65:97:07:c4:22:0a:b7:
                    6a:1b:8d:97:2c:b7:a2:55:97:6c:b0:8f:a9:ad:2b:
                    26:f8:40:a9:db:da:f8:e4:25:ec:85:46:93:79:a5:
                    0b:cd:d7:64:07:1b:a3:77:55:72:e8:c9:ea:15:34:
                    4b:2c:be:ff:32:98:ac:e5:b2:1d:6a:25:78:42:20:
                    fa:d2:28:4d:b3:7e:02:30:49:6a:46:1b:75:fd:7d:
                    26:31:2e:4d:15:0d:90:a5:05:54:ba:2d:68:63:5f:
                    5b:16:8d:06:b2:37:ff:0f:ce:30:40:87:de:39:0c:
                    d4:ef:26:2e:fc:0f:50:a2:8f:82:ff:18:18:23:30:
                    32:09:1f:1f:70:29:d5:e8:42:bd:5a:3f:e5:d6:92:
                    1b:d9:4c:14:b0:48:64:6f:46:41:f0:c1:00:e5:d1:
                    3c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:66:FC:7D:FB:4F:FC:C0:01:BB:FE:8B:BB:C8:79:B2:3A:9E:05:45
            X509v3 Authority Key Identifier:
                keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b1:e5:93:83:29:ab:4f:ac:4b:88:a4:56:c8:a0:f9:d9:f2:
         df:0d:67:b3:e1:7d:51:f3:2f:64:33:20:df:54:e9:9c:96:8e:
         14:d3:79:6a:58:3e:d3:b7:b9:ab:80:7e:8d:8a:c4:52:5b:13:
         5c:da:5d:29:82:07:cb:8e:b7:94:0f:16:22:f9:9e:58:13:30:
         8b:14:04:99:5b:33:b2:8b:47:01:63:c8:19:53:c9:4f:e0:61:
         5d:aa:3e:3e:18:7a:cb:87:25:ec:9b:bf:bc:b6:1c:52:74:86:
         08:2f:01:c9:57:d0:34:45:29:57:56:20:63:fe:d2:12:57:e9:
         6c:ae:9a:40:5f:83:77:14:72:ef:a4:88:2b:d4:84:b7:ea:9b:
         60:ad:26:38:4b:dd:71:21:7e:42:28:e3:17:e4:3a:51:7d:c6:
         88:65:f7:25:b3:d9:69:b4:1c:c4:e5:3a:a8:f2:7e:16:10:75:
         b2:c8:42:d6:c9:12:b3:64:f2:13:30:bd:29:19:a9:f3:9a:a2:
         52:29:8e:cd:f2:3c:5a:fe:bd:d4:77:ae:cb:f8:2a:09:33:a1:
         4f:92:7d:ef:38:13:43:d9:40:ee:bf:ff:48:15:4c:8f:e0:9d:
         6e:d8:06:ed:a7:95:da:63:1f:17:91:f0:36:a9:d6:7a:fc:87:
         2f:0d:ec:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:28:57 2025 by rpki-client