Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
File:                     vE8eawEfTWMxoSeVWlSPpQUlgKU.mft (raw, json)
Hash identifier:          ThlCH5kPFoeeaDaj/tlJ/MyCKp7DbTGavyDPxmeWE8U=
Subject key identifier:   D7:37:83:0A:91:2C:D8:24:F6:F2:41:C2:25:75:C7:8C:5F:DE:5E:90
Authority key identifier: BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
Certificate issuer:       /CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Certificate serial:       0196466975B94328AA2474C7B3E68A6556C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
Manifest number:          14FA
Signing time:             Fri 18 Apr 2025 01:00:38 +0000
Manifest this update:     Fri 18 Apr 2025 01:00:38 +0000
Manifest next update:     Sat 19 Apr 2025 01:00:38 +0000
Files and hashes:         1: BNqfmpLmjYM_hMvzjjiD1hvhjAw.roa (hash: i4CNGeJ+mFFlH8LiDeZQtBRRw7N8oDxdjkoS0v+qObY=)
                          2: aSjaEPJVPJX67mv2fHsiGHa_Pjs.roa (hash: ZEy+TRl03r70LlIyNTMVcl1yqBTFe/vMwXgXOHeWwSU=)
                          3: boEHtK6TX4b8tA4ZE52KAM2BJmo.roa (hash: +7NNF3zI76oRfEmOt6I7AY03Pn8U8YF2KqGhoMWLwNw=)
                          4: uV1M3fky2AaC8kOeiqG8vtH6340.roa (hash: 1utJq4cOepQgwTmFBjPYmXLoibI08Xbs4pkw4aA8F7w=)
                          5: vE8eawEfTWMxoSeVWlSPpQUlgKU.crl (hash: ++8vpykQjmyA7DZHTSGxez9H8V52y0uqLjIYPVkFhMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 18:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:46:69:75:b9:43:28:aa:24:74:c7:b3:e6:8a:65:56:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
        Validity
            Not Before: Apr 18 01:00:38 2025 GMT
            Not After : Apr 19 01:00:38 2025 GMT
        Subject: CN=d737830a912cd824f6f241c22575c78c5fde5e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:99:8a:03:09:02:05:b5:11:03:6a:c6:cd:bd:
                    8f:8e:75:8c:98:78:5d:ae:25:92:0f:44:45:52:ca:
                    5d:91:d0:09:f5:33:88:12:d8:7a:2d:90:f2:f3:e5:
                    79:05:3d:94:a9:1c:2d:09:eb:a4:95:49:fd:ef:84:
                    07:61:55:fb:b4:da:df:5c:69:1e:98:b5:d9:52:de:
                    ee:b5:f4:8d:58:14:37:96:b8:f0:4b:5e:26:63:26:
                    87:03:cc:66:f6:2f:1f:c5:b2:59:c2:d2:33:cc:93:
                    95:8b:92:01:ec:71:9f:94:ba:20:e9:cc:09:e2:aa:
                    86:31:ef:31:ee:6e:c7:ac:0c:81:51:c1:53:a3:7c:
                    85:4e:3a:8f:3d:68:7d:42:c8:26:91:fe:b7:65:39:
                    30:de:2b:6c:0b:e5:0a:5a:42:0b:01:dd:c7:68:b5:
                    d3:f1:a9:ee:73:78:0c:90:73:29:f6:44:49:7e:b4:
                    5b:ca:7e:b6:ee:9e:0d:59:61:55:e3:87:58:5d:49:
                    09:74:e2:a3:85:24:f2:6f:ff:ae:78:9f:3e:7c:04:
                    b2:21:ad:99:d5:24:35:39:37:7d:72:ad:68:2b:7b:
                    c2:8a:eb:e3:d0:8d:dc:92:07:86:48:98:c8:0b:e8:
                    ec:d2:07:1e:67:96:02:81:df:a6:28:ef:be:96:fb:
                    d5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:37:83:0A:91:2C:D8:24:F6:F2:41:C2:25:75:C7:8C:5F:DE:5E:90
            X509v3 Authority Key Identifier:
                keyid:BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:3a:98:c0:41:1a:c8:1b:0d:43:5d:ae:60:90:2d:cb:9b:fc:
         d4:45:bd:b7:75:e7:39:4e:5f:91:8e:d7:c2:90:c8:4e:85:0c:
         e1:48:23:8e:13:dd:dd:52:3d:69:9a:2e:04:f5:96:3d:82:b9:
         40:4c:38:c8:30:96:6c:c2:e5:7e:4e:c5:08:90:13:23:12:51:
         1f:a1:b6:84:fa:9a:f3:f8:24:3f:aa:76:b2:8f:a2:7e:5e:e3:
         c3:76:8f:24:e8:05:ae:0c:dd:d7:cc:2b:3b:2b:d6:7e:53:0a:
         fd:f2:ee:9a:0c:9c:d7:f8:62:c0:26:9a:a2:d3:00:1b:f8:5d:
         0b:f5:e2:2f:8e:4f:0a:ee:10:42:85:7f:a3:45:4d:4b:51:ac:
         dc:fc:e2:07:8e:86:b2:76:8f:ae:ec:2a:ea:3e:ba:16:27:85:
         c3:c5:71:82:24:52:6d:02:02:cd:96:df:9c:65:dd:ea:43:17:
         2b:9a:d0:85:75:4a:88:ce:80:ea:24:8c:8f:68:c0:82:f8:94:
         58:d9:7e:3b:62:04:dd:14:c8:53:1e:09:eb:e8:46:ab:f9:42:
         5f:a2:47:45:de:cf:20:80:bf:56:e2:0d:08:77:eb:68:5e:50:
         95:e5:35:58:c4:f5:ad:02:7f:f2:b5:9e:13:80:4d:46:8b:a8:
         c6:f0:ac:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:04:38 2025 by rpki-client