Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
File:                     _SYdRTGeg3UYdDbaRL9bmtsESn8.mft (raw, json)
Hash identifier:          H0NSzwnH9/UHoeTvx16ifCpgZXMw36qqLqWW3/d+qMw=
Subject key identifier:   63:C1:68:16:1E:CF:41:76:E9:0D:68:C8:E0:E7:56:E2:AB:FF:00:2F
Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
Certificate issuer:       /CN=fd261d45319e8375187436da44bf5b9adb044a7f
Certificate serial:       01962B60B8CB22078B827E476E56B79C6CBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
Manifest number:          14ED
Signing time:             Sat 12 Apr 2025 19:01:20 +0000
Manifest this update:     Sat 12 Apr 2025 19:01:20 +0000
Manifest next update:     Sun 13 Apr 2025 19:01:20 +0000
Files and hashes:         1: ElC-6BWKIscUitjfAAuE6V-GosE.roa (hash: puexHHhEWAY8GemHhcMwArliXKfDZpEmPaNZcjyIMY4=)
                          2: GBGBlAFSzLuNFgNx2x_0D_5DQmg.roa (hash: NZPhbRaB5eM/voPBrZEMV3C9aUgwFS3iIgWGfN4cNI0=)
                          3: IUfsA9WUIh_drsK7CEvgRpo35z0.roa (hash: +jKjtuQptzEAVzSdULkJ5A8HWf8sGmcVbiqzXEqShbg=)
                          4: _SYdRTGeg3UYdDbaRL9bmtsESn8.crl (hash: CoeVxyeC6wJF5isWJVs5QacaHSmB1XB8He1q5G9qB58=)
                          5: _cs3H8q9ZlFgGKRLwiQ4Xtf8xNU.roa (hash: zP2/mCjB82eimNPlv5UC3nRyIxCuHe80Zw3eVdffH6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2b:60:b8:cb:22:07:8b:82:7e:47:6e:56:b7:9c:6c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f
        Validity
            Not Before: Apr 12 19:01:20 2025 GMT
            Not After : Apr 13 19:01:20 2025 GMT
        Subject: CN=63c168161ecf4176e90d68c8e0e756e2abff002f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c7:c3:f8:29:79:40:16:05:b6:5b:b3:cf:4a:
                    54:09:ad:4b:5b:5e:37:65:b8:70:81:67:eb:2e:d3:
                    93:03:06:64:91:14:05:91:e7:e1:06:88:29:b3:8b:
                    a0:cb:33:0d:9a:a7:cc:ce:54:d4:e9:09:a3:ec:71:
                    40:1d:77:4f:b6:d5:16:08:8f:b6:71:ab:e0:e1:64:
                    be:75:53:7c:a7:ac:5a:27:f3:1a:13:d8:b1:1e:64:
                    71:b4:02:6c:ab:a3:97:de:f4:be:f2:f3:54:57:7a:
                    cd:d6:e5:3b:7b:88:e4:b2:a8:82:bd:eb:f0:0d:23:
                    a4:f5:ef:df:02:12:64:f1:dc:67:c3:ee:76:36:34:
                    ed:70:3d:95:26:6d:8f:a2:ce:d6:a0:11:52:12:75:
                    d8:f1:50:61:a8:8c:70:13:81:7e:e2:c7:df:37:d1:
                    e7:01:62:f8:f5:d1:f1:10:58:7f:cf:9b:b1:e9:66:
                    e5:fc:fd:8e:95:da:55:2b:23:72:6d:a6:f9:c1:43:
                    7d:b8:86:88:0f:a3:45:6b:b9:94:fd:83:b5:4d:e7:
                    88:76:2c:f0:c2:8c:09:d5:a7:e8:15:72:82:1b:d7:
                    ca:0e:e0:7a:73:6c:b5:35:56:67:73:b2:20:cb:e9:
                    82:09:f1:52:f5:34:63:68:b7:d8:93:2e:06:d9:34:
                    d5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C1:68:16:1E:CF:41:76:E9:0D:68:C8:E0:E7:56:E2:AB:FF:00:2F
            X509v3 Authority Key Identifier:
                keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:05:44:b2:e3:96:08:2e:41:67:f1:ee:3b:ce:82:78:85:79:
         c4:0c:ec:1e:3a:41:4e:a3:fe:6b:c8:65:ba:17:c1:8c:c9:a1:
         55:b0:9b:04:4d:09:00:47:20:91:ac:f0:84:75:28:9c:cd:bc:
         85:ae:6f:18:7d:31:fe:5c:b9:af:cb:f9:19:eb:b7:61:bc:d7:
         c4:d5:fe:7a:86:8c:15:dd:59:93:d4:20:17:fe:17:23:af:49:
         ab:c2:58:da:13:f8:8c:0c:bc:59:b8:10:d6:4d:d9:17:de:e2:
         70:12:97:bd:53:5c:8d:d4:c9:f6:19:99:6c:f7:f2:3b:38:3a:
         47:22:4a:68:34:8c:77:24:f9:bb:d3:27:24:b5:2d:05:67:d7:
         e1:92:dc:70:22:b2:d4:d7:7f:20:7e:d5:ee:87:e0:5e:b7:1f:
         c4:2f:36:da:13:97:f5:51:9e:a7:d2:4e:fd:0a:62:9e:e6:b5:
         83:e9:9f:d4:a4:80:54:d0:81:96:5d:98:45:aa:61:6e:37:b9:
         ed:bb:e6:81:65:59:63:78:85:22:cd:f8:95:5e:f6:31:82:95:
         e2:53:d5:ee:57:2b:56:fa:c1:75:45:cd:57:c0:e5:27:a4:12:
         70:e5:67:a2:1d:4b:0d:61:4f:9b:a0:92:a7:b6:4f:f4:0f:d0:
         11:a2:ed:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:57:21 2025 by rpki-client