Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
File:                     M69dxinNSTdZfz_NhYylyA7ZfFA.mft (raw, json)
Hash identifier:          Mnt5LOnBIxZG16SO4Eo9oa7Nb2jzbFJe178ef6d5Jag=
Subject key identifier:   3E:5D:68:02:F4:92:FF:88:6C:D4:07:11:0B:64:41:63:51:2A:7D:C6
Authority key identifier: 33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
Certificate issuer:       /CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Certificate serial:       0196451FEA18A0C1959148DF514200E3291A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
Manifest number:          14F8
Signing time:             Thu 17 Apr 2025 19:00:41 +0000
Manifest this update:     Thu 17 Apr 2025 19:00:41 +0000
Manifest next update:     Fri 18 Apr 2025 19:00:41 +0000
Files and hashes:         1: M69dxinNSTdZfz_NhYylyA7ZfFA.crl (hash: J8GPTeu2IOaQyir+24ANPM7ic1TG0G+a26rnNQucBr4=)
                          2: MFfi1uWMm7mX9pdkn5QiwF2Y_88.roa (hash: wkDFcXBuPxZO4E7KTiUs2DofbiNc9cVh0u6ybcZwLbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:1f:ea:18:a0:c1:95:91:48:df:51:42:00:e3:29:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
        Validity
            Not Before: Apr 17 19:00:41 2025 GMT
            Not After : Apr 18 19:00:41 2025 GMT
        Subject: CN=3e5d6802f492ff886cd407110b644163512a7dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2a:3a:73:e7:f3:9f:e3:d8:09:e6:1c:c8:a4:
                    af:df:7b:2e:9f:dd:67:8f:1a:85:2f:58:a2:d5:a5:
                    d5:7d:48:5c:6f:a2:82:89:4e:7b:cc:c1:88:03:3a:
                    21:0c:5d:a2:b4:56:5e:81:cb:9c:fe:34:f5:b2:5d:
                    05:ec:64:69:c5:6a:77:75:16:bf:fa:42:6d:0a:0e:
                    20:94:01:69:15:0a:f9:e7:6b:ec:2a:6e:f8:61:a9:
                    e8:1a:15:69:2c:0d:ce:fb:ef:0e:7d:f1:00:da:de:
                    8d:5b:c2:3e:b8:91:70:e2:7b:57:b4:29:b6:98:13:
                    08:8b:4f:8a:17:90:65:6f:5f:be:98:69:17:e4:91:
                    72:8a:6c:ba:b0:d1:ac:52:33:98:1d:9c:9a:71:8c:
                    0a:28:71:c5:3e:c5:35:97:3e:16:ba:a2:33:ba:a2:
                    f7:53:a0:9f:77:f1:28:f2:f2:a5:ed:65:06:1e:43:
                    9b:4a:5d:bd:2b:c3:e0:15:f4:e7:23:7c:2f:14:d4:
                    39:22:0a:65:52:77:be:0d:fe:9b:ad:03:0a:1b:ad:
                    ac:da:43:e3:79:c7:d1:ad:9d:af:58:23:e1:6d:13:
                    5b:f3:57:7f:a4:b5:b4:cd:73:7e:d7:0d:28:c2:7d:
                    d1:ad:de:fb:c8:04:90:20:06:18:14:dd:0e:95:ac:
                    98:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5D:68:02:F4:92:FF:88:6C:D4:07:11:0B:64:41:63:51:2A:7D:C6
            X509v3 Authority Key Identifier:
                keyid:33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c7:12:6c:1f:04:6c:51:f0:28:84:8f:0a:9f:c4:7a:97:52:
         ab:89:cb:88:2c:82:e9:e5:a0:fa:de:b0:5e:ec:36:a7:4e:dc:
         c6:1e:39:8b:4d:d0:ad:91:95:fa:eb:1b:26:d8:38:ae:8f:04:
         0a:08:ab:4b:a8:db:05:bf:fb:90:2f:6a:75:8b:30:36:e6:7b:
         41:08:f0:ec:39:b0:0d:b8:07:ac:cf:01:a7:54:db:54:c6:ce:
         82:f7:4c:e5:4b:c1:29:dd:6e:18:30:02:d1:aa:38:d7:34:57:
         98:a6:b6:f8:61:8f:89:44:49:d2:b5:1a:ba:ce:91:99:48:a9:
         6d:dd:f9:85:08:1d:43:35:28:14:8c:dc:ac:29:a9:46:85:f1:
         aa:58:e5:1b:40:54:88:20:53:cc:31:89:d8:04:90:31:0c:78:
         f6:d8:af:f2:75:97:3d:1c:b7:1d:7f:4c:0f:e5:1d:38:d5:42:
         05:4b:46:77:68:c7:5b:06:52:26:46:c3:08:bc:ff:d8:27:ce:
         69:41:5d:51:73:61:20:b2:cf:75:57:db:66:a5:7f:c8:b4:fb:
         f9:3a:cf:99:00:13:30:40:42:52:c2:96:5d:fc:9b:be:80:d8:
         1f:f9:fd:35:85:3c:b9:7f:05:df:26:a2:98:d9:34:06:3c:28:
         55:b7:5e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:39 2025 by rpki-client