Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
File:                     StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft (raw, json)
Hash identifier:          Ck6fcnIrfnj77RVt6dof1fa5B+l1A+wOqm8ap9sWK1U=
Subject key identifier:   A4:77:62:FB:9C:5F:C0:31:2A:70:1F:43:6A:C6:53:FE:AC:D3:6D:85
Authority key identifier: 4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
Certificate issuer:       /CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
Certificate serial:       01964556841B1ED297C52169688941A1794A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
Manifest number:          14F6
Signing time:             Thu 17 Apr 2025 20:00:19 +0000
Manifest this update:     Thu 17 Apr 2025 20:00:19 +0000
Manifest next update:     Fri 18 Apr 2025 20:00:19 +0000
Files and hashes:         1: StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl (hash: 4hOefnq56UqcLhO5wubMsVtXORWh8eQBiWAUG9daHeQ=)
                          2: aRNIY9aPisPsPJEyhtJc_m061Zk.roa (hash: ah5G0cArNKCIsOUw2/tpkDwad97MIaUDok+u/s4pKjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:56:84:1b:1e:d2:97:c5:21:69:68:89:41:a1:79:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
        Validity
            Not Before: Apr 17 20:00:19 2025 GMT
            Not After : Apr 18 20:00:19 2025 GMT
        Subject: CN=a47762fb9c5fc0312a701f436ac653feacd36d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:91:bb:67:5f:ca:62:e1:86:dd:79:52:da:98:
                    dc:24:55:23:96:49:0e:08:1e:6f:cc:c3:04:fc:46:
                    64:7c:c9:73:09:41:43:f4:bb:1d:bf:79:48:af:3d:
                    ca:2f:6c:76:6c:ba:d8:ce:15:bf:88:6f:7a:ac:04:
                    6e:e8:11:97:34:6b:47:93:27:e1:20:89:8b:e5:21:
                    fa:e4:32:40:a3:6f:70:b4:16:83:04:d8:31:67:10:
                    39:87:9d:09:5c:d6:1d:7a:fb:44:fe:b2:6d:a8:09:
                    fc:bd:5c:c5:02:93:7b:23:d5:72:93:6e:54:c3:bf:
                    24:28:e5:59:eb:ea:28:b3:38:1e:29:1c:dc:70:e0:
                    d6:d5:5a:f3:0d:e1:c9:d6:61:7e:05:12:8f:4d:a8:
                    b4:ca:48:7c:d1:cf:a4:da:1f:c6:83:ff:13:21:a2:
                    a4:f4:22:e3:9c:cf:93:4e:96:c3:34:df:f5:c6:33:
                    93:fd:69:f2:d6:b3:fe:fc:2c:f6:51:5b:a1:b1:1c:
                    b9:cc:d3:29:db:f6:aa:b5:0e:c2:75:42:32:b0:35:
                    a5:f9:f6:a7:90:46:81:3e:e3:78:49:4d:bf:2d:53:
                    9b:34:80:f4:e4:e6:99:4d:c8:07:20:c5:1c:6d:ab:
                    f8:18:23:63:9f:dc:29:4b:12:47:7c:02:3d:f8:3c:
                    02:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:77:62:FB:9C:5F:C0:31:2A:70:1F:43:6A:C6:53:FE:AC:D3:6D:85
            X509v3 Authority Key Identifier:
                keyid:4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:c4:2d:6e:b5:c3:5e:83:0b:53:45:bd:f8:a0:64:5b:bd:be:
         50:62:d5:6f:83:82:5f:9f:be:67:11:7e:62:b8:d4:10:0c:42:
         03:b3:f3:cb:74:61:53:c7:f2:48:4e:da:7d:fb:06:1c:7b:58:
         2d:02:7f:fe:78:c7:e0:55:75:19:77:e6:28:48:1a:26:94:11:
         9d:4b:14:87:9a:bd:a9:cc:7f:33:42:97:6d:18:39:6b:53:80:
         33:2c:c9:ec:3a:7e:bc:e0:46:d9:d0:18:9d:01:a9:57:c7:ac:
         18:6d:a0:d6:45:b5:95:ec:18:d7:c7:f0:e2:79:65:29:af:3e:
         e4:9a:6f:2e:28:4a:ac:79:41:e4:a0:3f:46:0c:e8:1e:cd:aa:
         1c:44:18:1f:e3:a2:45:16:cd:2c:4f:98:51:15:44:76:06:bc:
         95:39:8f:f9:72:93:c8:22:0c:d6:f0:78:a7:b7:4f:59:7f:94:
         c8:a0:74:a3:55:5b:23:76:af:17:0b:3e:93:91:8d:23:86:e4:
         d3:c6:90:8a:90:bc:ff:37:19:e7:b4:42:9a:f8:e0:c6:fa:28:
         81:62:ff:4a:ec:13:19:21:ee:34:aa:fb:7e:09:6a:7e:f0:f0:
         99:cd:a4:66:c6:75:5a:68:4a:f1:66:a5:8e:b9:1c:a9:d1:fc:
         1f:60:da:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:49:36 2025 by rpki-client