Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
File:                     uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft (raw, json)
Hash identifier:          PF2gyRW0OtnRX3juiZqy1ksWoap8M21ka1qHXZ+OExU=
Subject key identifier:   29:56:34:7E:46:98:64:D8:81:AA:4B:C0:58:52:E7:CC:5F:37:84:42
Authority key identifier: B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
Certificate issuer:       /CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Certificate serial:       019645C56E16906876132904A2B0640D6545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
Manifest number:          14F5
Signing time:             Thu 17 Apr 2025 22:01:28 +0000
Manifest this update:     Thu 17 Apr 2025 22:01:28 +0000
Manifest next update:     Fri 18 Apr 2025 22:01:28 +0000
Files and hashes:         1: PA8CjloTPg-68N7OnvoYD-1oLhk.roa (hash: 4/Ym4G39HmXB13TW6+krF+Wwi7w8FIhxrF2UkWzgLLU=)
                          2: c26zPerzgVBHPu_vijyV_Oovrl4.roa (hash: Gk43PDLGRAfU27KozR+OSnOsvS5KnMxHT/HJnzP3YQ0=)
                          3: i_g5q7-hPStlEv1O5n0OZOzfR60.roa (hash: m3x1cS4XhcesKKNznb1VTlqwdh2lVHJU/PvB8L7dB+M=)
                          4: uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl (hash: D4ORO9/3lZPK2UMmu1ZjCZcYtLW1amYigfhStnCnK9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:c5:6e:16:90:68:76:13:29:04:a2:b0:64:0d:65:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
        Validity
            Not Before: Apr 17 22:01:28 2025 GMT
            Not After : Apr 18 22:01:28 2025 GMT
        Subject: CN=2956347e469864d881aa4bc05852e7cc5f378442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5a:37:f4:26:01:a9:50:cb:75:2a:8d:0d:bb:
                    d9:47:25:a0:1e:ef:01:53:c2:57:b6:4b:48:13:78:
                    2a:a9:bf:39:a0:89:91:5e:d2:9c:a6:39:79:f0:12:
                    25:f0:70:2d:ba:79:88:68:c2:e0:a8:48:7d:af:8e:
                    42:dd:e1:56:9c:aa:fd:3c:d6:61:11:70:bf:01:0d:
                    7b:e4:71:ce:b0:d2:ff:6c:07:d8:4b:2a:42:3a:0a:
                    0b:2c:2b:2d:56:4a:62:29:07:f7:77:eb:0b:c7:5a:
                    88:3f:6d:dd:0e:33:b3:4c:6d:72:58:49:71:3f:23:
                    08:41:6a:e4:d7:a2:ce:4a:66:f9:7a:e3:da:6d:4d:
                    b7:26:9d:36:8a:8d:7c:de:4d:c6:ea:1f:0b:b0:49:
                    02:55:e2:7b:24:55:43:8c:b1:51:74:85:19:32:5f:
                    98:03:bb:dd:1c:50:9d:2a:cd:ab:c5:f0:1f:17:ef:
                    48:d6:22:2a:38:a7:1a:23:be:7c:ec:cb:56:1e:fa:
                    cf:bd:94:f5:8c:bb:4e:06:9e:d4:e1:05:f8:e1:fb:
                    5e:06:44:f2:05:e7:f1:ca:eb:89:ec:9f:fa:97:ef:
                    4a:c5:69:e1:43:de:6c:d1:e3:ca:ea:39:90:5b:e0:
                    fa:2f:4d:e1:19:63:23:01:5d:c5:99:45:4f:42:be:
                    20:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:56:34:7E:46:98:64:D8:81:AA:4B:C0:58:52:E7:CC:5F:37:84:42
            X509v3 Authority Key Identifier:
                keyid:B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:30:03:31:26:27:6d:ff:49:d6:65:b0:ba:60:f5:cf:4a:20:
         39:02:c9:de:ce:e6:21:32:03:ff:2f:67:21:f3:fd:ba:d3:ae:
         fb:9d:cb:da:34:70:28:1e:cf:ed:e7:85:46:66:d0:13:84:1e:
         83:f2:dd:c4:46:8b:66:8e:cf:fc:c4:5e:6a:7c:63:94:0e:fe:
         60:2f:73:6f:b0:87:08:eb:25:ea:bf:4e:ec:c5:8d:f3:76:37:
         51:d1:67:0c:ae:73:a2:03:92:c7:fc:2b:40:ea:14:a5:fb:02:
         57:67:b8:1c:4e:06:36:4f:1d:bb:74:97:27:7e:4a:6c:94:a1:
         3b:d1:8c:62:13:27:b4:4a:27:3e:c8:07:ae:9b:93:e5:37:4b:
         83:4a:46:7d:b3:09:b0:e7:a4:ca:07:fa:80:a5:64:dd:22:96:
         98:b2:5d:0e:36:8b:73:e1:00:70:52:61:9f:54:9f:92:63:37:
         6c:45:6b:9f:b6:ce:cb:cd:43:45:46:af:86:89:52:47:9f:ea:
         ce:e8:25:fe:f8:ee:a1:48:a2:39:d1:a8:60:af:7d:9d:f0:0e:
         be:52:8a:63:66:fe:97:1a:48:d6:40:f1:83:6b:97:bc:e0:2a:
         fe:d0:47:bf:36:3a:d8:e4:a2:68:0a:10:d5:6c:79:48:a3:f7:
         46:c3:fa:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:18 2025 by rpki-client