Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
File:                     gU7b0ZY0y7kaDS2v11nUyafne3o.mft (raw, json)
Hash identifier:          znbxQ70n0hAg3fZIkqp86bceAp9WoA3LxKNA2p6XOjM=
Subject key identifier:   17:96:DA:B0:49:94:DA:E9:BD:E7:4B:A1:CD:16:77:FE:6A:23:B6:90
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Certificate issuer:       /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial:       01963D2F41CFCF0E04F91E790BA395A5567D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
Manifest number:          14F4
Signing time:             Wed 16 Apr 2025 06:00:29 +0000
Manifest this update:     Wed 16 Apr 2025 06:00:29 +0000
Manifest next update:     Thu 17 Apr 2025 06:00:29 +0000
Files and hashes:         1: _ZGs7yyYUfcWFHaeoN_irFYY-Fs.roa (hash: k/ZQQ+Kv/qHUrbi6eDGukQ6+rynVgaxf2EU7N8rlEaQ=)
                          2: gU7b0ZY0y7kaDS2v11nUyafne3o.crl (hash: k0kdIsSbqTxJN90Q6ODDgppcXtYtyZm1y980CssQC9A=)
                          3: xpTRCuHlYWLPipg1pf1wuJHDIPg.roa (hash: 8yVx7sKih/ir7FZHTNGaky/UBkdstIszyQkTRTd/9nQ=)
                          4: ywM-ydmbzESoETxNsRnDQ6bbYxg.roa (hash: GmNC6UbYgSd9tbGR+GgvLCmczbY/RBGea7VtxVomphs=)
                          5: zticNdKOcKpGZ7y9nSwo2z1Ata4.roa (hash: 8+4soy6gmx5EG7p1nRpzUiPyWHyd7/QxOctDatWj2cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3d:2f:41:cf:cf:0e:04:f9:1e:79:0b:a3:95:a5:56:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
        Validity
            Not Before: Apr 16 06:00:29 2025 GMT
            Not After : Apr 17 06:00:29 2025 GMT
        Subject: CN=1796dab04994dae9bde74ba1cd1677fe6a23b690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:de:f1:48:d7:56:4f:98:ad:e5:c1:97:39:
                    f4:9a:c3:8e:bf:1a:95:b7:8d:5c:be:52:2f:f7:17:
                    eb:43:c0:a9:35:07:bb:d1:91:28:67:33:6e:e0:c3:
                    24:bb:ac:63:fa:2d:e9:b9:c5:10:0d:26:45:28:cf:
                    4e:ad:e7:59:0a:1c:60:2a:63:73:17:e8:03:3c:c9:
                    79:6a:11:a8:3f:cd:4b:13:ec:da:aa:6e:88:f6:c2:
                    eb:f2:dd:04:41:93:d4:66:a8:a2:9b:f7:be:25:fa:
                    0c:d8:e5:da:1d:7d:3c:1c:c1:56:88:aa:fb:ba:09:
                    53:54:5a:fe:81:76:d5:e5:0e:69:87:55:95:41:f7:
                    f3:09:ba:74:e1:d7:55:06:2f:33:87:39:01:85:7c:
                    b4:1d:a0:6f:9a:8c:66:12:71:aa:7b:5b:ee:aa:51:
                    2e:74:f0:bf:08:9c:93:80:5d:da:d4:e0:83:31:ec:
                    53:8d:f8:75:86:5a:25:d1:bd:3b:c2:47:15:2c:b2:
                    5b:e7:9c:22:38:c5:00:06:e7:33:ab:de:28:88:fb:
                    a7:ea:cc:d6:e5:b9:5d:94:db:a3:64:de:86:68:13:
                    54:59:d4:f5:f9:8d:10:07:f2:1f:d8:c5:bc:d1:2a:
                    34:54:eb:ef:0a:91:6b:0a:3a:f0:eb:07:ec:dd:bb:
                    f4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:96:DA:B0:49:94:DA:E9:BD:E7:4B:A1:CD:16:77:FE:6A:23:B6:90
            X509v3 Authority Key Identifier:
                keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:6e:5a:46:a8:12:52:68:f2:28:a7:f1:42:81:53:f5:86:06:
         4f:da:55:3c:fa:c4:b8:11:30:be:cc:0b:a2:5e:ef:21:60:1a:
         85:98:2f:34:35:85:1d:b2:52:c3:0d:88:12:a4:40:c1:69:a1:
         4a:f7:26:1f:12:b9:64:d5:a6:aa:ef:78:c6:ba:e5:48:79:11:
         b5:23:c1:60:f1:20:bd:5b:35:2b:e7:0e:41:e8:c2:2a:a3:26:
         82:2a:e3:b7:f3:f0:29:ba:e2:67:1f:4f:ee:81:b1:99:34:30:
         a4:da:f8:61:b3:4c:4f:03:10:dd:3d:3e:ff:97:f8:8e:cb:c7:
         89:dc:26:23:d8:6d:29:7e:0d:2c:8f:fa:5e:85:59:8b:ea:fc:
         2b:d2:78:aa:24:48:26:31:2a:02:ab:c2:d0:31:e4:2c:f9:08:
         92:e2:76:9f:5b:d2:59:00:49:2c:34:c3:70:6f:bd:a9:08:c2:
         62:84:49:38:06:73:90:28:8d:bc:ee:f9:d9:58:20:f3:5d:5a:
         cb:d9:57:4b:20:d7:cd:61:e3:a6:0e:a4:87:b7:49:22:d9:20:
         8c:ce:43:af:6d:76:5a:93:14:ed:18:36:a2:f8:4a:72:2d:bd:
         01:a3:5f:60:92:66:13:dc:ed:d8:6c:f4:56:68:14:ea:49:e0:
         06:a2:6c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:41:07 2025 by rpki-client