Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
File:                     EUPdhfoB6-wB7jMaExeeijPZAi8.mft (raw, json)
Hash identifier:          jQVzpqc33ruzfUExdxvk3Lkr8yP/Mu+FS/uTU72ac2s=
Subject key identifier:   73:01:FF:A8:BA:7E:C5:40:A8:FF:39:E8:B0:D2:2B:F7:4E:72:7E:40
Authority key identifier: 11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
Certificate issuer:       /CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Certificate serial:       01964A466588A801EA52156AA4FB5D2CAAFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
Manifest number:          14FB
Signing time:             Fri 18 Apr 2025 19:00:49 +0000
Manifest this update:     Fri 18 Apr 2025 19:00:49 +0000
Manifest next update:     Sat 19 Apr 2025 19:00:49 +0000
Files and hashes:         1: EUPdhfoB6-wB7jMaExeeijPZAi8.crl (hash: NZyAtD22D4OrwVanwr43TRlyK5c/dQ1TPOlFFcEkwCo=)
                          2: FpBWsvUKm0ZMBVbrVN6s-7nFNLU.roa (hash: hDs4UWnkGUOqC+RUIZ30o6zwlJPHN9Bd1LEfbEQFkI4=)
                          3: K2jJIhwtmQT1UdH5RcnFIJCydiM.roa (hash: 0E4f8Qcis4DaV7XLk+fios4T2cuQqx6rf8piBgJ+DN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:46:65:88:a8:01:ea:52:15:6a:a4:fb:5d:2c:aa:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
        Validity
            Not Before: Apr 18 19:00:49 2025 GMT
            Not After : Apr 19 19:00:49 2025 GMT
        Subject: CN=7301ffa8ba7ec540a8ff39e8b0d22bf74e727e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:80:58:35:4e:a4:79:d6:2b:d6:8a:58:77:8a:
                    ac:c8:10:df:dc:d9:76:df:a6:00:31:a3:58:4f:c7:
                    0b:1e:fd:f1:61:50:52:73:47:02:1e:b9:e0:00:fa:
                    b3:9e:86:57:76:a3:e7:fb:54:44:2a:e6:6e:b0:e8:
                    35:05:21:4f:c8:18:f7:42:c9:05:e6:a3:43:ff:eb:
                    5b:5e:31:d3:53:e1:c3:41:34:2c:3b:b3:76:87:b6:
                    85:c8:d2:3e:ca:0e:3f:39:02:4e:a7:1a:45:3a:a1:
                    17:bf:22:3e:66:00:c0:d8:d4:66:32:9b:ab:e9:ed:
                    6c:73:02:ca:b3:40:8a:2c:87:15:63:49:ff:d4:dc:
                    31:1b:0f:b0:e3:bc:06:70:5a:81:c3:2b:e5:86:65:
                    8b:b2:88:9f:20:db:09:9a:87:2b:6e:d9:91:f9:5c:
                    c1:f7:4c:36:f2:dd:62:af:4d:7b:3d:57:24:a8:5d:
                    11:12:f7:65:74:e3:63:a8:c9:bd:c0:4e:f9:5e:e3:
                    d7:73:38:18:88:c7:8a:5c:db:e6:68:45:c1:a4:c9:
                    35:42:b7:0f:9b:6a:71:20:d8:f5:fc:3c:78:31:cb:
                    28:2c:50:49:f7:b6:8e:ae:39:60:7b:53:de:3f:78:
                    b8:4a:ac:a1:37:1d:8f:28:a6:67:08:c2:2d:82:cd:
                    1d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:01:FF:A8:BA:7E:C5:40:A8:FF:39:E8:B0:D2:2B:F7:4E:72:7E:40
            X509v3 Authority Key Identifier:
                keyid:11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c2:b4:9f:0b:d5:f3:a0:ee:59:f1:0f:78:71:24:12:8e:02:
         27:65:47:fc:c6:68:ce:23:19:4c:6f:fc:23:7a:26:c6:4f:9e:
         79:ab:46:ff:b4:ef:55:a8:86:b4:7b:16:bd:8d:f2:2f:34:47:
         c8:64:be:91:84:4c:8d:03:72:fb:18:95:8b:db:c5:1e:87:e5:
         0f:ab:bb:ee:75:07:62:54:d4:c1:fe:18:12:dd:44:c9:74:a9:
         50:e6:63:41:fc:7a:d9:bc:c8:16:4a:98:e9:1f:00:5a:d1:67:
         d5:2e:22:0a:ef:de:c1:06:a5:3d:2e:a4:fa:17:5b:3b:e9:eb:
         52:2a:bb:68:16:71:ca:83:ab:1d:0a:fe:96:77:db:97:87:e3:
         7c:92:71:63:2e:13:50:84:cb:68:38:3c:d5:62:2d:e6:82:bf:
         76:99:05:d9:e5:83:0c:b2:49:73:4f:6e:29:0f:50:23:f6:a8:
         e4:fe:ca:10:69:1f:39:30:2b:cb:50:51:5f:bc:85:18:85:e4:
         7f:4c:10:82:0a:99:96:8c:41:a9:2f:4e:24:64:85:d6:92:62:
         1a:29:79:5b:47:9a:ed:32:6b:55:f2:a6:02:cd:c7:88:16:13:
         29:c2:49:66:6b:53:6f:33:6b:93:6c:72:3b:7d:25:53:7f:21:
         26:7f:27:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:16:44 2025 by rpki-client