Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
File:                     01auYl2VBt9KPld7JKhvzjxzqPg.mft (raw, json)
Hash identifier:          JCCtULooD8t0uCN7h8j5CROy207I78ZG8BmpGVCoNOY=
Subject key identifier:   36:02:0B:F0:D5:08:18:1C:2A:D7:0D:9B:4F:FB:1D:17:84:FB:8A:6B
Authority key identifier: D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8
Certificate issuer:       /CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
Certificate serial:       019656B7ED1106498C2547DE9FEB521D8594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
Manifest number:          14FD
Signing time:             Mon 21 Apr 2025 05:00:16 +0000
Manifest this update:     Mon 21 Apr 2025 05:00:16 +0000
Manifest next update:     Tue 22 Apr 2025 05:00:16 +0000
Files and hashes:         1: 01auYl2VBt9KPld7JKhvzjxzqPg.crl (hash: R9Bsfvgc3mb1kSmkAICqbxfwjHodfQgs4h494CEwXCA=)
                          2: 3wb1_tKdAp9U3t54r_yuAt_t74c.roa (hash: TRy2GucvGX452Ui0rXwDPLdQsvvya9qliAwd0VMiMQg=)
                          3: FRyMmxASxmy-8j0poAKeBfWYQOw.roa (hash: rggDbDyghfOZf84v31JsaN//o0OD54TdWq5+Du2lhgw=)
                          4: UP92FGd897Ta77gAjDusBRyzKw4.roa (hash: bi2tqHIDLMNNDJZuMzCDB/j/tTne6ixxxWYNy/lNRuw=)
                          5: _4mHAp6kpGlHe9veqUWZlR3bnno.roa (hash: AE1aWk5k7KrYjZa6mqR0Z0k8/+EX2mo7iBxCrqvE0fg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:56:b7:ed:11:06:49:8c:25:47:de:9f:eb:52:1d:85:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
        Validity
            Not Before: Apr 21 05:00:16 2025 GMT
            Not After : Apr 22 05:00:16 2025 GMT
        Subject: CN=36020bf0d508181c2ad70d9b4ffb1d1784fb8a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:33:14:0c:f3:f6:fe:15:10:d6:ee:91:27:0c:
                    d8:51:b0:7c:d3:f2:ac:9c:bb:3f:6e:65:4b:94:dc:
                    1b:a5:62:f1:1c:4e:78:48:2d:65:3b:46:d3:19:07:
                    ff:6f:40:9a:83:02:89:cb:d6:8a:48:4c:67:8c:2a:
                    03:b5:82:4b:4c:5f:fa:77:62:6f:cc:3d:de:12:4e:
                    44:41:8a:9b:be:26:1c:65:4e:0a:5a:98:b5:09:98:
                    ea:c9:67:e4:22:a3:a8:96:23:8b:9b:ce:b0:e3:0a:
                    df:b2:64:c6:81:b9:8c:b7:eb:df:05:82:84:56:6f:
                    d3:40:66:64:97:2b:47:e0:9b:30:85:47:b6:36:9d:
                    fd:6e:98:b6:f9:d5:b1:8f:25:ea:bc:cf:a6:51:a4:
                    7c:72:d8:d0:16:19:96:51:4e:d4:46:45:ac:b7:0f:
                    d2:87:f4:98:8e:54:2f:50:cb:48:d5:1a:7a:66:2f:
                    8f:ed:70:f7:f0:de:9f:24:63:5c:15:a1:7e:71:97:
                    f2:a5:f3:42:7f:94:8d:c0:82:c4:30:a2:c2:6c:b4:
                    02:b1:23:8c:5e:70:12:9e:b3:d2:de:b7:b9:58:84:
                    90:ac:83:f2:1c:34:4a:d8:4a:ba:80:8f:30:3a:62:
                    ad:fa:fd:04:4b:a3:ef:c1:0c:3b:a6:52:5b:cf:8a:
                    2a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:02:0B:F0:D5:08:18:1C:2A:D7:0D:9B:4F:FB:1D:17:84:FB:8A:6B
            X509v3 Authority Key Identifier:
                keyid:D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:09:63:b3:31:04:31:c1:92:c7:80:93:b8:83:07:36:e8:0b:
         e9:fe:84:3e:91:ed:ed:9d:fb:a3:bb:31:97:32:59:a7:06:43:
         2a:77:58:6e:41:08:92:aa:2f:3e:63:20:fb:08:d5:9f:20:00:
         a0:fd:09:21:05:b2:ec:f3:6c:71:7d:c2:3d:c8:11:d0:90:d1:
         ec:9d:8e:0b:d3:f2:32:64:b8:8c:b7:fa:5b:55:11:77:e1:7f:
         a3:40:dc:58:d7:95:85:09:1e:e4:ba:e5:66:1e:73:af:aa:39:
         96:7c:62:1a:fd:07:16:93:34:c8:7f:ad:5b:4e:ad:64:b0:18:
         2b:30:01:8f:ff:f0:2f:4d:ea:28:27:9a:93:fc:df:62:66:ca:
         09:ef:8c:d3:a7:6e:54:c8:26:a9:84:65:3f:15:43:cd:f0:9b:
         17:67:b9:c1:14:11:55:22:38:1d:09:09:a3:a5:4f:da:12:e6:
         0e:ac:0f:f1:8e:48:68:77:a2:fc:4a:a1:57:98:ae:1f:c2:5d:
         55:6e:65:ae:42:7f:06:2b:94:f4:69:0b:e3:11:14:d6:d6:71:
         de:94:41:0f:44:0d:7c:44:5c:02:cd:fc:a0:ee:5c:46:be:94:
         49:57:ab:d7:a4:58:e5:cc:ca:dc:0a:0d:47:6e:8a:08:ef:d6:
         ce:18:56:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:12:56 2025 by rpki-client