Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
File:                     Ruvdrmp6zug6MioOdDpnWdhTZfI.mft (raw, json)
Hash identifier:          Bn85DWtyt/FqfpFI5UGH2UCb/D7dca+2ro/EernSRD4=
Subject key identifier:   F1:76:32:5C:2A:8E:83:24:6C:49:B7:43:87:1D:38:40:DD:42:55:DE
Authority key identifier: 46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2
Certificate issuer:       /CN=46ebddae6a7acee83a322a0e743a6759d85365f2
Certificate serial:       01964EC7A4B163A8BA1BE50F763528C5F0E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
Manifest number:          14FA
Signing time:             Sat 19 Apr 2025 16:00:28 +0000
Manifest this update:     Sat 19 Apr 2025 16:00:28 +0000
Manifest next update:     Sun 20 Apr 2025 16:00:28 +0000
Files and hashes:         1: BKkYw6wCv0BCzIN9mNvcFYakNOY.roa (hash: JOy8URSCrbw8xxAKeoSqWbsMyce29owmtAkGhYDeHjY=)
                          2: H1WmesnGsPGxvhrpIvl23X68COY.roa (hash: NWrgkD59WkzlbvqU60CxucBVP2HdE5fZ9W7KVT7TpRE=)
                          3: Ruvdrmp6zug6MioOdDpnWdhTZfI.crl (hash: WiMxB293q4sSZpePXHbC1hH8a/+ZolZAEsGray6Zbr0=)
                          4: igy17iTeqaYCdBBLyoPaHClVJqQ.roa (hash: B+Liv7dvp/EsH5cWaQvjUo2qiny7+O+NyRrhBkq35hU=)
                          5: wcBe8u24JXjeTWcCpL97nHKl1AU.roa (hash: OcQcSR3oTfsUHozUBTzFplqG9Qb0tgWAtrlG+anwobY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:c7:a4:b1:63:a8:ba:1b:e5:0f:76:35:28:c5:f0:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ebddae6a7acee83a322a0e743a6759d85365f2
        Validity
            Not Before: Apr 19 16:00:28 2025 GMT
            Not After : Apr 20 16:00:28 2025 GMT
        Subject: CN=f176325c2a8e83246c49b743871d3840dd4255de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:9e:da:cb:27:89:96:ff:ab:58:20:e7:4b:46:
                    1e:d9:9f:2b:e3:31:21:26:a6:48:03:f2:b6:b8:2c:
                    69:bb:56:29:c5:b2:b6:26:14:44:0b:20:35:ab:d0:
                    14:16:48:77:d5:4f:a4:06:62:c8:70:8e:49:d8:5c:
                    a7:26:5c:b8:06:70:b8:1b:d7:e4:02:29:15:82:79:
                    70:f3:f3:c3:1a:ac:06:9e:1c:5e:6f:d9:0b:c1:9e:
                    85:fa:57:ba:32:eb:e7:1c:62:31:0a:ae:d4:15:8c:
                    bf:b9:75:6d:1a:64:16:13:08:32:c9:bb:5e:46:8f:
                    ee:8e:28:e4:c8:25:8f:e3:43:f9:7f:5f:14:8d:5d:
                    6d:75:ef:7d:2e:eb:1f:b7:ca:c5:72:fd:59:4f:d5:
                    d4:d1:71:cf:84:13:fc:77:47:e9:34:84:41:3b:bd:
                    ed:6a:81:8b:f7:c2:9b:89:b5:00:7d:1c:1c:42:4e:
                    6a:65:b6:ee:cb:c5:b4:c2:67:a7:4b:70:0a:b0:28:
                    1c:8b:1e:4a:c2:c3:c4:37:70:52:76:69:1c:dd:b6:
                    1e:99:27:dd:22:b1:10:72:5a:8e:30:94:41:81:4d:
                    03:b0:ac:a1:0e:02:92:97:f8:fa:fd:4e:dc:06:2a:
                    a7:0b:14:5e:4b:fb:60:0b:eb:07:c3:17:56:13:e4:
                    34:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:76:32:5C:2A:8E:83:24:6C:49:B7:43:87:1D:38:40:DD:42:55:DE
            X509v3 Authority Key Identifier:
                keyid:46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:38:3c:55:0e:bb:3f:e8:4b:9e:b2:26:10:98:4f:c8:00:42:
         bb:33:6e:1a:df:ab:1d:f7:95:e6:91:03:ce:e4:67:3b:cf:88:
         64:28:63:db:c8:b2:c9:e9:b5:20:d4:88:39:43:88:0b:e3:99:
         a0:71:d4:a1:e1:ba:93:8b:a7:ed:13:1c:af:e8:ae:46:88:47:
         6b:da:ea:26:0b:63:ca:ca:97:f0:1f:dd:bc:22:be:7c:fe:20:
         74:7b:d3:91:43:fe:81:f6:05:82:5d:3f:2d:f4:7f:d5:41:fd:
         9a:e0:79:b1:5f:50:29:5f:6e:60:09:fe:c0:6d:e6:57:ea:c9:
         ca:c1:81:8a:bd:cb:a8:05:28:51:e7:6c:b6:22:09:50:77:e2:
         70:dd:9b:80:81:ff:b8:1b:77:1f:20:d2:19:e7:67:48:c8:89:
         91:bf:79:05:0f:22:65:40:94:b9:e8:39:2b:d2:42:94:af:bf:
         f5:d0:60:c3:5c:3d:e5:f6:92:c6:66:1e:ee:c8:b9:21:a5:78:
         4c:a4:5d:c7:c2:6a:a5:8d:01:8e:b5:75:f2:5e:47:23:ca:46:
         49:a1:ef:c1:0b:42:55:1b:19:1b:8d:dd:26:c2:e7:04:ac:ba:
         92:5d:de:06:81:52:c0:18:f8:04:fb:3b:54:cb:a6:60:50:24:
         d5:17:02:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:45 2025 by rpki-client