Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
File:                     pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json)
Hash identifier:          w0IxQW/D6wigUlJSduxJBHHR3jdi6/mV0ihpnR1Yj1E=
Subject key identifier:   21:17:E5:65:01:F6:22:F5:05:C2:47:DC:F0:89:78:53:8D:BC:7E:74
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Certificate issuer:       /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial:       019649D805D8C2C266EADEAFF7A36D908C09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
Manifest number:          14FD
Signing time:             Fri 18 Apr 2025 17:00:16 +0000
Manifest this update:     Fri 18 Apr 2025 17:00:16 +0000
Manifest next update:     Sat 19 Apr 2025 17:00:16 +0000
Files and hashes:         1: 1-Rh4xR4UjkOh8VqSY4pK4d1pRds.roa (hash: x3ETC4RsRxr7b/UEU+/7lhOsihrtUte3yh6z17TAj9w=)
                          2: GISiwDWwkN55w-OPn4qwRSweA84.roa (hash: HIcUUP5vEFNT3gS3RcoPzA6F9bPL2QzZ521VNaxnhks=)
                          3: lXukILbe6VXJ7h_Wf9WW21z12mw.roa (hash: +Zzql9kBnSussoen1LHmVUwZhXfkIG96Hh/jt0AAOuY=)
                          4: llr3G6G5AM7M10tmA9xFiPTyO0Y.roa (hash: iQGQsp8WoDcGM5vwoYe4dx6kdl9hCiwMrIHoYkwEWK0=)
                          5: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: OzTz/XJcAGI8HZmzwp90bhQw+LQ4TtHMSSm6SCUSE7Y=)
                          6: rKCFva5BURgPwYBY7AhhhAP1WfI.roa (hash: yPJLL1iPDAh4jC5sDkvBCraLd8BwdjLiqxgvyLndKHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:d8:05:d8:c2:c2:66:ea:de:af:f7:a3:6d:90:8c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
        Validity
            Not Before: Apr 18 17:00:16 2025 GMT
            Not After : Apr 19 17:00:16 2025 GMT
        Subject: CN=2117e56501f622f505c247dcf08978538dbc7e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6a:b3:b5:f7:b4:9f:7c:51:41:8c:54:b1:6c:
                    5f:18:67:91:d2:42:4a:72:26:70:4b:a6:42:26:d1:
                    a1:3a:e5:b6:ef:f4:9c:55:c4:a6:60:b5:8d:74:7e:
                    0d:d2:f7:57:35:48:d9:95:a2:b7:b2:cc:29:3d:93:
                    59:85:fd:8b:3f:4c:22:d9:4a:f7:df:f0:0a:b1:08:
                    31:26:4a:d0:f3:b6:97:e3:14:2d:0a:62:03:f0:6b:
                    4e:ec:51:92:62:52:3e:84:62:49:57:55:05:fe:e6:
                    7c:60:f2:7a:96:72:61:2e:2a:18:07:4a:36:1b:a7:
                    13:6d:29:52:c2:fe:67:73:7e:aa:d5:9f:32:07:a4:
                    fc:38:65:fd:00:9f:78:84:3b:a1:e0:0d:8e:e1:38:
                    f5:58:51:6d:e3:c7:df:3c:9d:e5:84:ad:ce:6f:ad:
                    19:40:d3:ca:40:63:e5:83:3e:6d:9c:81:70:a8:69:
                    33:c9:85:76:67:72:e1:eb:68:57:6e:2f:39:93:29:
                    20:2b:76:66:d3:64:93:15:99:c9:5e:0f:02:d5:88:
                    14:ae:13:9e:8b:fd:ed:8b:0b:bf:9b:d7:54:fa:6a:
                    31:6f:5a:84:4c:53:02:ff:04:bd:a1:69:11:5f:28:
                    73:3c:bc:c1:12:56:05:9a:3e:82:f0:9c:d5:b2:2b:
                    fe:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:17:E5:65:01:F6:22:F5:05:C2:47:DC:F0:89:78:53:8D:BC:7E:74
            X509v3 Authority Key Identifier:
                keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:2a:bb:02:f2:94:0e:98:a0:f4:f7:93:81:ac:5c:a1:e2:2f:
         80:62:6a:97:7d:58:dc:e0:c3:09:ea:e6:4b:43:df:e9:d0:fb:
         c8:c6:13:67:28:35:01:f5:8c:36:65:e9:3e:5e:27:0c:7f:3e:
         c7:e0:37:76:73:3f:07:55:07:61:83:dc:17:48:01:c6:d3:bb:
         83:27:31:c3:eb:54:7a:ed:91:74:25:0b:53:80:1d:dc:62:62:
         fc:04:58:5f:f8:b0:3c:35:e9:2a:ed:2e:e3:d0:a8:28:d0:1b:
         d3:2f:7f:99:fc:5b:35:78:d2:f5:f8:5e:5a:20:b4:8a:ec:ec:
         b5:8b:2d:d2:76:45:d7:fb:cd:11:c8:09:85:31:9a:05:49:c1:
         df:e0:0b:5c:76:28:e5:91:8b:27:c4:f5:6e:2c:d7:d5:8c:34:
         ca:3a:fb:97:a7:55:52:ce:16:f0:9f:3f:9b:a7:a1:8d:63:96:
         f6:8f:c9:ec:61:dc:f8:11:ba:40:81:35:ef:f2:17:1d:ae:b8:
         6e:09:29:62:17:a0:1a:cd:14:ad:ea:40:5c:42:e8:da:10:f6:
         13:82:d8:1c:c7:35:52:68:81:de:db:fc:4a:4f:6d:33:fd:5a:
         cf:aa:74:36:5a:f6:6a:ff:26:3d:44:47:32:ea:51:bb:dd:a1:
         3d:a5:77:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:20:25 2025 by rpki-client