Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
File:                     Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft (raw, json)
Hash identifier:          UtEzshdNOWNZffr8aht6VC3IhgASZVeGFmkxiJxQ7mg=
Subject key identifier:   C3:78:6A:62:3E:32:84:4A:30:AB:CA:F5:9C:26:BC:BF:CE:DC:77:13
Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
Certificate issuer:       /CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Certificate serial:       0196379B750ED2C95F2D429A1DE21D284D75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
Manifest number:          146D
Signing time:             Tue 15 Apr 2025 04:00:56 +0000
Manifest this update:     Tue 15 Apr 2025 04:00:56 +0000
Manifest next update:     Wed 16 Apr 2025 04:00:56 +0000
Files and hashes:         1: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl (hash: OmZxpYmlgv1x5R83uVdXckKurci4fiIbQGfm/Q27rCk=)
                          2: aTQzWebpqg_T1Vz72K8wYxcCH9E.roa (hash: sU4u/yCI9RN4etvN429ld52OXctixi8Cp3brB5244bc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 04:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:37:9b:75:0e:d2:c9:5f:2d:42:9a:1d:e2:1d:28:4d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85
        Validity
            Not Before: Apr 15 04:00:56 2025 GMT
            Not After : Apr 16 04:00:56 2025 GMT
        Subject: CN=c3786a623e32844a30abcaf59c26bcbfcedc7713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:ae:05:ed:51:b6:ff:be:39:8f:0d:10:92:
                    bd:c3:9d:c2:1f:46:b6:9f:ee:42:23:c4:1c:36:39:
                    42:4a:31:42:a1:d8:0a:8b:75:0b:d0:86:66:bf:77:
                    84:73:b0:96:82:d9:7b:5c:b6:ad:b8:51:e3:6f:1e:
                    4b:4c:e0:07:5b:78:3a:a2:ac:fc:ac:1b:d7:d1:de:
                    9e:8d:c4:32:15:09:06:5e:1a:ea:b0:ec:e5:32:1b:
                    e5:4c:75:7c:ea:88:49:f2:11:d8:e6:b6:92:e7:42:
                    b1:b3:28:d1:57:68:ce:43:66:a9:92:d6:e5:94:cd:
                    67:67:a6:9d:4a:e7:ed:3c:f9:8a:cd:ce:b4:00:82:
                    fc:11:e8:42:f9:34:58:56:c4:ab:ad:d5:64:b8:22:
                    c6:30:a8:56:78:07:b0:66:f1:54:63:99:76:2c:be:
                    9d:f4:e5:b3:1f:58:2a:4d:47:af:85:33:3d:54:5d:
                    cc:80:9d:62:6b:36:5e:37:2e:4b:bb:af:47:8b:59:
                    24:5b:85:6d:6f:5f:86:dc:2d:df:23:6d:f3:2d:0b:
                    3c:e1:2e:22:62:91:93:86:9b:f4:9c:d4:05:e4:d0:
                    1b:fc:29:d2:8f:85:18:87:af:c2:96:db:9e:37:13:
                    fb:a1:85:35:c5:d8:3b:23:2e:29:a6:51:b1:6e:cc:
                    34:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:78:6A:62:3E:32:84:4A:30:AB:CA:F5:9C:26:BC:BF:CE:DC:77:13
            X509v3 Authority Key Identifier:
                keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:0c:c3:8e:8b:47:4f:37:27:62:8f:82:3d:a3:ef:04:0d:e7:
         58:f0:67:27:55:db:80:84:11:4a:53:36:4e:b1:ba:7d:a2:3b:
         53:80:46:69:6c:ff:69:6d:19:52:09:a2:50:13:75:2f:81:66:
         5e:92:f5:ad:f2:06:c7:c3:01:29:a9:d1:10:b3:fb:e5:fe:37:
         a0:f2:d2:0f:80:bd:d4:f6:cc:15:f2:e2:9e:17:01:53:38:05:
         9e:b8:a2:df:d1:03:f5:37:5f:2a:f5:19:8f:63:12:5c:90:af:
         7e:7b:e4:b7:4e:1d:ea:b7:7e:d6:11:df:df:cc:47:56:3e:ad:
         6b:25:12:49:d7:34:26:15:2a:d1:d4:c0:86:2f:fb:b2:1c:c8:
         39:d1:65:53:18:44:b1:1d:ed:ab:49:5f:36:fe:63:a1:37:4b:
         95:f2:ea:e4:8b:52:ff:1a:ab:fe:ac:e7:36:c9:87:c5:e1:4f:
         fa:96:61:52:46:00:59:fd:59:cc:34:c7:0f:50:7a:eb:b1:d0:
         76:7e:6c:12:dd:84:50:6e:f2:7b:23:dd:c6:d4:e4:e9:c0:69:
         2d:f6:74:dc:b1:89:34:e2:d5:81:4c:01:26:61:ed:99:e5:5e:
         6a:09:f7:08:98:69:73:0e:03:f3:ec:9f:85:6b:c0:d7:d8:db:
         cf:c6:95:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:38:43 2025 by rpki-client