Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
File:                     13mWjmbtvqNy75W6or9okThWekA.mft (raw, json)
Hash identifier:          y+5MhjtLC+PP2DHBuPI6FUagLRI09qDKR0j+HVHNsos=
Subject key identifier:   83:07:78:DD:53:9B:24:BD:70:C3:6A:1D:6B:9F:00:28:11:56:D6:73
Authority key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
Certificate issuer:       /CN=d779968e66edbea372ef95baa2bf689138567a40
Certificate serial:       0196515AF71A051D4874653820F7FCB25CE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
Manifest number:          14FE
Signing time:             Sun 20 Apr 2025 04:00:38 +0000
Manifest this update:     Sun 20 Apr 2025 04:00:38 +0000
Manifest next update:     Mon 21 Apr 2025 04:00:38 +0000
Files and hashes:         1: 13mWjmbtvqNy75W6or9okThWekA.crl (hash: WtW9iEKuqgh6OViweVeFRGhLdYFSMOXBx7P1NTegWrE=)
                          2: I4emCne_29V28uUFcYz5hu_Rezg.roa (hash: 96USF7uc276n2Rs/poozBmGnwe39xgiKf2HQGb9xcQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 04:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:5a:f7:1a:05:1d:48:74:65:38:20:f7:fc:b2:5c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d779968e66edbea372ef95baa2bf689138567a40
        Validity
            Not Before: Apr 20 04:00:38 2025 GMT
            Not After : Apr 21 04:00:38 2025 GMT
        Subject: CN=830778dd539b24bd70c36a1d6b9f00281156d673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0c:e1:ff:25:fb:06:7b:cb:a7:6c:12:43:14:
                    ca:be:22:7e:b2:fc:66:0c:cf:1e:2f:c5:1f:33:60:
                    d2:eb:43:c7:82:d7:f5:36:b4:02:0e:df:39:76:7a:
                    f6:43:b6:72:72:2f:a2:83:54:65:37:19:82:3d:ba:
                    f3:81:dd:a2:ee:b8:0a:63:3a:a5:f7:4b:b6:38:b2:
                    32:e2:fc:4f:25:ab:60:f7:0c:7f:c5:25:90:95:96:
                    54:4c:e5:26:2e:bb:fd:bf:53:32:c0:15:ad:60:83:
                    a4:59:b8:45:b1:c2:fb:8b:ce:0d:57:9b:ff:4b:54:
                    4b:03:6a:41:d6:8d:4d:65:ee:b0:83:c5:b6:93:11:
                    f5:db:ce:d3:29:92:d7:80:92:fe:d5:8d:16:4f:fb:
                    c7:01:6d:c5:0e:2d:19:5a:ba:13:75:e5:d3:ed:e0:
                    80:6f:d3:fd:11:2a:ee:cc:08:6f:d1:67:7b:c3:ed:
                    48:cd:17:15:4a:8b:b3:ed:b1:0b:95:c9:35:dc:65:
                    01:1b:b0:66:19:fe:a4:f1:1f:17:b2:6f:f5:0d:d8:
                    b9:ac:c1:a3:00:88:9c:bc:1c:8f:67:b3:ee:42:fe:
                    ee:4e:a5:44:68:e0:bf:1a:76:0d:99:12:df:04:2b:
                    39:f6:b5:44:92:32:8a:5b:6d:83:21:1b:d5:3c:a2:
                    90:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:07:78:DD:53:9B:24:BD:70:C3:6A:1D:6B:9F:00:28:11:56:D6:73
            X509v3 Authority Key Identifier:
                keyid:D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:4e:c4:4d:97:fb:67:48:af:1c:a1:e3:fa:98:ff:f3:f3:d3:
         0f:79:4c:4e:0c:e3:59:49:2b:55:15:ac:42:bb:cb:03:2f:c3:
         8f:15:b3:5b:4a:21:79:30:42:c9:81:5b:f3:e2:0b:d6:e8:a7:
         32:71:d9:42:88:33:81:ab:96:53:0d:c1:26:ba:30:81:60:b8:
         ef:97:e8:9b:bf:a7:2c:a1:b5:b1:a2:da:64:d2:9d:fe:49:d3:
         81:03:98:34:18:ae:69:43:0c:71:8a:ba:fd:e2:44:a9:b8:d4:
         7d:a8:c7:bd:e9:1c:01:f1:c6:b0:cc:9d:00:8c:87:65:83:25:
         6d:9c:4c:21:97:cf:27:18:d4:0d:ab:f4:f2:8e:8f:69:b3:49:
         71:21:c0:f4:64:c4:ec:0a:42:66:54:a2:fb:6a:f2:ca:21:15:
         e2:7c:91:f7:0f:10:88:50:3c:9a:8f:7c:de:91:e8:7b:ff:7f:
         e0:f4:c2:0a:19:f6:ec:35:88:46:7a:74:76:ca:2f:eb:30:7a:
         e6:6d:a1:a3:20:ce:c7:8d:fb:ed:c9:b1:84:c8:e0:0b:59:97:
         ea:1d:fe:ff:57:67:3f:d9:58:3b:9f:9e:6e:a7:d9:4b:da:8c:
         d4:e6:01:6f:8e:11:81:cf:78:f3:6c:e0:8c:df:ef:2e:83:59:
         66:d2:06:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:36 2025 by rpki-client