Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.mft
File:                     SEAyWZVCgEO12QXY0sF8MCuLNGU.mft (raw, json)
Hash identifier:          fPrf8Kwkf5/r8woJxKBbOxtJKoOxWLmAOHUs32ktBa8=
Subject key identifier:   1A:F6:5D:21:78:CC:E7:B9:BA:D0:19:96:6E:97:FE:6A:90:BD:8E:91
Authority key identifier: 48:40:32:59:95:42:80:43:B5:D9:05:D8:D2:C1:7C:30:2B:8B:34:65
Certificate issuer:       /CN=4840325995428043b5d905d8d2c17c302b8b3465
Certificate serial:       01964B58BA7DF1964886FEBF4C7766C05E9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SEAyWZVCgEO12QXY0sF8MCuLNGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.mft
Manifest number:          14F6
Signing time:             Sat 19 Apr 2025 00:00:28 +0000
Manifest this update:     Sat 19 Apr 2025 00:00:28 +0000
Manifest next update:     Sun 20 Apr 2025 00:00:28 +0000
Files and hashes:         1: SEAyWZVCgEO12QXY0sF8MCuLNGU.crl (hash: QlKT9y/olBko7SU6gmaf9tRphKAE26TytcyqkDA8I9U=)
                          2: i7O_oqy1hOvPc2P58vmTI6wRVkU.roa (hash: ySE4UK1lU4KlZ7T7JZOZsfcplexjqn6fZrZ127xQdOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SEAyWZVCgEO12QXY0sF8MCuLNGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:58:ba:7d:f1:96:48:86:fe:bf:4c:77:66:c0:5e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4840325995428043b5d905d8d2c17c302b8b3465
        Validity
            Not Before: Apr 19 00:00:28 2025 GMT
            Not After : Apr 20 00:00:28 2025 GMT
        Subject: CN=1af65d2178cce7b9bad019966e97fe6a90bd8e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:25:24:84:c5:6d:24:2e:62:cd:3c:e7:ff:c7:
                    03:43:38:74:b5:f9:22:2e:3b:98:1d:83:b6:aa:21:
                    b9:16:9c:89:cd:19:6a:56:ee:27:d7:1c:f6:f6:aa:
                    8f:84:48:3d:7c:e2:ae:83:85:18:ce:0c:90:be:36:
                    a7:f5:f7:67:9b:75:88:0f:28:87:c5:90:d9:87:63:
                    3d:1a:29:8d:ad:2f:18:37:e0:e2:3c:48:6c:a7:1c:
                    6a:1e:dd:18:7c:64:9b:b3:3e:fc:e9:08:21:4a:d6:
                    b5:19:e8:21:ca:ec:6f:dd:5a:93:d8:33:4a:56:3b:
                    f2:4d:d6:4a:9c:c1:21:7a:1d:e7:19:e0:6b:90:d2:
                    0e:cb:1a:17:ef:93:31:d7:f5:8b:89:7e:37:9d:3e:
                    2b:a0:08:bf:05:87:60:e5:09:0f:88:25:93:ff:a2:
                    d6:72:d6:7e:fb:f5:97:57:60:6e:69:4d:6c:6b:68:
                    2f:17:22:27:a0:e2:cf:52:96:03:f6:21:b6:77:72:
                    5a:50:9d:ac:80:81:8c:13:dc:29:c7:a0:53:46:48:
                    20:de:2d:38:e2:63:da:39:21:75:3f:7d:cc:a9:77:
                    e9:32:9b:1f:d7:6a:bc:d8:2e:16:11:c4:e9:cd:05:
                    f2:6f:0b:38:e8:be:96:82:0e:30:e2:d0:36:e8:fd:
                    c2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F6:5D:21:78:CC:E7:B9:BA:D0:19:96:6E:97:FE:6A:90:BD:8E:91
            X509v3 Authority Key Identifier:
                keyid:48:40:32:59:95:42:80:43:B5:D9:05:D8:D2:C1:7C:30:2B:8B:34:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEAyWZVCgEO12QXY0sF8MCuLNGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:1f:31:f0:51:bf:3a:73:b2:5c:71:83:e4:a1:39:73:11:36:
         3b:f3:66:e0:5b:17:85:f9:74:74:ec:56:01:4c:9c:78:66:9d:
         33:fb:8a:de:e4:2f:ac:9a:11:d3:04:80:53:6f:f1:47:d4:59:
         a3:1e:77:42:a6:85:35:b0:86:17:9b:f8:db:6e:27:37:be:0d:
         5b:66:67:cd:74:d4:d1:ae:71:03:27:2e:f0:2e:59:80:59:12:
         58:dc:05:74:90:02:0f:00:b9:a9:b1:d7:d8:de:35:33:88:a8:
         7c:82:f8:58:7a:d3:17:1a:37:46:83:0b:81:bf:e7:03:e2:c2:
         52:8e:63:cb:2e:e9:ee:6f:d1:31:48:b2:dc:57:f3:bc:a4:b6:
         af:3e:52:2a:9a:e3:00:1f:76:60:df:fb:e7:d4:84:63:b3:c9:
         34:7f:02:29:a6:ed:54:9e:bd:a0:bd:7f:ea:32:d4:cb:8f:82:
         28:de:23:e6:a0:44:81:7f:a9:a0:cb:5c:c2:64:fb:36:bb:38:
         93:e3:ce:ae:4a:ee:5b:3f:b4:32:8f:36:29:d0:e9:0a:ca:64:
         72:d8:a5:2b:2d:29:d4:cd:2a:8a:b8:d1:b9:79:eb:1f:d5:35:
         51:22:07:77:c5:97:6f:a8:b8:fa:82:3c:22:59:66:31:d7:75:
         2e:bb:f9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:14:37 2025 by rpki-client