Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
File:                     y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft (raw, json)
Hash identifier:          rf+rkHXjVUfmmwZ43qnXQQOR2Jayq5mOQvqlAh6yYgM=
Subject key identifier:   EC:30:82:F5:3D:E9:81:DC:DE:8E:DC:94:FD:BE:A5:5C:A3:6B:63:0C
Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
Certificate issuer:       /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Certificate serial:       01958C293C79F69011433ED8A1F8EE1D5519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
Manifest number:          1494
Signing time:             Wed 12 Mar 2025 21:01:07 +0000
Manifest this update:     Wed 12 Mar 2025 21:01:07 +0000
Manifest next update:     Thu 13 Mar 2025 21:01:07 +0000
Files and hashes:         1: 7T8vel-RvUDAb6LdSmoGnY1MBEg.roa (hash: Bv42HU9ZNI49CjZAPUApOp/bLDu91m+dP9rH1Q/6aaU=)
                          2: y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl (hash: dvawLBNuQ9eEuqkbpBtsmDanR5CK5927TdWeu66HT0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:29:3c:79:f6:90:11:43:3e:d8:a1:f8:ee:1d:55:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
        Validity
            Not Before: Mar 12 21:01:07 2025 GMT
            Not After : Mar 13 21:01:07 2025 GMT
        Subject: CN=ec3082f53de981dcde8edc94fdbea55ca36b630c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:97:12:aa:cb:58:ef:ce:47:40:cb:7f:f9:ed:
                    27:61:45:a2:11:b2:89:a4:5f:12:74:16:3a:28:e0:
                    f3:2f:46:4c:35:56:eb:fd:4c:1c:10:7e:69:cd:ba:
                    5f:35:8c:67:a0:0d:8f:95:23:c6:d8:9e:87:7f:08:
                    ff:f2:65:ed:5f:a9:23:d1:7b:33:d0:0d:1f:f1:76:
                    26:50:e1:91:95:80:7e:8c:ad:ed:74:fa:8f:96:96:
                    fc:d8:e5:93:76:81:f5:8b:b2:25:c3:61:6a:aa:28:
                    8b:c3:d8:12:4e:ba:41:3a:f9:3d:eb:2d:d0:6b:57:
                    65:94:da:27:ca:e6:9b:57:f5:67:5f:1c:c5:39:96:
                    a2:14:e5:73:d4:e5:41:c5:71:c9:98:cb:f0:10:c7:
                    28:29:5d:e4:ae:72:7a:9f:67:cf:a5:a5:e3:a8:81:
                    c4:2c:85:fd:50:bf:40:3f:31:1d:bf:ee:07:96:7a:
                    bb:a3:6a:4f:22:b2:97:17:91:4f:a8:72:58:81:d6:
                    d4:3c:c3:ef:d3:b4:f7:98:ac:e4:b9:8c:72:3b:c3:
                    77:f1:7c:0a:74:9d:78:e0:1b:99:19:c7:2d:ad:7c:
                    73:05:ce:86:0e:e8:49:6c:53:c8:3a:d9:a2:a0:e0:
                    c2:99:03:b0:5e:31:03:4b:40:aa:70:97:51:9c:d2:
                    d2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:30:82:F5:3D:E9:81:DC:DE:8E:DC:94:FD:BE:A5:5C:A3:6B:63:0C
            X509v3 Authority Key Identifier:
                keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:7a:33:09:02:b8:33:9a:ec:98:5e:9a:65:07:76:04:7e:d3:
         9a:b3:fe:c2:fd:fa:bd:a8:da:f0:09:69:50:0d:46:ed:e4:89:
         e7:65:a0:3e:54:57:91:fb:86:a8:26:9f:53:c6:7d:31:40:a6:
         7e:ff:b1:a3:05:cb:13:14:3c:35:69:60:7c:53:fc:57:39:2f:
         a9:2b:88:7b:45:da:59:0c:4e:02:df:fc:22:32:dd:8e:a7:3e:
         65:ca:5d:d0:14:51:51:a7:9e:cb:89:fd:95:23:26:82:e1:e1:
         84:21:4d:95:ca:b6:18:0d:bf:b7:48:10:1e:37:4f:0c:ce:9f:
         3e:85:05:71:90:2c:65:94:20:f2:f6:28:fb:fe:50:55:78:a7:
         ff:db:8a:5c:5b:38:a6:9b:35:37:61:a4:ad:d5:68:70:d6:50:
         74:41:24:9a:02:7e:22:d9:ac:46:12:de:b3:05:09:31:61:30:
         88:40:af:ea:b4:86:fc:3d:90:99:c9:35:e7:b1:e3:96:ec:16:
         52:65:95:74:f2:09:be:6a:3a:4f:e3:44:9a:51:27:66:6e:1b:
         4f:da:99:af:16:a9:e1:48:c5:24:79:1b:d4:e1:34:42:17:ab:
         2a:6b:82:2f:27:2c:e5:0b:38:1e:ed:fd:3f:48:e6:40:03:4a:
         82:d6:cd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:49 2025 by rpki-client