Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
File:                     NyU16sFYwCZyeiXh6-Rtilyc-78.mft (raw, json)
Hash identifier:          vhgEwu2NfwSf279RYHvaKy4aArbTx6Kp/aJmp8RJTm4=
Subject key identifier:   EC:1E:73:5A:DB:C6:C3:DF:B1:B1:7C:38:F4:B4:D2:64:9C:05:D3:68
Authority key identifier: 37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF
Certificate issuer:       /CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
Certificate serial:       019645C4DADD8B9E09C83EF6B9C58ADF346A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
Manifest number:          14F7
Signing time:             Thu 17 Apr 2025 22:00:51 +0000
Manifest this update:     Thu 17 Apr 2025 22:00:51 +0000
Manifest next update:     Fri 18 Apr 2025 22:00:51 +0000
Files and hashes:         1: Ex_2ickmNwSl468A43nBNWlR1U4.roa (hash: 2F6N+mLC+ZFSEAJYbcx9IRB+VD26lz+G1r697PEXjx4=)
                          2: NyU16sFYwCZyeiXh6-Rtilyc-78.crl (hash: LgcKFlZuae/0h5X3AV+2BWkdILXh2hH3VYsjXbM89Bo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:c4:da:dd:8b:9e:09:c8:3e:f6:b9:c5:8a:df:34:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
        Validity
            Not Before: Apr 17 22:00:51 2025 GMT
            Not After : Apr 18 22:00:51 2025 GMT
        Subject: CN=ec1e735adbc6c3dfb1b17c38f4b4d2649c05d368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6a:de:86:87:c4:f0:ab:12:f5:95:3d:88:5b:
                    54:7c:bc:06:c0:1d:b4:b2:71:09:36:f2:35:f5:d4:
                    59:ef:28:ec:d4:55:50:9e:bf:02:d2:87:d5:62:51:
                    56:91:58:b8:1e:2c:79:0f:a7:37:db:79:3f:7b:25:
                    c6:db:be:bd:39:b5:26:63:ac:15:a7:29:e1:24:08:
                    d3:e0:f2:3e:dc:6c:c3:be:79:06:a3:6c:62:25:40:
                    cb:39:a9:ce:68:24:fb:87:26:dc:42:d6:cf:98:a5:
                    53:6e:5c:18:76:4f:64:92:e5:39:02:88:f6:7a:43:
                    be:57:7f:ff:b2:2d:39:52:b3:7d:a1:9a:60:89:64:
                    88:d4:ca:5a:08:7e:ef:0c:b7:cb:31:6e:4e:7d:cf:
                    d0:76:06:c2:a6:ae:f9:c8:3e:63:42:c0:4f:ec:07:
                    c0:06:be:b7:68:20:be:c5:0c:77:70:0c:03:64:3f:
                    b6:64:b2:7b:2a:03:eb:ce:ae:d0:2d:fe:f1:53:3e:
                    84:c9:f8:2a:83:8c:73:95:ce:73:01:1f:01:b9:01:
                    29:9d:20:fd:82:5f:14:84:4f:97:df:09:79:82:51:
                    fc:bf:28:06:b2:0b:fd:60:40:aa:c4:78:3d:69:b2:
                    75:6e:de:90:f5:f7:16:d5:9a:89:7c:db:63:36:57:
                    e7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1E:73:5A:DB:C6:C3:DF:B1:B1:7C:38:F4:B4:D2:64:9C:05:D3:68
            X509v3 Authority Key Identifier:
                keyid:37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:0c:80:14:e1:60:99:de:8d:5a:30:12:e3:28:67:da:2d:24:
         6d:90:21:6d:67:28:ba:64:16:af:5a:3f:00:38:6a:28:85:6b:
         08:97:90:c4:a9:97:3e:a0:c8:9a:aa:9c:69:b5:c6:2a:01:be:
         89:ef:82:13:21:d7:e7:7b:9b:13:6f:03:4a:f5:55:7d:5d:b2:
         00:3f:bf:6d:91:85:fe:01:77:70:db:72:22:96:9d:1a:09:53:
         3f:3c:55:b5:a8:08:a3:ac:bf:76:54:27:83:3c:8b:4c:82:88:
         6b:43:75:fb:08:21:90:73:67:b8:ac:12:db:57:79:f4:c7:2c:
         8a:42:6d:14:ef:45:0b:9e:f8:6b:cd:b3:95:4f:fb:db:dd:4c:
         81:26:1f:59:a4:11:73:42:2a:1c:32:df:fc:6a:b9:5f:bb:ba:
         1d:f9:f4:83:8b:44:b6:57:31:47:02:d3:7b:4a:2e:0a:55:35:
         a8:bc:04:26:dc:a8:36:e4:3e:67:7c:b4:67:00:0a:ff:ea:79:
         b3:35:75:c4:8e:4c:a9:69:00:48:8f:49:63:9f:56:3b:36:c0:
         55:00:f0:aa:7e:ed:dd:a5:65:bd:ad:02:aa:82:45:e9:c5:be:
         48:74:02:fb:49:c5:f9:f9:cc:c9:82:ac:38:b0:53:5f:5b:2a:
         d1:25:ed:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:24:22 2025 by rpki-client