Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
File:                     EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json)
Hash identifier:          TmUwgA+FHvkkyFq9fD0zc0v/GOHSHU+1qnUd5od6Eus=
Subject key identifier:   F4:08:94:A9:6C:A1:D0:C0:91:72:C2:0A:F8:97:67:89:58:99:22:DD
Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
Certificate issuer:       /CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Certificate serial:       019641B0ED7F54FF251603867DE80189A2C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
Manifest number:          14F4
Signing time:             Thu 17 Apr 2025 03:00:36 +0000
Manifest this update:     Thu 17 Apr 2025 03:00:36 +0000
Manifest next update:     Fri 18 Apr 2025 03:00:36 +0000
Files and hashes:         1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: k24wCix6UI8/FYx2UQxyX9B4GvSwPPFsZ3WKq6cPZJ0=)
                          2: YKFTV_Osz3tEHBL-tBtNNKG_uGY.roa (hash: ofAuwRpYik4IXKEsnZ8uX3EkPuXFlEDgyGW2JXk71VA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 21:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:41:b0:ed:7f:54:ff:25:16:03:86:7d:e8:01:89:a2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760
        Validity
            Not Before: Apr 17 03:00:36 2025 GMT
            Not After : Apr 18 03:00:36 2025 GMT
        Subject: CN=f40894a96ca1d0c09172c20af8976789589922dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:67:fb:7f:06:0f:6a:bb:90:8b:6e:23:10:cf:
                    5f:fa:92:6f:4e:d5:7d:b4:f3:94:ec:c0:1a:4a:e6:
                    36:db:8a:d6:95:e7:90:c0:f7:f3:63:4f:5a:a1:10:
                    54:b0:3a:35:46:44:4a:52:1c:24:b7:6f:4c:f6:be:
                    e7:33:83:2d:6f:20:a5:32:37:35:88:79:ce:80:b1:
                    34:ab:44:db:68:fd:31:e9:f6:70:c2:bb:68:b6:71:
                    b0:8d:eb:e2:3e:e3:93:34:82:e1:05:ab:cd:e8:51:
                    8d:f1:41:61:63:c5:01:6d:a8:41:a4:33:24:ab:dc:
                    39:18:dd:4e:55:0a:93:da:22:77:c0:e9:fe:cc:6f:
                    a6:d3:e3:70:7c:30:b8:67:df:76:46:4e:f4:a8:6f:
                    0b:17:eb:5f:ff:f4:42:2a:e6:25:21:2f:0d:80:1c:
                    a2:b8:33:3c:30:72:fe:61:47:de:4f:6a:e8:62:b8:
                    f3:c8:94:12:89:43:65:20:d8:26:ea:76:1d:fc:26:
                    00:e3:91:2f:64:0b:6e:08:13:a9:73:c0:15:a3:f5:
                    ee:32:b6:c9:d5:e6:55:73:46:c0:1a:2e:94:ca:42:
                    6a:5f:c7:c6:8a:b8:d2:02:8b:1e:b2:13:e2:e7:8b:
                    0b:45:e7:47:62:fc:ae:f8:48:b3:86:46:0e:42:25:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:08:94:A9:6C:A1:D0:C0:91:72:C2:0A:F8:97:67:89:58:99:22:DD
            X509v3 Authority Key Identifier:
                keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:74:33:ba:c1:75:37:21:b2:34:00:c6:ff:29:1f:3e:9b:fe:
         f8:36:8c:a1:9c:0a:d6:70:e3:be:04:3f:5e:61:19:dd:db:c0:
         00:83:62:77:17:07:09:5e:ec:0c:96:88:c1:d4:5c:55:c6:8a:
         62:ae:97:18:cc:db:c9:71:db:72:59:4e:4a:c5:b8:4b:50:18:
         fb:da:74:b6:00:a9:c6:40:d5:c0:e4:3a:59:31:da:e2:91:8a:
         3d:64:c4:cd:46:c6:ff:51:87:a4:26:c5:87:9c:b7:68:45:90:
         ee:57:c6:e6:b9:6e:52:d6:83:25:6c:06:7d:fa:7a:3f:a8:2e:
         f2:e0:55:b3:9b:4f:a6:8a:bb:23:c2:38:40:82:9c:a6:f4:3d:
         d0:d6:86:28:92:8b:5a:95:f9:86:c4:f6:a2:74:ac:bf:c1:ad:
         d7:31:9d:ad:00:5c:5d:73:85:fe:4c:8b:ee:3b:e5:84:68:a8:
         be:63:e7:5c:b0:a0:09:90:c9:0f:4e:d1:44:c0:34:0b:31:83:
         f3:a9:3b:a7:54:43:b6:8d:64:fc:32:49:b4:1f:49:2e:e6:de:
         84:40:fc:51:5c:02:16:bc:52:10:c3:66:35:65:5a:ea:04:0d:
         52:b6:dd:95:f7:3c:e5:79:2e:b6:f8:c0:30:f7:3b:db:93:6c:
         31:19:bc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:43:11 2025 by rpki-client