Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
File:                     zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft (raw, json)
Hash identifier:          sJ64bF81eJd2dB/XC4Fwc9ekb6px9M9v4kRKunbfK6w=
Subject key identifier:   46:6A:63:A1:72:28:02:F2:82:D7:8F:F9:33:F2:25:D7:A6:49:36:3B
Authority key identifier: CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
Certificate issuer:       /CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Certificate serial:       01964030397CC1DEDC1F374864F083990CFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
Manifest number:          14F3
Signing time:             Wed 16 Apr 2025 20:00:24 +0000
Manifest this update:     Wed 16 Apr 2025 20:00:24 +0000
Manifest next update:     Thu 17 Apr 2025 20:00:24 +0000
Files and hashes:         1: cvViwCnJHbOmjnS2VIR4xe7m6w0.roa (hash: fo4ubxrjnffY7zW1GcJNKmk2YbysHvDvLAY+YQK8Gj8=)
                          2: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl (hash: sTwcjuAW0NLnND0i2eFH59mWLBZwZs2SNnHswO81+oQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:40:30:39:7c:c1:de:dc:1f:37:48:64:f0:83:99:0c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
        Validity
            Not Before: Apr 16 20:00:24 2025 GMT
            Not After : Apr 17 20:00:24 2025 GMT
        Subject: CN=466a63a1722802f282d78ff933f225d7a649363b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f8:bc:2d:4c:64:30:42:d2:fb:ac:22:1c:02:
                    6a:f5:a3:ae:5a:d3:eb:e2:a1:97:65:e5:0e:87:ef:
                    2b:84:b8:e4:27:5e:94:6b:c0:97:92:69:05:e0:72:
                    ce:d2:51:c9:d5:25:c6:f6:85:6f:a4:20:77:9b:7f:
                    5e:c6:ab:f6:7c:c8:44:bf:08:9f:8a:ae:96:0f:10:
                    b4:42:6b:e5:6d:ee:0a:58:ed:96:d7:05:52:c0:fd:
                    8e:6b:c4:f7:79:7e:b7:16:18:6a:3c:fd:a1:4c:89:
                    f6:43:a0:0d:10:d7:da:56:c4:84:ef:65:6f:c9:5e:
                    a7:54:25:c3:95:50:ba:f5:0a:7b:d0:b8:89:05:4d:
                    be:ac:d2:32:50:b3:4d:95:55:90:39:ad:4a:ad:6d:
                    7e:ad:0b:83:0a:aa:f6:5f:ea:3d:58:ad:b2:b3:22:
                    7d:82:8d:48:a3:71:39:fb:94:ef:3f:69:03:a8:fd:
                    e3:bf:c0:da:38:56:bb:4c:96:16:5b:f7:41:9f:d9:
                    ec:ed:92:71:db:05:ac:32:d3:92:36:e1:30:f3:82:
                    33:aa:d8:75:02:65:7d:23:79:97:eb:cb:7c:10:cf:
                    e8:a5:43:3f:ff:e7:ac:a3:b4:32:a9:55:ab:81:5b:
                    75:b5:62:90:7e:e7:76:ba:3e:a9:3a:f9:27:7b:35:
                    6d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6A:63:A1:72:28:02:F2:82:D7:8F:F9:33:F2:25:D7:A6:49:36:3B
            X509v3 Authority Key Identifier:
                keyid:CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:86:d1:72:b7:63:8d:1e:07:1d:56:cc:a0:6c:aa:11:b1:22:
         70:e6:9c:1a:f6:45:d7:9c:c0:68:2c:c0:62:19:4a:2a:ca:36:
         53:01:cc:3f:7b:e1:d0:f0:e5:93:ac:a5:38:89:c6:d9:da:fe:
         ff:0f:7e:42:9e:af:b8:43:e6:9f:8b:10:28:6c:ad:3f:d5:73:
         9e:a3:fc:a9:e5:62:e0:a6:4d:bc:af:39:52:1f:96:2b:b4:00:
         81:70:3c:16:7a:8a:77:f0:19:ca:e7:bc:7e:e3:9e:9f:05:c9:
         8c:1a:13:5b:ca:81:16:46:9f:5f:43:7a:0e:a4:e0:18:30:7f:
         8f:89:c4:47:19:1c:ad:bb:94:2e:9e:e9:95:8d:97:71:7b:53:
         a4:07:99:80:4d:bb:e8:9a:e1:77:91:de:eb:ba:f8:8a:a5:24:
         5f:2b:52:f9:1a:86:e1:fd:a1:a4:ac:ef:b1:42:f8:c9:cf:a0:
         b7:16:1d:7c:9e:cf:9c:5f:d5:f4:e1:8c:42:06:30:16:4d:8b:
         0c:c2:ce:90:a3:62:d3:0e:e4:49:90:ba:59:d3:24:ce:c1:74:
         6a:01:be:1f:1c:c2:b9:8a:a4:9e:b8:bc:9f:54:a8:c5:59:f7:
         bd:cd:de:de:82:eb:ba:6e:f5:23:bd:70:23:7d:74:cc:e5:0f:
         91:cf:dc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:12:46 2025 by rpki-client