Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
File:                     U170D69INDOz4zaY5NHulfPJS-w.mft (raw, json)
Hash identifier:          rLafKuOchHPF95/BZU81RmlcwgVoHT0qYLe1Smpx208=
Subject key identifier:   1B:36:28:21:55:EE:05:EB:9E:BE:6F:FC:FE:72:6E:EB:C6:88:6E:9E
Authority key identifier: 53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
Certificate issuer:       /CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Certificate serial:       01964F6CD9D8DC1213362FCC7063F9E61423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
Manifest number:          14FA
Signing time:             Sat 19 Apr 2025 19:00:55 +0000
Manifest this update:     Sat 19 Apr 2025 19:00:55 +0000
Manifest next update:     Sun 20 Apr 2025 19:00:55 +0000
Files and hashes:         1: U170D69INDOz4zaY5NHulfPJS-w.crl (hash: o4dOtrGp7nrSCKYC7NUnImbTwRlBfqv6xiHARbbagSg=)
                          2: a9R4a72Ce3HtrFyUZj2Jrpn9DLE.roa (hash: lEQCssDpqykyZtTNm3b2/t+M2Xlx2R2hbaDbanTEKE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6c:d9:d8:dc:12:13:36:2f:cc:70:63:f9:e6:14:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
        Validity
            Not Before: Apr 19 19:00:55 2025 GMT
            Not After : Apr 20 19:00:55 2025 GMT
        Subject: CN=1b36282155ee05eb9ebe6ffcfe726eebc6886e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:13:58:5f:81:c8:32:b6:58:ca:d3:1a:60:fe:
                    9b:7c:d0:a8:1f:14:35:31:43:35:13:d8:06:fb:61:
                    30:7d:50:76:fe:fd:25:ce:9c:05:ec:7e:92:fa:98:
                    66:1b:c8:0d:f6:1e:32:62:bb:c9:e4:40:9c:b7:4b:
                    4f:00:70:4b:6d:01:0b:fb:9a:59:f9:3a:84:46:90:
                    1d:f5:35:de:02:99:b5:b3:6f:b6:8f:73:75:68:a9:
                    1a:bd:84:79:5d:2e:2e:ad:49:aa:b1:b1:36:7c:22:
                    6b:77:28:2a:ac:0d:e0:ae:bf:b2:49:3d:de:bc:62:
                    ef:5c:59:cd:52:94:01:70:3c:a8:42:5f:91:bd:7b:
                    c5:d4:5d:39:df:c5:eb:9b:86:93:d8:93:d8:bd:bb:
                    3d:e3:e5:a7:a8:47:98:b4:85:73:54:9c:68:af:b9:
                    98:17:a4:da:f4:03:dd:dc:3a:78:7f:6d:b7:93:0a:
                    0d:02:84:7d:ed:09:84:21:ad:fc:4d:83:0c:d3:18:
                    b4:20:26:ef:b3:47:ab:ff:09:75:cf:2a:25:5b:88:
                    82:28:f5:c9:30:04:6b:41:56:f9:53:c8:c1:24:5a:
                    73:ae:6b:6b:e4:f1:32:a8:1e:8a:e2:91:cb:29:49:
                    16:e0:8d:af:9e:a6:d1:29:a1:fb:54:95:58:14:d3:
                    34:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:36:28:21:55:EE:05:EB:9E:BE:6F:FC:FE:72:6E:EB:C6:88:6E:9E
            X509v3 Authority Key Identifier:
                keyid:53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:9a:3e:c3:f3:03:c1:bd:fb:9e:d8:73:3f:c5:e7:21:9f:8b:
         6b:d4:f5:45:0f:27:cf:2b:48:7b:4f:e2:77:8b:88:1a:df:cd:
         fb:a5:10:a7:7e:97:7d:58:38:d8:05:94:0a:1f:dd:23:6b:da:
         9d:d3:c5:28:c7:cb:23:a5:6b:2b:ab:0e:49:60:2f:dd:5a:a4:
         87:7a:9f:98:46:43:21:e6:07:7b:c1:7b:c8:8d:67:7f:0f:ee:
         2f:05:d9:e1:f0:cf:30:bc:c4:ae:de:58:49:d8:0a:e0:88:65:
         9c:8d:92:a7:73:da:9b:2c:a5:52:46:f5:db:10:88:ae:89:04:
         d8:c7:a5:7a:65:41:c1:3e:2a:c4:82:76:c1:b9:a3:7e:9d:f5:
         4b:e1:d7:a7:e0:45:7f:70:d7:d1:c0:4a:33:b4:1e:27:1c:77:
         bc:5a:ed:82:c1:66:8e:1e:f0:65:4d:e3:2f:01:0f:1e:dd:6b:
         34:c6:ae:88:16:f6:07:fe:51:5f:18:94:bf:6d:22:5d:f8:c2:
         48:fa:6e:cd:f6:0d:f7:cf:51:8a:43:f5:43:dd:f6:cd:9b:cf:
         6d:d1:db:0e:ec:04:00:2d:1f:11:15:1c:50:ee:0a:f3:5b:ba:
         4a:c4:30:d9:e9:21:af:d5:9f:76:7b:16:b8:67:fa:ea:fb:16:
         d2:1d:7d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:25 2025 by rpki-client