Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
File:                     rs1kyXg317-sBmN92VK97eDCXYU.mft (raw, json)
Hash identifier:          xr/RA23UkjFXSWVUsDJyrMvcqvPV4j75Rwt9OOwtS0A=
Subject key identifier:   10:09:98:49:C2:D3:CC:4D:FC:54:AA:29:AE:7F:74:F7:E4:C4:1C:6D
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Certificate issuer:       /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial:       01964DEC33DE6F8A057FA2E2C3D79335F9D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
Manifest number:          0E18
Signing time:             Sat 19 Apr 2025 12:00:47 +0000
Manifest this update:     Sat 19 Apr 2025 12:00:47 +0000
Manifest next update:     Sun 20 Apr 2025 12:00:47 +0000
Files and hashes:         1: 1-T8CKegBPOvx5rZQQVTHJ11NZfg.roa (hash: oTgrbLpJLd4bRqFVMFFivKpiZVrk/3YZuKNsOWKM6jM=)
                          2: 17xOhQoyIYZB59OnKrsT-dwllSw.roa (hash: KCMu12vyicYfkSRRUkeo8o3fEfjAYF/JgjW23i3oXrg=)
                          3: FsSFEoZYb3Nl-hkkgjVPUd2IvDA.roa (hash: Fqkp/m22ufWmmjenywmk6qhO70aCJ2/zGhbzol+bOEg=)
                          4: Umj2rbjqE8HIV-ruGeVeqZYwg9s.roa (hash: /89yG0WnFcE05IMFp3mM3/qP9TrscwAHv2Gfhcc6Cj0=)
                          5: rs1kyXg317-sBmN92VK97eDCXYU.crl (hash: 9yIvJCKZVbnYfdaF48/jvVyLXbfNlG+C3jBwhk8IvZU=)
                          6: sZB9qJRdylpTdvF1XtaqqpNl-OY.roa (hash: lRBjFzzRtx2AcctUxGDd+P1zYD8sp2IpXYC35kAzyFQ=)
                          7: vxhTN1By4lMiNMyOzxGwyr7QhR4.roa (hash: Ifos+E1fPLCwRcBMt2WCu8lSioPDUu6uUrn5J7VTK/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:ec:33:de:6f:8a:05:7f:a2:e2:c3:d7:93:35:f9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
        Validity
            Not Before: Apr 19 12:00:47 2025 GMT
            Not After : Apr 20 12:00:47 2025 GMT
        Subject: CN=10099849c2d3cc4dfc54aa29ae7f74f7e4c41c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cf:09:90:cf:71:27:ba:43:e7:42:19:9c:f2:
                    ed:77:06:28:8a:f2:b4:e5:e3:b2:2f:47:67:77:0c:
                    d2:a9:b2:ac:49:d6:d6:cb:c3:55:f8:5d:78:fa:ff:
                    c7:42:8c:73:9e:8c:de:e2:4b:09:eb:12:59:8e:35:
                    1a:8d:7d:da:8f:0c:4e:d6:4b:dd:bb:cc:94:a2:a6:
                    6e:20:89:0c:d9:dd:de:e4:ce:25:85:85:f5:e0:fb:
                    f8:b4:c9:b5:e6:e2:21:61:47:dd:a5:cb:2f:b9:5c:
                    b4:83:23:6e:5d:96:c3:ed:87:1a:fc:8d:8f:f1:5c:
                    63:33:fa:c4:34:81:a9:f4:27:48:35:87:84:8e:d4:
                    37:6e:3b:7d:05:3c:34:6d:08:42:5b:26:71:b1:90:
                    09:43:f0:35:2d:f6:a3:a0:76:6d:9b:00:e3:26:80:
                    f9:d4:8c:6b:6f:46:f9:45:bd:0a:59:cd:be:7d:39:
                    41:d1:6c:54:e4:9e:56:8d:ce:cd:35:24:79:4a:db:
                    98:28:ca:30:a3:72:06:ce:44:9c:cc:27:5e:9e:5f:
                    89:b7:d1:ea:20:03:f0:96:30:25:d8:8f:59:23:e2:
                    c8:ae:07:de:0a:8e:65:1a:29:67:83:17:06:e5:95:
                    9b:93:d9:cd:61:6c:16:ce:ac:99:2d:cf:ea:0d:45:
                    7b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:09:98:49:C2:D3:CC:4D:FC:54:AA:29:AE:7F:74:F7:E4:C4:1C:6D
            X509v3 Authority Key Identifier:
                keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:dd:8f:99:20:e3:ae:dd:43:bb:7f:eb:bf:5d:64:ed:f0:93:
         f5:c5:93:55:04:b8:c2:a0:72:25:2a:e6:15:22:4c:89:e9:aa:
         f1:cd:c8:4c:68:2d:1c:65:32:f2:be:c2:94:c4:21:2a:0b:d7:
         87:fb:94:c9:79:44:e6:34:81:b0:db:f7:d6:27:86:21:5f:88:
         e2:e6:00:cb:71:9f:cc:04:14:1c:52:22:35:91:ae:22:16:53:
         94:c6:54:45:cf:c9:35:7d:c6:ee:ac:53:43:c4:50:2a:ef:0f:
         48:06:c7:3d:6e:fc:f8:82:c9:57:cf:e3:99:fa:26:6a:b5:bf:
         2f:f8:a2:99:c7:16:39:b5:e2:e6:de:e9:70:32:00:78:60:21:
         5b:9b:04:b4:3a:09:3d:9f:b8:c9:a3:d4:99:2e:e3:9a:87:12:
         d0:f0:18:ce:41:dc:64:b3:e7:8f:26:6a:36:65:fa:23:59:d0:
         d4:ed:67:cd:7b:fc:18:ab:3c:a8:b8:b7:71:6d:bc:23:c2:19:
         23:9c:c3:17:d7:de:e0:47:d4:47:e2:a6:63:3a:4f:21:77:29:
         ce:08:cb:03:20:04:4f:e9:5e:6e:36:d9:95:0f:97:4b:68:23:
         70:08:76:00:88:fe:bc:24:9a:47:2a:7f:57:be:c5:a3:e7:82:
         18:a1:9d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:21:04 2025 by rpki-client