Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
File:                     eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft (raw, json)
Hash identifier:          jQlwxSFPbVC2cBelWsZQZkGUAweKqZZeY0XF+y02ahg=
Subject key identifier:   52:39:D5:18:C3:46:27:BD:E5:26:4F:9B:E2:A3:BD:E4:5C:1C:E7:01
Authority key identifier: 79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2
Certificate issuer:       /CN=796d29ee381b51f645e05415668d92a9ce7a8dd2
Certificate serial:       01964FDA5965CDB62BD613A4D3FD60021A4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
Manifest number:          14FC
Signing time:             Sat 19 Apr 2025 21:00:31 +0000
Manifest this update:     Sat 19 Apr 2025 21:00:31 +0000
Manifest next update:     Sun 20 Apr 2025 21:00:31 +0000
Files and hashes:         1: PX9v5qjZ5Kx92ejP5QMaNfGm8gQ.roa (hash: VQ2IHPc4zVW5dJle4h1B0CNnt02hgrtdyFrWdC0CiSQ=)
                          2: eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl (hash: MgyLhJGUSx9JBJcihFOwEPMTDFop/Iob/w5gnPQouE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 21:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:da:59:65:cd:b6:2b:d6:13:a4:d3:fd:60:02:1a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796d29ee381b51f645e05415668d92a9ce7a8dd2
        Validity
            Not Before: Apr 19 21:00:31 2025 GMT
            Not After : Apr 20 21:00:31 2025 GMT
        Subject: CN=5239d518c34627bde5264f9be2a3bde45c1ce701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:77:8d:1e:eb:e0:b3:a6:0c:dd:ad:2d:14:1e:
                    b9:36:23:68:8a:04:e8:1e:d8:7a:38:1e:57:95:ee:
                    d2:c5:c3:49:01:c9:22:6c:77:b8:d1:07:07:7a:30:
                    7a:2e:87:05:46:2f:f2:50:9c:65:79:2f:25:ea:62:
                    f7:dc:91:3f:68:69:11:2b:d7:88:e5:9e:ed:6f:a1:
                    30:01:db:d3:62:cc:0c:50:56:97:36:38:a3:ad:ec:
                    3e:81:ac:70:54:28:b5:12:b0:94:5d:60:91:69:99:
                    6a:67:70:37:3a:48:6d:db:69:73:f5:9c:0b:84:46:
                    0b:f4:3f:7d:76:94:a3:fb:2d:aa:b9:78:f7:16:12:
                    6f:e4:52:14:5f:1a:6c:40:c1:7f:e6:af:7d:69:9a:
                    95:77:f4:b1:ca:ad:7a:e2:d6:ea:e6:e1:db:f9:6f:
                    a3:6e:b3:cd:75:49:9a:85:93:02:40:fe:d5:00:d7:
                    da:e7:ac:8f:b9:cc:a7:f9:9c:f9:20:58:fc:38:ba:
                    78:18:f8:70:7d:ce:2b:52:18:8c:92:19:17:e1:fb:
                    02:20:11:96:c9:da:19:84:7b:0f:b5:0c:95:93:17:
                    f4:4e:42:e2:19:46:f7:7d:f5:b5:90:85:68:14:f9:
                    ce:fe:e3:ff:c6:5c:26:93:e6:73:bf:70:b2:87:88:
                    6d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:39:D5:18:C3:46:27:BD:E5:26:4F:9B:E2:A3:BD:E4:5C:1C:E7:01
            X509v3 Authority Key Identifier:
                keyid:79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:7b:08:eb:c7:72:56:9a:9b:9d:e6:ad:dd:84:d9:3f:a8:c5:
         e0:8b:f5:fd:af:35:3d:f6:27:db:88:b4:29:33:08:a3:b4:f6:
         b5:92:71:5f:88:ca:8e:de:11:83:7d:31:25:b1:99:7f:ef:02:
         47:16:3e:50:c2:55:6d:28:e7:41:ba:4a:6a:43:3e:dd:42:a6:
         61:a7:c5:43:83:1d:8e:70:cf:ee:e8:5b:99:13:e7:ba:dd:44:
         4e:f7:92:13:da:c3:1e:e0:24:f8:50:39:a1:5c:0a:47:38:d6:
         57:6b:40:d3:19:f1:f7:3a:05:74:04:86:90:f5:a2:f1:51:d9:
         1d:1e:80:36:4d:24:30:3a:7f:44:15:61:d0:ad:07:09:85:0c:
         c8:d7:39:66:35:ab:07:3b:f8:80:da:2d:9e:71:16:66:a1:ad:
         14:9f:0b:92:92:53:20:f0:01:7c:d7:c5:de:99:23:e6:09:f4:
         2b:0d:c0:1c:21:f5:4a:6a:78:eb:bf:0e:0c:b0:ef:42:32:b5:
         87:df:f6:f6:54:bd:d4:a4:82:3e:40:1a:d6:3c:73:6e:51:53:
         0b:98:a7:61:42:a0:3d:08:61:93:fd:67:a1:c0:a0:ef:7d:eb:
         d2:a3:f9:11:55:4f:9b:8d:af:8e:b3:9f:ae:a1:0a:47:a4:05:
         52:aa:94:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:39 2025 by rpki-client