Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
File:                     2RTaVuGpNGSdoClkrBLro0xcuE8.mft (raw, json)
Hash identifier:          4PEIDBtiRMds0FLxxBA6N43j0eWR0gQQkEouNbF9ets=
Subject key identifier:   F1:BE:D5:4F:B3:72:59:96:68:70:77:40:C2:F8:2F:73:68:FF:73:62
Authority key identifier: D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
Certificate issuer:       /CN=d914da56e1a934649da02964ac12eba34c5cb84f
Certificate serial:       019609E7CDF77774B0CB8FC147FEF7C2555E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
Manifest number:          0232
Signing time:             Sun 06 Apr 2025 07:01:48 +0000
Manifest this update:     Sun 06 Apr 2025 07:01:48 +0000
Manifest next update:     Mon 07 Apr 2025 07:01:48 +0000
Files and hashes:         1: 2RTaVuGpNGSdoClkrBLro0xcuE8.crl (hash: IxPju5hFETkMhROw/1RhLnlAEBGep2Icb7+DH2wH0d8=)
                          2: As7V6ZE1xBs1gl2SXAEbNIUHC00.roa (hash: kQVt6PxymkEnwafOS16jS1OEQiU/aYHOchiiJ14/rGk=)
                          3: PIhsP1al3YizxN861NowDoYoHI0.roa (hash: R9+qOpDwEb0Q5efJFh94SK/9P5J9FFbPDMd4Z1g9adY=)
                          4: RVfWb6AeQUrXaw0eh9r6r19sjZE.roa (hash: v4r/LVDf839QcMU4tAbsB+argaU/EH+WPkLUSna1SOM=)
                          5: T195uzhcxLzu10eyYWudFCGivFA.roa (hash: qzUIoK7cQxzw4ahmYyu2KSE8akPb2eWd34lvfRiJKwg=)
                          6: WLuKYa43v4uLoTtBwSGJKLjUaW8.roa (hash: Fla1bcGk5oIM2PQQTeiavoL8NWNQFQ/epjWD6RXMXlw=)
                          7: nM_etl2WCoja6avtbVHcORguaVQ.roa (hash: l98e5EoFSOa4wAxGzmcUM39TH1pEYnZbSIbHv06MpWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Apr 2025 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:09:e7:cd:f7:77:74:b0:cb:8f:c1:47:fe:f7:c2:55:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d914da56e1a934649da02964ac12eba34c5cb84f
        Validity
            Not Before: Apr  6 07:01:48 2025 GMT
            Not After : Apr  7 07:01:48 2025 GMT
        Subject: CN=f1bed54fb372599668707740c2f82f7368ff7362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:e3:a6:96:73:3b:e1:ae:8a:f8:6e:d4:f4:
                    bc:24:d3:32:cf:dc:bc:79:01:92:98:4e:9f:ad:16:
                    ad:0e:51:d1:5d:db:6c:1c:61:77:25:c6:5d:c2:f2:
                    13:ac:27:0e:c6:30:5b:84:a7:d5:1a:78:4a:5c:ac:
                    af:64:33:9e:ec:dd:9b:c0:b6:ed:cf:3f:d6:76:ed:
                    52:be:99:87:a2:74:8a:28:c2:5f:4d:35:ff:11:b6:
                    16:e7:8e:bd:7d:b6:13:fe:96:96:3c:c1:2e:d3:91:
                    27:8e:bb:22:a6:da:c1:ca:17:a3:b9:d3:6b:cb:90:
                    5c:5f:a0:40:49:66:6c:30:d8:44:6e:47:7b:b2:61:
                    4c:a0:26:28:2d:7e:f9:cf:a8:79:f1:58:03:fd:54:
                    6d:2f:0d:6e:b5:f0:b1:e8:4f:95:c5:f9:9b:ac:ec:
                    0d:ba:46:05:2d:17:e8:74:ed:b8:78:f1:d3:57:d4:
                    e2:44:d8:fe:18:60:5a:73:03:25:78:6d:7f:01:82:
                    b8:e7:01:97:c9:d4:a5:e3:6c:6d:88:5d:0e:94:f9:
                    9e:ea:7c:6c:1c:c0:3c:c0:09:e3:7e:85:b0:c5:26:
                    8a:a2:ad:1b:ef:05:83:3c:b6:ff:f7:cc:2b:02:20:
                    dc:ce:89:01:6b:4f:ba:4d:b9:2f:fc:3a:e4:6f:67:
                    cb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BE:D5:4F:B3:72:59:96:68:70:77:40:C2:F8:2F:73:68:FF:73:62
            X509v3 Authority Key Identifier:
                keyid:D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:39:f7:5f:b0:a6:1d:e0:97:2f:0a:7e:ba:73:7d:25:2e:33:
         49:fb:8e:f4:22:fc:df:e2:7d:7a:5c:08:2d:8d:5a:c8:1a:d9:
         a7:20:4a:49:ff:4b:f2:7c:a3:ce:36:9f:df:6f:22:c6:49:7a:
         01:75:09:6f:04:9f:75:69:b3:85:da:3e:23:86:b0:31:db:e6:
         3a:31:4b:76:e2:7f:73:2a:fd:73:77:7f:be:d1:ce:b4:0b:d1:
         79:78:0d:6d:c4:f4:a9:56:5f:26:97:91:72:b3:27:fb:07:2b:
         2b:e6:6c:e8:43:61:11:35:99:68:34:48:5e:f1:0d:84:1a:72:
         7b:c9:56:fa:f4:9e:8b:5c:6c:15:da:b6:08:c8:a8:26:b6:32:
         fe:9f:77:be:fa:18:ad:50:52:1c:17:c2:92:c7:60:6f:67:05:
         cd:d1:ca:eb:58:5c:7c:76:68:90:ea:91:69:ec:97:af:d0:3c:
         0b:3e:e7:00:62:e6:29:9c:59:38:42:4e:e3:e2:98:11:e2:3d:
         82:7a:ad:95:f6:f3:93:a3:2c:cb:f5:9f:04:35:3d:81:dd:14:
         20:da:4d:50:6c:38:90:6a:e1:8d:42:bb:78:fb:1d:0d:3f:12:
         82:46:e7:9b:37:a7:ed:5b:1f:ff:90:96:b2:91:84:4e:f0:f7:
         f1:62:93:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:21 2025 by rpki-client