Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
File:                     Zpauprq3nEj13e5KRr9Ktk2GMWA.mft (raw, json)
Hash identifier:          dUFziUeb6lynwOF074mBRbV5CT3Kg+/8tuYBCiXsRvQ=
Subject key identifier:   9A:B7:46:64:4C:14:B9:F5:D7:67:60:16:67:1E:93:E9:FD:91:D2:5C
Authority key identifier: 66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
Certificate issuer:       /CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Certificate serial:       019610C4CD74E660E83B9AB622637C242AB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
Manifest number:          14E7
Signing time:             Mon 07 Apr 2025 15:00:55 +0000
Manifest this update:     Mon 07 Apr 2025 15:00:55 +0000
Manifest next update:     Tue 08 Apr 2025 15:00:55 +0000
Files and hashes:         1: 7xOVAQAhGxaXhRVB4CbcZXKNaLc.roa (hash: k+U35adZwDUqbZfONZN9YxBvYnb8OmgnqwbSFhlvMsw=)
                          2: Ss4p2Wi9YLUTVxVEOHNi-gD-YLo.roa (hash: IbN6B6NWFefTjZbMVpJkmbwj8ZHivUrVhvuHXNdd+oQ=)
                          3: Zpauprq3nEj13e5KRr9Ktk2GMWA.crl (hash: HAjfb6LMSzC7fMCNve14AAbwqeSsx86lLyYKgUCtsmU=)
                          4: jFXSmkjEC26c8mxhOetY3rp2Ccc.roa (hash: olcLB40Oa+I2BCFt/Z0AGNONx90qq/xMtLVV5Y1vQVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:10:c4:cd:74:e6:60:e8:3b:9a:b6:22:63:7c:24:2a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
        Validity
            Not Before: Apr  7 15:00:55 2025 GMT
            Not After : Apr  8 15:00:55 2025 GMT
        Subject: CN=9ab746644c14b9f5d7676016671e93e9fd91d25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:88:9a:15:1f:8c:db:16:e8:88:b7:19:c1:cd:
                    1d:22:6f:73:70:cd:4f:cc:fd:2c:62:cb:94:37:d7:
                    34:d1:32:52:87:de:f8:9a:ca:36:aa:30:4e:14:6c:
                    dd:77:c5:2c:c4:20:9b:54:2c:57:81:0a:ff:16:f6:
                    77:2d:d0:be:08:96:3d:c8:bf:f0:a2:1a:04:7c:fb:
                    48:a6:a8:54:62:3d:85:9d:58:97:01:f1:e8:ce:f9:
                    96:d8:aa:ff:af:d8:dd:77:54:78:98:9a:b8:25:3c:
                    72:9f:e5:df:6b:85:93:5a:0f:b9:15:11:28:9a:8a:
                    6d:79:85:e7:9e:7a:45:6b:0d:ec:9c:82:28:7b:6e:
                    82:df:a6:e7:f1:69:6c:01:e6:5c:99:d3:5e:a4:b9:
                    26:a5:42:13:c9:83:fb:df:0a:92:00:f5:e0:1a:9e:
                    5b:db:c5:a3:22:26:cd:2a:52:8b:ae:3c:7a:12:88:
                    c4:14:97:5e:2b:00:69:05:69:8a:0b:71:c7:fc:68:
                    77:91:76:6d:cd:24:e4:c8:40:56:3c:b6:47:8c:89:
                    63:b9:25:46:23:f2:c4:69:30:c5:18:8e:db:e1:85:
                    d9:60:94:a6:b3:36:c1:cb:79:56:f7:41:30:0c:fd:
                    f7:7d:76:11:df:f8:b9:2c:65:13:a3:f1:2a:d6:26:
                    18:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B7:46:64:4C:14:B9:F5:D7:67:60:16:67:1E:93:E9:FD:91:D2:5C
            X509v3 Authority Key Identifier:
                keyid:66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:57:a7:80:06:34:a3:aa:64:84:b1:1d:49:39:d3:84:e3:63:
         eb:92:5e:b1:02:c7:70:2e:bf:74:56:c1:28:e2:f8:75:40:ab:
         aa:9f:c8:3d:03:42:e6:73:2d:fd:e1:b1:a3:ad:84:50:7e:ac:
         6f:1c:1c:15:fa:76:65:1c:15:9d:22:a0:4d:25:6f:46:1c:57:
         73:82:14:e6:70:77:4a:19:aa:d2:45:87:e4:66:8a:0f:c1:c8:
         66:59:80:a2:e4:05:a3:bb:f3:29:44:1a:6e:de:c4:96:54:3f:
         82:62:91:8c:9c:1d:7c:b0:f0:46:61:fb:17:4b:3e:fa:52:8e:
         1c:cf:db:70:8d:af:d5:f5:28:fb:3e:a6:31:90:74:dc:9a:4e:
         3e:f3:24:44:5c:ed:70:d1:8e:61:4b:64:77:ad:56:97:46:a7:
         ba:68:c3:a2:fb:fc:e2:4c:85:f0:2c:fb:7e:ef:a2:93:73:25:
         d9:e4:8e:92:82:9b:59:4f:88:a4:e2:a4:ef:4c:e5:93:ec:b4:
         62:75:e8:e4:f1:30:e3:20:61:eb:73:53:46:2e:5a:98:d8:4e:
         fb:c3:7c:de:03:ec:26:e7:40:71:f5:6a:a0:23:77:8b:8a:49:
         30:a1:81:30:db:4e:79:89:5b:dd:11:c3:10:52:be:3d:0e:17:
         dc:5a:5e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:52:55 2025 by rpki-client