Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
File:                     AyudLeU3ELMVjkLyKIkQnixA9Ds.mft (raw, json)
Hash identifier:          4d2YUK6tQBZGfRJmE5e6wHOBCiT3xwcL7NLTG+/+O8w=
Subject key identifier:   EC:CA:19:DD:58:0B:DA:D3:7B:65:BD:AF:FD:62:49:B3:F2:D9:DE:A9
Authority key identifier: 03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
Certificate issuer:       /CN=032b9d2de53710b3158e42f22889109e2c40f43b
Certificate serial:       019650B66BF20B2B3B3C1903D21F512AC755
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
Manifest number:          0304
Signing time:             Sun 20 Apr 2025 01:00:54 +0000
Manifest this update:     Sun 20 Apr 2025 01:00:54 +0000
Manifest next update:     Mon 21 Apr 2025 01:00:54 +0000
Files and hashes:         1: 6iLRNmhEkle6ivGQW1sZ5gcKS8Y.roa (hash: +zvQRhGc/V+HMxoGc8X8w2swmCXbOVN2JfxwGb1F+xI=)
                          2: AyudLeU3ELMVjkLyKIkQnixA9Ds.crl (hash: +9Yufr1o+cL6fxxsYYWJRzX+bG91JVWIjlQxKadpZc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:b6:6b:f2:0b:2b:3b:3c:19:03:d2:1f:51:2a:c7:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032b9d2de53710b3158e42f22889109e2c40f43b
        Validity
            Not Before: Apr 20 01:00:54 2025 GMT
            Not After : Apr 21 01:00:54 2025 GMT
        Subject: CN=ecca19dd580bdad37b65bdaffd6249b3f2d9dea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fb:7a:15:b8:49:4d:8e:54:99:ae:d2:96:23:
                    22:1e:26:33:c4:0f:68:34:00:67:e9:e4:39:cd:19:
                    55:55:3e:99:c4:a2:3d:ea:22:e5:66:40:f3:72:32:
                    e1:e7:7a:10:ba:5d:b8:ed:7f:a4:45:fa:9e:34:a8:
                    c7:05:37:1f:cf:b3:a4:ed:d0:48:5f:69:51:92:f3:
                    50:56:8d:48:dc:23:3a:8c:49:e8:c8:aa:43:a2:c2:
                    1c:ed:e5:a0:9d:ac:0e:6c:00:8d:a6:b0:6b:97:0a:
                    4e:f1:a4:f8:89:6a:83:9e:41:e1:ff:2b:73:fb:38:
                    d1:9a:3c:16:eb:36:56:ef:b7:d3:ef:cb:a4:c5:85:
                    4b:2e:ba:05:5a:b5:cf:7b:38:21:94:09:bf:76:ef:
                    fa:5a:69:01:c6:cd:83:4c:48:66:5a:53:77:e8:f8:
                    3d:7b:e4:ed:fe:79:03:02:07:c6:b0:30:5e:b3:08:
                    df:43:5e:a2:21:e9:79:46:cb:90:d1:65:b8:54:06:
                    8d:f8:fa:78:b9:99:31:1a:d7:d8:03:61:7e:31:97:
                    26:4f:48:d5:ea:bf:ea:30:76:43:6c:5e:c6:bf:5f:
                    b3:cb:3a:8d:c6:d1:1c:ec:ed:ca:6e:1e:67:3c:77:
                    5e:eb:2e:52:e8:dc:68:75:39:7e:40:96:00:62:4d:
                    a7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CA:19:DD:58:0B:DA:D3:7B:65:BD:AF:FD:62:49:B3:F2:D9:DE:A9
            X509v3 Authority Key Identifier:
                keyid:03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d2:2d:f7:a6:be:f3:6e:ae:69:0c:fe:8f:af:ea:e5:51:9c:
         80:7c:15:39:0f:56:cc:9d:53:cc:51:2e:75:80:26:76:19:05:
         86:a7:ec:64:f2:89:c7:6d:03:fe:b1:0d:71:dc:d6:e8:8a:7f:
         e2:11:b9:5a:76:64:49:25:c5:68:3b:91:86:62:cc:2a:52:8c:
         08:d0:07:55:27:6b:58:2b:f4:1c:af:5e:66:77:ac:ae:5d:90:
         f7:97:90:a1:fd:30:c0:9a:89:e6:1f:b5:ac:f2:69:38:40:9d:
         73:d1:47:2a:03:77:2f:a3:d7:cd:2d:8f:14:99:d0:6d:10:41:
         ad:a4:22:e0:bc:e8:3e:c4:0a:7a:44:92:11:3e:ef:f5:76:fa:
         a6:49:ca:74:e5:ab:26:bb:c6:08:be:60:55:4d:8a:7f:fb:20:
         5b:2d:49:e2:5a:7f:b5:20:a4:24:bc:42:0d:e8:88:c9:e5:9b:
         55:dd:37:f4:80:17:1c:4c:c2:21:c4:0e:3e:cb:c1:04:99:42:
         ca:e5:21:fb:98:c9:37:51:fa:d6:56:04:20:29:5a:15:6e:c6:
         0c:bc:4b:e6:fe:18:a0:80:1f:be:38:68:c4:ef:9a:ec:88:98:
         d8:50:b7:90:24:10:8d:57:90:d7:fd:52:08:33:30:39:97:11:
         ed:30:c4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:24:57 2025 by rpki-client