Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
File:                     dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft (raw, json)
Hash identifier:          kQQX4GkAHNlNdBai+IYakkBvMfhs3Ffr83RJCwM8GPc=
Subject key identifier:   2B:BC:00:7E:2A:41:16:66:59:2C:6E:3C:2E:97:6C:FF:6C:84:8E:42
Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
Certificate issuer:       /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Certificate serial:       0196458D627D2C95969ABFE539A80E06359F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
Manifest number:          14CE
Signing time:             Thu 17 Apr 2025 21:00:15 +0000
Manifest this update:     Thu 17 Apr 2025 21:00:15 +0000
Manifest next update:     Fri 18 Apr 2025 21:00:15 +0000
Files and hashes:         1: NMSBGdXZ3nNbNM6HmAD11nbjUUc.roa (hash: 8ncSaAlvsGwgwEz4IVnirUboMfpzaj3h+0Dd6V+Vjp0=)
                          2: dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl (hash: xS6xrUCgM3xlm2tO7xVaJgDF5qALx5nnPJ67gMHyZkM=)
                          3: jTx6aqvdEE_gQg73ReX0FkwgmQE.roa (hash: dAhHIig8KT1KxztIrLQE0kBlocl6eJfFH0R4JNRSc1E=)
                          4: sQhT4EcSgUdSOJf-IlcAVbhhanQ.roa (hash: yOHMgQvvnUGeXtEo1mVldnI757iV9L6oiBbCrHJFV5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 18:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:8d:62:7d:2c:95:96:9a:bf:e5:39:a8:0e:06:35:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
        Validity
            Not Before: Apr 17 21:00:15 2025 GMT
            Not After : Apr 18 21:00:15 2025 GMT
        Subject: CN=2bbc007e2a411666592c6e3c2e976cff6c848e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6d:7f:eb:c4:61:87:e2:7d:5a:99:ea:85:d4:
                    31:1b:42:b6:6e:d9:11:3f:69:b8:e3:bc:fd:e0:dd:
                    eb:94:ff:a2:5e:fe:d1:00:4e:e9:b8:76:ad:ae:53:
                    f2:61:7a:9d:cc:0e:d0:7d:5e:06:ea:ef:8a:fa:44:
                    51:66:e1:5c:a1:cd:b2:e6:2e:75:22:9c:1f:b6:e7:
                    ee:30:87:fe:7b:83:74:a1:a2:1c:1c:56:bc:5b:b6:
                    74:40:78:24:84:3a:26:9e:1d:5d:c6:40:4a:f1:4d:
                    04:73:d3:fd:3a:d7:8d:e6:c6:ad:d3:1a:f6:91:92:
                    6a:cf:e1:68:1a:35:90:36:64:b3:6e:7f:3e:50:5b:
                    f2:5a:c8:e6:75:8e:ea:6f:b9:b1:fa:cc:fe:31:aa:
                    3b:fc:be:7a:9c:ea:05:5b:57:a6:4f:24:04:8b:be:
                    bb:4e:1b:ca:ae:3f:ab:0b:54:c0:f5:6c:f6:34:f4:
                    8d:cf:d9:42:0a:ce:cd:b1:f9:fe:2c:eb:58:d6:1e:
                    4b:c4:54:a4:3f:87:4b:bc:e9:93:c6:25:19:62:d2:
                    8d:9b:a4:39:40:3b:8d:b8:01:ee:2a:4b:f5:ae:73:
                    91:1b:f2:00:d0:59:15:b9:d4:04:f8:bb:9f:7b:62:
                    96:30:da:5e:87:a0:39:c4:c9:04:f7:a2:10:a4:25:
                    70:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BC:00:7E:2A:41:16:66:59:2C:6E:3C:2E:97:6C:FF:6C:84:8E:42
            X509v3 Authority Key Identifier:
                keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:8c:d2:8a:0e:97:17:70:0b:56:1e:bf:28:78:9f:f0:63:42:
         13:07:46:e0:bb:f2:8a:49:3c:5d:92:2a:d1:c8:b8:82:3c:27:
         b1:55:6c:5e:5d:03:fa:b4:24:16:5e:75:34:55:b8:06:38:fe:
         56:3c:62:a1:f5:91:c1:69:ff:fe:35:ca:b0:77:20:35:e2:a0:
         71:5b:7c:32:50:bf:55:b8:d4:71:d2:3c:dc:89:20:7e:3c:51:
         b7:28:26:77:a5:45:62:c7:43:f9:a3:e0:59:17:33:7a:31:69:
         13:bd:4d:af:18:e4:ef:1a:5e:c8:ef:ca:54:fb:9e:6f:29:da:
         bd:3a:1a:87:8e:b1:4e:37:e5:d7:88:1b:32:d1:7d:35:d5:45:
         c0:bc:43:20:61:d7:81:b5:28:78:2c:b9:a4:86:1e:7c:8d:92:
         36:5f:e8:8e:99:d3:66:c4:98:58:c9:f9:d2:3c:68:5d:4c:1d:
         bf:10:7f:28:bd:4c:53:b1:ce:95:72:78:70:39:49:e2:b7:15:
         90:f7:34:70:7e:b1:f6:06:c5:3a:f6:9d:8d:d2:31:bc:99:da:
         db:ff:73:98:82:b2:d7:09:c3:b4:04:ac:0d:7e:a2:34:90:21:
         3b:99:e7:b9:1b:25:b1:94:40:fe:22:61:be:1c:71:a4:b9:10:
         24:36:6b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:12:54 2025 by rpki-client