Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft
File:                     MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft (raw, json)
Hash identifier:          W7HK3T+HEodN9T/gtizmgAwdkEC0UCi5I3l3GM/xqF8=
Subject key identifier:   ED:F5:5B:D6:20:F5:F4:9F:45:3F:69:2B:6C:D7:8C:BD:C5:F0:EF:4D
Authority key identifier: 30:4A:A2:58:22:4F:A3:C6:7B:AD:1F:2B:9F:9B:28:A6:5D:95:FE:AE
Certificate issuer:       /CN=304aa258224fa3c67bad1f2b9f9b28a65d95feae
Certificate serial:       01965914D64FA0DF298E1386E104EF7D1855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft
Manifest number:          14FC
Signing time:             Mon 21 Apr 2025 16:00:59 +0000
Manifest this update:     Mon 21 Apr 2025 16:00:59 +0000
Manifest next update:     Tue 22 Apr 2025 16:00:59 +0000
Files and hashes:         1: MEqiWCJPo8Z7rR8rn5sopl2V_q4.crl (hash: xZYHERkI3cHzc0NIoM27E8YWHhKW6qrErlKHt+0/V/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 16:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:14:d6:4f:a0:df:29:8e:13:86:e1:04:ef:7d:18:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304aa258224fa3c67bad1f2b9f9b28a65d95feae
        Validity
            Not Before: Apr 21 16:00:59 2025 GMT
            Not After : Apr 22 16:00:59 2025 GMT
        Subject: CN=edf55bd620f5f49f453f692b6cd78cbdc5f0ef4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2b:71:8c:1b:e4:d9:ec:29:e9:b7:e8:62:4b:
                    e4:b7:42:89:e0:74:56:d1:94:e6:7c:a9:52:1d:13:
                    a1:29:4c:3e:bc:43:17:33:3e:25:f9:ae:02:63:fd:
                    9e:72:bd:69:7f:e7:99:7a:26:a4:3b:8e:f9:ff:ed:
                    59:03:d1:2d:81:47:26:92:33:2e:0e:62:2c:04:53:
                    8a:92:ac:59:7f:03:b4:e6:d3:fc:c3:ac:6a:60:89:
                    46:c7:4e:68:a3:0f:15:9d:6d:fc:77:37:e6:3b:99:
                    e1:54:d1:72:96:c7:64:c2:ca:cf:47:27:ee:37:51:
                    6d:8a:27:21:2c:92:89:6e:4b:58:77:d3:01:a3:b6:
                    ab:2f:8f:1f:f9:35:9c:96:a9:03:6c:47:6b:52:32:
                    5a:11:83:08:d3:27:57:81:e1:c6:50:d5:95:c4:cf:
                    7a:a7:f0:26:bf:f4:44:c2:0b:3c:ce:a1:b1:e7:02:
                    cd:95:e4:a0:da:dd:38:ff:c8:98:12:18:69:47:d2:
                    98:26:d9:58:e5:52:7e:de:f3:d5:a9:9d:c6:02:d7:
                    0a:26:d9:dd:fb:f1:fe:ef:ba:9c:b3:a3:a1:ca:aa:
                    c8:c8:35:c9:23:38:11:24:e4:c6:09:b6:01:c3:49:
                    5a:54:e6:7c:ad:e2:1a:d2:21:3b:84:55:37:89:c0:
                    d7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F5:5B:D6:20:F5:F4:9F:45:3F:69:2B:6C:D7:8C:BD:C5:F0:EF:4D
            X509v3 Authority Key Identifier:
                keyid:30:4A:A2:58:22:4F:A3:C6:7B:AD:1F:2B:9F:9B:28:A6:5D:95:FE:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:5e:07:65:a0:ad:33:6f:58:b0:47:07:37:18:d3:c1:79:b0:
         26:dd:66:1a:e6:d6:fa:b0:bb:f2:fa:de:40:7e:cd:4c:cc:c5:
         18:82:c3:b9:2d:69:8f:aa:ed:20:5d:c5:c2:5d:f8:66:dd:ca:
         0c:98:1b:30:2e:17:d6:3b:d2:ef:40:be:f8:17:e2:72:21:06:
         8b:4e:e8:55:3d:64:a4:ac:f3:33:e7:7a:4c:64:0f:8d:ed:0f:
         32:b8:43:13:e6:c5:6b:9b:93:07:8e:2d:97:2e:29:23:f2:ce:
         68:30:ee:7b:4d:51:8b:c5:c7:1d:2d:80:67:df:d5:43:97:c8:
         4d:f2:96:98:6d:a7:aa:3a:d4:00:fe:47:2b:59:57:7a:1c:4d:
         81:9d:c2:45:75:e6:6b:9c:d2:2f:34:1b:36:a8:fc:b4:94:e0:
         2e:f4:92:78:c8:1d:bd:6d:de:59:93:cd:47:65:d7:7d:e5:b6:
         a6:27:87:36:b3:c3:d9:fd:02:e6:4b:b6:22:c2:34:3f:d0:8f:
         1c:21:3e:91:b2:7d:1b:c7:9e:91:9d:39:ef:ef:50:06:f8:4b:
         3b:c4:c2:e5:62:d4:12:91:f9:45:5e:c3:a0:90:f0:e2:08:2c:
         f7:c3:d9:2e:4e:67:20:8a:48:2d:73:bf:06:c7:0c:d2:32:11:
         a8:7b:74:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:38:50 2025 by rpki-client