Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
File:                     N0mXVDn-T_qTECYqy91fcjzuIiM.mft (raw, json)
Hash identifier:          I4HjA6RBY5Ddsr458gUbWjRlIWI/V0TQcn3jbk+1Jms=
Subject key identifier:   CE:28:F0:A0:A2:FC:07:46:04:68:6A:33:78:FA:92:DE:B9:A5:D5:3C
Authority key identifier: 37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23
Certificate issuer:       /CN=3749975439fe4ffa9310262acbdd5f723cee2223
Certificate serial:       019645FB9A2D6973C435422115A379779A68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
Manifest number:          14EB
Signing time:             Thu 17 Apr 2025 23:00:38 +0000
Manifest this update:     Thu 17 Apr 2025 23:00:38 +0000
Manifest next update:     Fri 18 Apr 2025 23:00:38 +0000
Files and hashes:         1: N0mXVDn-T_qTECYqy91fcjzuIiM.crl (hash: d2TKCVsQ9I82k1fKORQmjC/BlDvXKhDZKoYvWpl+uP4=)
                          2: kzwjfq1uCpgiTAUnk5qhqKOqoaU.roa (hash: MJDFWuspOJe8rc6Woxt8ScoRrsfkLnrA6WpK9920n7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 23:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:fb:9a:2d:69:73:c4:35:42:21:15:a3:79:77:9a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3749975439fe4ffa9310262acbdd5f723cee2223
        Validity
            Not Before: Apr 17 23:00:38 2025 GMT
            Not After : Apr 18 23:00:38 2025 GMT
        Subject: CN=ce28f0a0a2fc074604686a3378fa92deb9a5d53c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:8f:a1:0f:48:4b:ae:f8:fb:fa:73:a1:bf:
                    a9:47:9b:6d:70:5d:7c:88:47:13:a4:14:ae:97:3d:
                    38:b4:f4:d2:ac:22:aa:ec:35:20:55:dd:9d:37:93:
                    dc:cb:ca:d7:0a:00:cc:fb:86:8b:a8:2e:71:ba:2c:
                    b3:ed:59:ec:96:90:3f:70:b2:ba:99:c8:db:da:8a:
                    be:44:35:e4:d3:42:71:7a:4a:38:ad:a9:1d:dc:bc:
                    f8:cd:21:88:5b:b9:55:a2:8d:a3:0e:df:7d:3e:88:
                    39:3f:fb:cc:90:99:6d:58:0f:6c:29:d6:4c:2e:ec:
                    7d:ae:a3:7f:fc:f0:ae:bb:af:ab:76:6c:ef:db:b6:
                    b3:bb:47:91:68:aa:72:de:5c:85:a6:6d:a7:f7:8f:
                    a8:b4:53:e4:35:33:db:46:69:f8:55:b9:0e:51:95:
                    f3:a2:d3:f9:2d:3a:d2:1f:c8:02:4f:56:cf:6b:06:
                    9e:72:28:93:fd:0d:8f:ad:5a:9b:0b:99:2f:20:b4:
                    fa:af:0c:ce:22:23:43:c9:51:67:fc:9b:76:43:13:
                    aa:f0:03:5d:88:cb:e9:58:90:5c:21:24:23:22:65:
                    8d:4f:86:d3:9d:50:e4:a1:b2:a0:ca:bd:39:32:9d:
                    9b:d1:bd:ba:08:49:0c:3a:68:e7:8e:56:7b:7e:56:
                    fc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:28:F0:A0:A2:FC:07:46:04:68:6A:33:78:FA:92:DE:B9:A5:D5:3C
            X509v3 Authority Key Identifier:
                keyid:37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b0:50:c5:74:af:29:c1:19:73:b0:7c:f6:f3:33:eb:2d:de:
         72:c9:56:d2:35:70:92:be:32:6c:d7:8f:00:c8:3d:41:62:ac:
         17:31:28:dc:ba:47:86:e9:d4:99:5c:3d:b5:16:72:4b:9a:5d:
         16:2c:5f:be:92:9c:50:af:d0:3c:71:70:1d:03:82:7b:9e:96:
         8b:5b:94:c5:0f:b6:c2:4d:e8:69:2f:9d:75:7c:d9:23:df:87:
         e3:1e:fb:dd:e4:15:be:e5:20:71:7e:c5:0f:a1:42:d3:c8:66:
         7a:9e:f1:f0:23:72:f0:1d:80:30:4a:af:5c:b8:e5:bd:a8:11:
         dc:54:c5:da:4c:f1:5b:c8:24:f2:f5:0e:da:6c:c1:0c:11:0c:
         b6:df:1a:aa:2e:ee:85:9c:02:23:c3:34:0a:d6:58:f6:79:f4:
         a5:3f:45:9f:67:52:83:40:5b:60:de:01:01:6b:83:26:6c:fc:
         7b:7b:ea:69:a9:3f:7c:13:2b:b9:80:52:bf:c1:70:dc:b2:5b:
         a5:6c:ba:08:59:6a:50:da:8c:78:bd:24:68:eb:fd:31:eb:52:
         d2:6d:39:69:16:72:2f:49:24:53:2d:cb:86:d6:00:fa:2b:8e:
         ac:01:68:4e:ff:f8:21:a9:88:20:bc:38:53:c1:2a:f7:23:9e:
         e8:f5:a9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:29:58 2025 by rpki-client