Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft
File:                     l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft (raw, json)
Hash identifier:          5v2qq3fAD9RicmeO2PtLtO+FCnoMfc6KTxi4cVPMBmU=
Subject key identifier:   C1:ED:3A:8A:8D:CA:8C:4E:27:C2:BF:C6:74:C3:BF:38:BC:AB:89:6C
Authority key identifier: 97:8F:41:E2:90:28:54:73:C2:A1:E2:BE:7F:66:F6:34:52:ED:46:44
Certificate issuer:       /CN=978f41e290285473c2a1e2be7f66f63452ed4644
Certificate serial:       0196439F27DD26CF06182DB000D048A93754
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft
Manifest number:          1429
Signing time:             Thu 17 Apr 2025 12:00:25 +0000
Manifest this update:     Thu 17 Apr 2025 12:00:25 +0000
Manifest next update:     Fri 18 Apr 2025 12:00:25 +0000
Files and hashes:         1: 3FnVY4sBG3BUNdCMlG69JrkCRk4.roa (hash: xbgs2co1eheJ2l8YrvPyfXeU2aKPVWbDIStArstZGzA=)
                          2: l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl (hash: 0hss/jkDqTxw6d21bR80VC+IamcffBfr2u+1F2LX8C0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 12:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:43:9f:27:dd:26:cf:06:18:2d:b0:00:d0:48:a9:37:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=978f41e290285473c2a1e2be7f66f63452ed4644
        Validity
            Not Before: Apr 17 12:00:25 2025 GMT
            Not After : Apr 18 12:00:25 2025 GMT
        Subject: CN=c1ed3a8a8dca8c4e27c2bfc674c3bf38bcab896c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2d:e1:1a:23:61:ca:d5:35:a5:6a:56:73:a6:
                    98:6c:b2:20:73:97:59:94:1a:bd:a8:2e:cd:e6:1d:
                    ae:41:9c:85:bd:78:2d:36:54:4c:bb:7b:15:a5:17:
                    0e:94:d9:dc:25:fe:5f:28:c9:21:39:8b:61:75:46:
                    6b:58:f1:84:a5:e4:a9:a0:fd:6f:27:c9:85:d0:a5:
                    cd:ec:34:16:8a:0d:08:80:df:ff:9c:1d:2a:82:80:
                    35:07:13:00:97:aa:a6:26:92:3f:f0:e0:4e:30:64:
                    3f:01:ae:de:f0:be:fe:7b:d8:50:08:0f:6d:97:e8:
                    dc:60:b7:7f:c5:2f:34:f0:c1:2b:fb:04:05:8c:00:
                    df:84:97:bd:07:79:35:fe:23:39:39:3f:fa:91:2d:
                    3e:90:4b:1c:0b:97:19:29:a3:03:ac:84:f5:49:91:
                    d4:60:53:4f:75:11:54:98:04:95:96:11:2e:93:36:
                    b0:0e:96:0b:47:8c:46:25:c8:61:2c:ba:d8:d4:68:
                    54:8b:10:e1:3a:d5:c3:4a:5c:da:6f:7a:b0:9d:ff:
                    00:73:ad:2e:dc:2b:65:2f:cf:9f:64:dd:da:b7:fa:
                    8f:19:41:0c:7d:af:53:ea:61:39:09:59:a1:51:7e:
                    91:8e:0f:fc:d1:e6:f1:b2:ac:80:5a:eb:44:c8:73:
                    bf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:ED:3A:8A:8D:CA:8C:4E:27:C2:BF:C6:74:C3:BF:38:BC:AB:89:6C
            X509v3 Authority Key Identifier:
                keyid:97:8F:41:E2:90:28:54:73:C2:A1:E2:BE:7F:66:F6:34:52:ED:46:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:ff:2f:a0:6b:7d:ca:2b:60:42:68:ba:63:23:15:bd:33:b7:
         f7:36:ad:1c:96:c6:ba:a7:f1:d5:8f:8c:9d:1b:b3:da:8c:77:
         7a:d6:02:7d:8a:68:55:11:c0:6c:f0:3f:7e:4b:03:5a:07:9d:
         fb:1b:3e:2c:30:c0:51:6a:3c:56:e1:de:4b:e5:c4:5c:27:ab:
         e3:55:30:9c:5d:af:6d:85:a6:dd:55:e6:86:1b:8e:58:85:92:
         d8:53:df:91:f9:d2:29:81:5a:37:9d:41:95:3e:4a:b7:eb:b1:
         6f:24:01:19:32:8b:3a:d3:19:a5:e0:2b:92:26:23:ad:2c:2c:
         cd:08:36:9d:04:6e:97:93:e7:07:c5:4f:74:ec:94:4c:81:4c:
         25:8a:ad:8f:64:88:02:10:1e:6a:78:bb:b1:f1:7e:1e:bb:ed:
         30:b7:2b:6a:9e:36:fa:d2:f0:13:6f:7d:ee:23:c6:5e:08:af:
         ff:d5:5c:59:04:b6:a1:53:eb:42:7f:73:e8:a4:f6:ff:15:2e:
         0f:c4:51:b8:61:08:ba:31:39:be:09:ae:5a:ff:3b:f8:83:a5:
         b1:a4:11:bc:98:8d:78:c3:eb:45:9c:1a:d0:26:1d:fd:76:ad:
         7e:c4:01:3a:e5:c5:cb:66:da:c4:f5:61:af:42:ab:68:6d:cf:
         a8:24:ac:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:58:42 2025 by rpki-client