Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
File:                     y_I74RFfAiqiadnOpDm7i0kjB-I.mft (raw, json)
Hash identifier:          3djbIAWzWnExEtR5BYPvkigjqTBAO5h/hYjjR0uqD7Q=
Subject key identifier:   16:46:23:DE:EB:37:0B:34:4C:45:51:EB:8A:43:FF:AD:C1:80:7F:54
Authority key identifier: CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2
Certificate issuer:       /CN=cbf23be1115f022aa269d9cea439bb8b492307e2
Certificate serial:       01963FC266F1F6EF242992622FBEEA3D963B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
Manifest number:          14F3
Signing time:             Wed 16 Apr 2025 18:00:27 +0000
Manifest this update:     Wed 16 Apr 2025 18:00:27 +0000
Manifest next update:     Thu 17 Apr 2025 18:00:27 +0000
Files and hashes:         1: 2wV8eUCUu5RGsjYa7-OlHblwpFo.roa (hash: 7BqtxHk5pTQN6TSTs893yWqV/YVjq+6kshvNaK8vqGo=)
                          2: 8qU7PW-1jRTW26c9BxYT5_0Bc9U.roa (hash: HOmxtNFCl//oq/U3tRw6KwgqtgI+NdJR6gPDxjaAFLQ=)
                          3: b3I98CB-8ce3VcwkD_Ch6vFhQXE.roa (hash: kqwOewNHVrTW/kfVyBv01vxgKvixRF0yFyDls6uT/Uo=)
                          4: y_I74RFfAiqiadnOpDm7i0kjB-I.crl (hash: suidj1KG3KqrRpkq905BxPxLnbya+N8zie8/CT4VDCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:c2:66:f1:f6:ef:24:29:92:62:2f:be:ea:3d:96:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf23be1115f022aa269d9cea439bb8b492307e2
        Validity
            Not Before: Apr 16 18:00:27 2025 GMT
            Not After : Apr 17 18:00:27 2025 GMT
        Subject: CN=164623deeb370b344c4551eb8a43ffadc1807f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:62:b8:22:11:ef:85:65:e4:81:6f:22:8a:8b:
                    9f:d5:c5:c2:8b:5b:e2:25:93:a6:4e:d9:b9:e7:14:
                    3a:07:dc:6d:fd:28:90:8b:17:b2:fd:73:14:8b:9d:
                    62:80:8b:f0:41:2f:66:13:db:ae:79:9e:43:42:2e:
                    5e:33:76:d5:7f:9b:6e:99:a5:24:f4:df:90:b2:a9:
                    c8:e2:f9:45:ef:71:04:04:0a:7a:56:4b:7a:b3:15:
                    32:0a:f2:19:50:d9:14:52:ba:58:eb:6a:ae:6f:bd:
                    1a:bf:07:08:a7:bb:58:7f:a9:ab:b5:26:96:d7:6e:
                    10:50:fb:b1:56:ba:b1:e0:12:c2:47:2e:7f:74:8f:
                    44:34:4a:a8:f6:9f:22:82:ab:51:b1:a9:14:32:dd:
                    03:35:1f:e4:41:95:89:ba:c7:bd:4e:5e:f0:04:7c:
                    81:39:88:cd:67:eb:e6:af:33:6a:d2:e1:7c:8f:25:
                    42:21:27:71:8d:7a:c2:2e:b3:0c:12:9a:e5:79:06:
                    cb:c1:90:98:dc:6d:e3:ef:80:9b:a0:30:98:8f:6f:
                    41:62:a4:75:67:1b:66:7c:2f:5b:87:c6:7b:f0:b4:
                    1f:16:3d:ae:e6:c4:fb:be:76:37:d9:ab:b3:c9:93:
                    02:54:dc:00:47:94:e2:81:85:84:df:79:c4:f5:19:
                    4a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:46:23:DE:EB:37:0B:34:4C:45:51:EB:8A:43:FF:AD:C1:80:7F:54
            X509v3 Authority Key Identifier:
                keyid:CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:28:e8:df:c2:2c:b3:8e:c1:df:13:33:59:7c:4f:40:a9:9b:
         e5:5d:72:c2:f3:23:e8:61:66:fd:cc:53:ae:08:66:92:05:c4:
         7e:51:48:54:77:23:86:72:0e:5e:9e:88:5d:f4:dc:54:28:dc:
         22:55:68:4e:cb:a9:67:75:65:92:38:c7:8a:45:ab:0e:6e:c8:
         da:d0:41:12:c5:be:bc:cd:0b:6a:51:ba:81:11:14:72:ad:06:
         4b:24:fe:33:f4:49:56:3e:29:16:b2:e7:c4:1b:e7:49:0c:ef:
         76:2d:9b:c9:57:d3:44:09:2b:9b:e6:b3:da:25:e2:d0:f4:d7:
         8d:3b:fe:cd:d3:2a:c4:3e:39:9a:ed:dd:99:a2:ca:2c:08:05:
         cf:cc:d0:65:f1:1d:f9:20:26:eb:7d:34:08:5a:e7:f2:f0:2d:
         d1:ad:8a:a0:19:bf:eb:72:35:26:fa:81:0b:e0:d6:6f:83:85:
         0c:a9:cc:7c:48:68:35:c3:6a:b9:56:f5:36:f6:29:81:db:1a:
         03:95:93:68:52:7b:21:e3:b1:7c:fa:9f:c2:04:58:cd:fd:f7:
         08:ab:d4:aa:86:ae:e8:1a:29:4e:12:a4:fe:56:ee:63:83:62:
         77:d8:cf:0e:6c:72:f7:de:cb:6f:60:f5:79:a3:6d:30:03:34:
         a0:0e:df:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:16:41 2025 by rpki-client