Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
File:                     Rro_gAObnnhM-yS_LH3bJOGQCnY.mft (raw, json)
Hash identifier:          hVZAKD41rxRwSnb+2G4eDKrYfI4DXApRSnd50XI4XSA=
Subject key identifier:   5B:D5:A3:83:A2:69:F6:6B:AD:37:C8:24:44:04:2E:E5:EE:41:4C:F3
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Certificate issuer:       /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial:       0196496A27B3A07D4AB406E9CDD98F426AD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
Manifest number:          14FF
Signing time:             Fri 18 Apr 2025 15:00:15 +0000
Manifest this update:     Fri 18 Apr 2025 15:00:15 +0000
Manifest next update:     Sat 19 Apr 2025 15:00:15 +0000
Files and hashes:         1: QNtVfkNdeG1v9DJyZBEjTrZNyBc.roa (hash: vaJZALNBXUbhDyRfKEtlNDFsggROpnhoQdeymesJ/Rw=)
                          2: Rro_gAObnnhM-yS_LH3bJOGQCnY.crl (hash: D9wW+Scr35FqiNppnjM9ifQ1y4EEwdyUmTif2aSW8yk=)
                          3: _npBPU_qU8Q1a65hoUMHOBSefXQ.roa (hash: e8tqm7dxs7+LcvLZgwgmWSIzqUCH5DxQZJAY7CIpCfc=)
                          4: hd67_XZte5UJxG8Z9Bjjhd5C3aY.roa (hash: m5+Tgfa03sp40l5g/5GYZoTIL8T/7QDNBIaZ6t+2ge8=)
                          5: oSx_pT92ENoX9McIljhqchZm0Y8.roa (hash: jetN2hKvAM6TwnDzQ0oFFtD8VXzg/vhGoJq+vT3kY9E=)
                          6: ol0yF-2yJSflw_ZYhiJJY4fxMnU.roa (hash: uwqj4CFvKVNkmhKMglSF22ZAXWwfKXlh6tWeNXdxYbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:6a:27:b3:a0:7d:4a:b4:06:e9:cd:d9:8f:42:6a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
        Validity
            Not Before: Apr 18 15:00:15 2025 GMT
            Not After : Apr 19 15:00:15 2025 GMT
        Subject: CN=5bd5a383a269f66bad37c82444042ee5ee414cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:26:3b:9c:7e:c7:85:df:bf:4a:4b:96:3f:6e:
                    f5:84:6d:99:ae:ee:3d:39:4e:a5:d6:95:eb:f3:af:
                    1b:9f:9d:06:04:76:60:ba:c8:3d:09:48:e9:d1:5c:
                    00:61:e2:38:60:14:69:e2:c9:72:04:55:f0:1d:61:
                    97:9b:48:ac:98:c9:02:d6:cf:e5:17:27:a1:63:a1:
                    67:b7:f0:3d:de:20:c8:88:6c:8f:50:eb:0f:37:23:
                    c1:85:82:95:63:15:cd:fe:af:2f:33:60:37:25:ef:
                    00:79:25:c3:03:3e:e7:f0:c7:39:b4:0f:27:81:58:
                    67:5e:d0:f0:9c:cd:00:c7:cb:d4:93:cc:a9:e3:27:
                    24:6f:e2:18:20:4d:39:45:ed:48:cb:10:19:10:16:
                    26:71:da:d8:34:22:6d:5a:c9:40:fa:3d:80:15:a2:
                    f2:fb:c9:04:a2:17:35:a4:83:fb:65:06:1f:84:f6:
                    a0:d5:eb:64:7a:21:35:3c:90:3f:9b:25:30:00:5f:
                    0c:e7:b1:a6:d8:ff:18:de:21:91:54:06:76:1b:8b:
                    81:69:26:9b:83:78:84:1e:f1:d7:65:ee:3d:0c:1d:
                    1b:85:bf:dd:5e:f9:1d:75:f0:4a:80:da:67:4f:43:
                    72:41:19:68:40:48:86:60:bf:82:5c:e0:cd:be:ec:
                    89:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D5:A3:83:A2:69:F6:6B:AD:37:C8:24:44:04:2E:E5:EE:41:4C:F3
            X509v3 Authority Key Identifier:
                keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:5c:9b:74:0a:28:6e:0a:7e:9d:99:ab:3d:4f:57:76:5b:15:
         1c:cd:ea:b4:5b:2c:47:ad:ef:79:2c:c2:cb:f1:e3:d0:f4:f7:
         76:9e:28:81:84:f3:f5:3c:43:4e:9e:d3:2a:e7:7e:ba:ab:22:
         d3:0e:8d:eb:d7:03:4e:73:43:2f:bc:bc:73:44:b4:fe:9f:92:
         2a:36:d8:97:c9:5d:77:29:8e:af:d9:2e:a7:6b:78:bb:88:dd:
         d6:be:89:85:3f:44:de:dd:ef:69:f2:5d:25:d9:15:43:26:8f:
         4d:8b:7d:dd:5e:59:d0:84:94:02:48:9e:99:ae:11:42:f8:5b:
         0b:dc:66:f2:51:17:85:e5:27:37:55:34:b0:cb:56:ea:6a:b2:
         a6:02:a3:fd:15:d8:d6:f5:82:9f:b0:9b:f6:b6:db:a7:91:7b:
         b0:0b:87:28:c1:0d:25:ae:53:fe:8d:d1:a2:99:f8:50:0d:34:
         7b:2a:9f:f0:29:69:1e:f2:bc:f8:5f:94:34:d8:d8:e0:aa:a9:
         00:d8:7d:80:59:28:2f:19:08:dd:7f:84:d0:cb:46:6e:c3:5d:
         94:15:0e:4f:f7:47:a8:8c:15:91:79:11:06:22:2f:5f:85:1f:
         05:98:bf:44:12:d1:af:d2:f7:25:93:dc:98:b9:a7:e8:aa:16:
         41:13:3a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 17:33:27 2025 by rpki-client