Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
File:                     EgHMNDB0EC76fwww8pSZ4a1W4p8.mft (raw, json)
Hash identifier:          ynrsYnlZCq1ba3UlfmWlb02+quvVjbpqFI5sR8VJd6g=
Subject key identifier:   DC:EB:54:44:D5:EC:00:19:31:77:88:BD:BE:2C:E1:00:CC:09:50:CE
Authority key identifier: 12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F
Certificate issuer:       /CN=1201cc343074102efa7f0c30f29499e1ad56e29f
Certificate serial:       01964EFEFB21FDFCDB4799C86CC376C7A915
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
Manifest number:          14FC
Signing time:             Sat 19 Apr 2025 17:00:55 +0000
Manifest this update:     Sat 19 Apr 2025 17:00:55 +0000
Manifest next update:     Sun 20 Apr 2025 17:00:55 +0000
Files and hashes:         1: EgHMNDB0EC76fwww8pSZ4a1W4p8.crl (hash: KIz4wyyenF7VhrOrvlNNYOKXGScr4WUElG7gZGa5cac=)
                          2: sT8bdOMkOBuJcpLSNUJLIn8pNo4.roa (hash: vHy12CSxlbxHZ+bWYL5tzLyPAoKn74EaWNP0Myp+xyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:fe:fb:21:fd:fc:db:47:99:c8:6c:c3:76:c7:a9:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1201cc343074102efa7f0c30f29499e1ad56e29f
        Validity
            Not Before: Apr 19 17:00:55 2025 GMT
            Not After : Apr 20 17:00:55 2025 GMT
        Subject: CN=dceb5444d5ec0019317788bdbe2ce100cc0950ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:72:ef:f8:de:7d:2e:92:00:ab:0a:ba:18:
                    c1:9a:a3:c3:29:a1:e8:23:ab:88:e7:d7:33:ba:d5:
                    2b:7a:f6:3e:e6:7e:e9:c6:ae:f8:f2:29:7d:12:7c:
                    35:d4:31:58:77:23:43:02:b0:8a:93:1d:34:35:3e:
                    6d:50:3a:0a:66:fd:de:44:99:f7:79:8d:fc:10:b5:
                    b4:3f:1b:54:a3:11:64:25:91:67:5f:30:19:c4:22:
                    0b:ea:ea:1a:8c:ea:87:dd:40:72:bb:96:bb:b1:a2:
                    50:f2:28:75:af:89:ec:83:5e:99:8a:b0:99:66:14:
                    6c:98:dc:ed:08:6d:df:38:d1:0e:97:91:96:0b:42:
                    d5:cc:6c:b9:02:38:be:cd:8a:d1:0e:9b:b2:0a:4d:
                    ac:29:e3:b8:a2:cb:45:71:4f:a4:eb:6e:d3:a3:ac:
                    ab:f9:34:77:e0:47:1a:15:2f:d8:15:22:18:a9:18:
                    d8:37:f0:95:fa:df:70:3b:a7:f3:c5:0b:7e:0d:a8:
                    49:56:5e:31:29:8c:ce:38:a1:54:be:45:89:b6:1f:
                    52:7a:a1:d0:c3:b9:0a:da:cd:f3:cd:e1:89:bf:e7:
                    01:19:0f:ea:71:8c:7c:1e:20:d8:54:18:ab:b5:11:
                    a3:ce:22:3d:22:10:70:62:4d:d9:28:12:d4:60:4c:
                    15:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EB:54:44:D5:EC:00:19:31:77:88:BD:BE:2C:E1:00:CC:09:50:CE
            X509v3 Authority Key Identifier:
                keyid:12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:86:c5:06:3d:0c:17:2b:16:1d:c6:e2:d2:17:6d:ca:b8:7b:
         81:a8:81:e3:78:e4:07:a5:a4:53:1f:dc:a9:b4:f2:13:14:6c:
         01:25:31:eb:3e:51:11:1c:14:be:aa:a3:50:f4:60:61:15:c0:
         58:83:6f:32:16:f4:02:93:ee:45:ac:94:b9:b9:c0:01:d3:d5:
         e1:11:42:34:6b:ee:18:c9:0d:a7:b1:01:5c:31:db:fd:8b:3b:
         d7:21:86:b4:da:53:48:2a:41:79:6a:7d:4a:db:fb:83:aa:fb:
         17:b3:0c:85:5e:42:af:8a:d1:e7:10:ea:9d:e1:5f:7b:c6:41:
         26:bb:3f:93:ef:83:58:d1:06:47:96:ad:95:ed:d5:a8:a1:16:
         7c:10:6f:f4:dc:37:f4:0d:67:05:93:b2:73:62:44:7b:84:fb:
         36:80:19:de:78:54:f2:96:40:c6:11:a4:ba:05:57:ce:a1:19:
         4c:3b:28:08:40:df:55:da:9c:30:cc:cf:b0:76:c0:c6:ae:21:
         bc:5a:4b:6a:70:04:ff:44:de:19:bd:60:e2:0d:83:14:eb:7f:
         e8:e0:d9:cb:db:83:b5:66:dd:5b:cb:96:17:89:4d:92:e4:9e:
         e1:b0:48:36:80:6d:76:49:d1:d6:61:60:48:06:6b:8f:c4:a2:
         62:30:20:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:24:06 2025 by rpki-client