Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft
File:                     Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft (raw, json)
Hash identifier:          RFXovsFN4EvDwZ7jgy4nPhlc8035QLUm1ceg8uLdOqo=
Subject key identifier:   C3:CA:38:1C:3C:E6:4D:EA:6C:22:AD:3B:31:B2:26:72:B7:A6:CC:D1
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Certificate issuer:       /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial:       01963FFA0A11F8673A2EEA2BED6F9E991E2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft
Manifest number:          13E5
Signing time:             Wed 16 Apr 2025 19:01:13 +0000
Manifest this update:     Wed 16 Apr 2025 19:01:13 +0000
Manifest next update:     Thu 17 Apr 2025 19:01:13 +0000
Files and hashes:         1: FDqbE0eHZEv_ERsX7kXHHF5RRQk.roa (hash: j140J+F2FieGPuclb2mIxRwUBHdQxhpr5HBQnLeYiuY=)
                          2: LY8Jbr9sr_WCwWd2UrTGC0BKmRM.roa (hash: 5HQaKtYyBGcauN3lnpEH9LKsor/0JL7vB86zpKq4Hys=)
                          3: Q6_kTmc8fX58I7EBj3sPsSojmYU.roa (hash: sbWoHZJ8TPnfLH8vFWPl9mieLm0sgZlIoabKMFRTcsU=)
                          4: Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl (hash: CxX2/qvbzJFwBxlHq5HVH0MgV02Gmdq6X9ntvJVr10I=)
                          5: WH3ATFl5oOvMW11PuPzK34ZYhKM.roa (hash: jp96q+m3VdPl0zQPj7Pq6mGipum7ll7pnBOC/XlQbqw=)
                          6: WPCRGLeltSJ3YXo9id1i5ppsRw4.roa (hash: XvpGDNA3BMBDAmGYF6lZbS8+WVJqVHEpsQax4jq6kCo=)
                          7: fGIY8YHdNWwzhJx3ikoRAMgnPuw.roa (hash: 28gFmZmHqptl7sCCfNJhDhWI9ZQKOET/7qvAVv/S5j4=)
                          8: ffILj9IjNg6C8l0EmvWVQGIules.roa (hash: 2yNsIvmaeDyakVCS4RtNiFkTumvlxMJmMDP3cNZiXd4=)
                          9: xATH_4DImK8fd5hc84k_g1PniNs.roa (hash: WRPuSYa86Ir4oWe89J036B9Z8F9HC0m1Vigt9eZnloE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:fa:0a:11:f8:67:3a:2e:ea:2b:ed:6f:9e:99:1e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
        Validity
            Not Before: Apr 16 19:01:13 2025 GMT
            Not After : Apr 17 19:01:13 2025 GMT
        Subject: CN=c3ca381c3ce64dea6c22ad3b31b22672b7a6ccd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:86:01:9b:fc:c6:af:57:13:e8:ad:e0:34:6f:
                    cc:6f:a2:2a:c8:6c:90:39:7f:ef:78:c6:ef:6a:c8:
                    3a:40:a8:cd:14:e0:fc:f6:81:61:ba:20:2c:a4:86:
                    a5:cb:c7:c7:26:70:4d:ed:12:a3:19:26:a9:1a:e8:
                    49:38:81:5b:6a:f6:32:93:cb:bd:5c:dd:6e:2a:99:
                    26:e2:3b:b7:52:bf:f9:5c:7a:c4:85:94:ab:74:19:
                    d2:02:85:a0:cb:1e:32:78:94:01:60:29:61:ce:bb:
                    e5:49:88:5f:68:ca:37:1b:0e:07:2f:0f:77:6c:ff:
                    87:bc:2d:e3:1e:e7:4a:09:38:c4:f1:fa:6e:03:ea:
                    24:cd:33:26:81:7e:66:bd:e8:db:49:b4:6a:7c:50:
                    96:f4:b7:c7:6f:62:fc:c5:dc:68:c8:f2:dc:e9:df:
                    6a:7a:8c:f3:93:1c:e2:72:4f:8c:2d:b4:8a:43:1a:
                    35:e5:3a:42:20:02:16:93:4d:3a:0d:8d:41:b8:d4:
                    20:d4:79:79:a4:e6:08:80:ee:a2:c1:fe:d6:29:3b:
                    b6:09:bf:a4:13:3f:0d:e7:a4:ee:fc:26:59:d5:f9:
                    99:a9:af:53:ed:cd:f1:11:88:d3:f1:1d:20:df:84:
                    23:bd:85:81:98:f1:0b:a5:b0:da:75:6c:9e:c2:fb:
                    66:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CA:38:1C:3C:E6:4D:EA:6C:22:AD:3B:31:B2:26:72:B7:A6:CC:D1
            X509v3 Authority Key Identifier:
                keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:2b:b1:ef:c5:c9:10:90:a4:64:2d:fc:60:e7:c3:db:d9:f4:
         3d:d9:a2:39:08:04:25:4b:0a:d5:f8:b8:fb:e3:75:11:15:f0:
         de:0c:1e:65:e2:c4:39:4c:df:2d:9b:c5:33:b4:2b:23:e7:82:
         92:2a:f2:da:3c:e7:05:86:80:40:60:5f:68:2f:f7:22:df:55:
         46:f2:d1:9a:13:00:73:a2:62:4f:e9:3e:30:28:38:8e:f7:68:
         2e:cf:3d:5b:94:2e:d2:5d:67:96:2e:97:60:b2:20:f5:01:db:
         55:a1:52:4a:00:c4:81:d5:77:36:9f:a6:a2:fc:4d:2e:9e:08:
         14:11:29:5e:f4:a6:3a:7c:b1:2a:77:de:39:ba:66:bb:19:43:
         ae:cb:3c:d1:72:0c:1e:97:68:39:ec:a4:82:53:73:f9:9c:72:
         16:a1:63:87:cb:59:a3:30:65:b3:0a:ff:5b:63:69:f9:4a:75:
         f7:70:ff:d4:2a:d1:29:6c:c6:54:84:6d:99:35:5f:c7:74:8d:
         43:55:8c:50:90:cc:65:1f:c9:c8:49:4d:97:7e:ec:2a:c3:3c:
         72:9f:72:b0:77:01:fd:3c:c6:3b:ba:ba:63:f3:82:e2:de:00:
         59:bb:a9:62:d2:dd:78:1a:53:94:67:4c:b6:9e:ce:a2:16:c0:
         57:cb:fd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:03:45 2025 by rpki-client