Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
File:                     d1XNi-ceKectlpDHzUCHtfJhFvA.mft (raw, json)
Hash identifier:          EkUlRHXysAew26EkNbodMR/aBWZxAK3Se59FY2bLOvM=
Subject key identifier:   18:22:3E:AD:F2:88:C9:17:55:C5:9C:96:EA:A6:0E:95:42:B0:0B:4C
Authority key identifier: 77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
Certificate issuer:       /CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Certificate serial:       01958F2AACA7AD253F4314D4BD8C2960C7FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
Manifest number:          04BE
Signing time:             Thu 13 Mar 2025 11:01:33 +0000
Manifest this update:     Thu 13 Mar 2025 11:01:33 +0000
Manifest next update:     Fri 14 Mar 2025 11:01:33 +0000
Files and hashes:         1: B36LiC0OjqZ3wtH6qzPHL39SDVM.roa (hash: lC3icrS9H534ILHm12EWgHNj+HzhQRDu9zX1M9oOdqc=)
                          2: d1XNi-ceKectlpDHzUCHtfJhFvA.crl (hash: Mrnk+EhPsbWAihawzHK1bePZsgcxHH9hNopjA7JNebk=)
                          3: e38yhLWXEVmqzpexT39CAVvzz0Q.roa (hash: BPXva5k8oXj/MP9PbA9GSzPiSKc5f6Z2a5jmXbL4TDQ=)
                          4: orSDHxnHGA47DQXY7GCuv1ViUKY.roa (hash: LnjrGG6bbrDuTNmUNlD7ds05Ph4J1TnAuWMrinaUcFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8f:2a:ac:a7:ad:25:3f:43:14:d4:bd:8c:29:60:c7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
        Validity
            Not Before: Mar 13 11:01:33 2025 GMT
            Not After : Mar 14 11:01:33 2025 GMT
        Subject: CN=18223eadf288c91755c59c96eaa60e9542b00b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:15:f0:3c:e0:e9:dc:0e:86:84:ed:fc:14:3d:
                    ac:98:ba:a4:69:c9:3a:88:4f:54:30:18:ae:99:e8:
                    6f:13:49:f4:5c:24:df:52:4e:42:4b:59:28:c7:77:
                    4c:62:5b:91:34:38:ae:17:d8:e8:18:69:95:1f:6c:
                    3e:d9:87:f1:c6:1e:28:95:b4:9c:0b:00:1c:f6:b8:
                    f6:f2:fc:00:86:0b:1f:1d:92:1e:cc:5f:17:f3:55:
                    2a:50:25:8a:11:b3:d9:eb:26:2c:0d:f7:34:57:76:
                    60:06:58:fa:ff:90:9e:51:15:e6:70:8e:7d:28:b7:
                    90:66:2a:2e:9d:62:7a:eb:88:9a:92:75:c8:1b:22:
                    8f:e4:9e:ab:b9:3e:ae:3c:48:6b:73:8a:94:4f:36:
                    74:07:66:dc:a0:67:e9:1a:b4:75:7a:bc:c0:50:5d:
                    64:68:04:49:91:24:53:ad:ab:73:91:93:bc:60:c6:
                    67:26:11:4a:f8:dc:5d:24:f3:dc:f0:d6:29:1e:f2:
                    bb:8e:57:b5:96:b1:8a:e9:79:cc:98:8b:d6:38:56:
                    51:78:6c:b3:3e:1d:ee:9d:ee:5c:74:fa:32:6b:97:
                    ba:75:eb:3f:e3:d8:00:8f:99:33:e9:5a:c9:0a:57:
                    a2:00:a5:c9:0d:fd:fd:c1:92:2e:1e:2e:fb:b8:af:
                    b6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:22:3E:AD:F2:88:C9:17:55:C5:9C:96:EA:A6:0E:95:42:B0:0B:4C
            X509v3 Authority Key Identifier:
                keyid:77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:11:6a:97:1e:75:0d:34:eb:5d:82:7f:ff:83:f7:1c:d4:a4:
         51:ec:f4:50:61:d8:91:5e:6d:d2:e9:f1:0d:e9:b5:7e:9c:76:
         4e:cd:34:b1:fa:e7:5d:63:60:53:c6:5f:33:1e:e3:30:65:a4:
         fe:8e:00:c3:c6:bf:a1:a9:da:38:3b:91:be:1f:97:fb:15:b3:
         a3:07:5d:3c:72:38:a2:08:b0:39:55:25:20:5d:ab:53:5e:85:
         b8:a0:0b:b0:b1:f4:5d:f0:e2:bd:53:02:55:39:1b:40:9b:1c:
         5a:52:1d:a8:fb:20:e6:99:34:a2:17:de:a5:e6:73:c9:ae:ce:
         d4:51:00:d3:01:15:60:86:c2:d9:f1:8e:73:77:d8:ba:67:f1:
         f8:ce:51:f5:e7:ca:f1:7d:ac:71:c5:22:20:cc:9b:ff:3e:4d:
         1f:1b:6d:b4:9d:2c:99:a6:31:2d:08:1f:ed:4e:cf:d4:58:50:
         39:c0:ea:43:84:68:c9:d9:4c:9f:14:d1:ba:7c:82:00:5c:3f:
         5c:41:18:a4:6b:10:ca:14:6f:16:24:ca:fa:89:97:23:d4:f5:
         79:e1:7c:3b:52:6b:ee:1a:cb:89:55:28:13:bd:6c:8c:f5:d7:
         37:52:f3:86:ec:3b:45:6c:94:1e:36:6e:63:d9:bf:53:04:4a:
         cd:67:6b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:58:28 2025 by rpki-client