Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
File:                     tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft (raw, json)
Hash identifier:          H5d+HWVeqhGpThc3fOBRvP+Tkx3QVxg/ilpOvBIl0u8=
Subject key identifier:   1B:BC:5E:FB:C8:AA:4F:A3:FD:70:85:35:83:97:1C:F4:2E:8E:03:14
Authority key identifier: B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
Certificate issuer:       /CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Certificate serial:       01962A4E0AE79B8E6C3FE7A329B6F268F951
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
Manifest number:          14E9
Signing time:             Sat 12 Apr 2025 14:01:19 +0000
Manifest this update:     Sat 12 Apr 2025 14:01:19 +0000
Manifest next update:     Sun 13 Apr 2025 14:01:19 +0000
Files and hashes:         1: QdWm_iYTkmRwOlae6fa_m0n_xoY.roa (hash: GAwdxYROZcqJfJWKya6QGN1+Dp1F3FkjXyRiudeAVk4=)
                          2: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl (hash: BpLNeFJEnhcRmubWiVlCiJ6D4qdQXaN6/5VMXhmOaTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2a:4e:0a:e7:9b:8e:6c:3f:e7:a3:29:b6:f2:68:f9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
        Validity
            Not Before: Apr 12 14:01:19 2025 GMT
            Not After : Apr 13 14:01:19 2025 GMT
        Subject: CN=1bbc5efbc8aa4fa3fd70853583971cf42e8e0314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:82:ff:eb:07:7a:2c:b4:b3:8a:36:f1:50:d3:
                    5d:d7:42:60:b2:d8:d2:7a:bb:de:55:52:85:42:0c:
                    eb:d5:7a:7e:73:2d:40:a8:48:29:49:a3:de:76:a5:
                    7f:f9:39:b9:8a:7d:a7:94:bb:7f:4a:07:97:3e:36:
                    46:1e:1a:4a:aa:61:ef:75:e1:6a:93:1e:b5:17:65:
                    8c:cd:5c:69:8a:eb:4a:b7:5c:86:72:fb:79:fc:aa:
                    4d:f0:c0:48:5d:77:dc:ad:7b:b0:ea:5c:c2:04:64:
                    bb:65:3e:09:fd:15:6e:21:df:4d:e3:32:d8:fe:6a:
                    d4:33:e4:2e:b6:e3:6e:13:26:02:77:bd:23:81:86:
                    73:6f:8b:f7:5c:2b:b3:eb:24:00:3e:0a:d8:be:1e:
                    fd:2c:8b:6c:97:fb:a4:47:a4:b4:2d:af:7a:70:98:
                    0b:22:49:34:88:23:e7:f6:b1:22:69:c0:13:77:da:
                    ea:97:42:54:27:0f:92:66:aa:21:db:be:a6:f8:ad:
                    32:23:f0:51:b2:a2:11:27:19:2c:75:2f:04:16:85:
                    49:6f:0c:12:c9:09:7d:cb:20:4f:83:82:4e:a1:7c:
                    d6:c1:f1:03:0f:55:a8:4a:03:56:9a:6c:41:64:17:
                    27:77:50:00:2d:01:c9:a3:7b:3a:49:fa:a2:57:81:
                    59:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BC:5E:FB:C8:AA:4F:A3:FD:70:85:35:83:97:1C:F4:2E:8E:03:14
            X509v3 Authority Key Identifier:
                keyid:B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d2:e0:0b:eb:f4:80:8c:b4:1d:af:49:c9:c2:af:f7:0e:5a:
         ca:54:70:fc:ac:68:33:ab:ed:86:4e:4a:9b:86:6d:c0:d3:58:
         a3:d1:3f:87:ba:be:5f:a0:a0:ab:86:9b:93:50:4d:c7:43:aa:
         cb:2f:4b:3d:c9:58:0d:4c:87:5d:d1:42:54:4d:8d:b2:ee:8b:
         bf:fe:11:65:61:7f:25:34:dd:dd:3e:2b:b3:8d:4a:d3:e6:61:
         23:1e:bd:6e:33:e7:6b:0c:f7:83:c7:20:63:ba:74:fc:b2:97:
         11:f7:8c:d4:57:80:66:22:96:1d:50:91:95:05:ad:a0:bf:50:
         75:19:f1:18:85:19:de:ab:db:0f:d1:8e:5e:45:1d:74:10:31:
         0c:89:8d:db:5a:ae:70:12:f2:af:1a:03:1d:df:ce:ae:03:f7:
         cb:bc:66:00:bf:29:70:ec:9d:ad:0e:54:f8:39:d8:fd:2e:de:
         fc:be:7e:3f:5f:f2:7f:2a:a1:bc:8f:22:ce:9c:40:0a:09:b0:
         3e:c6:8b:a0:24:53:64:93:4f:59:de:da:22:bc:74:50:d6:bf:
         ed:38:c7:40:05:5a:b7:89:6d:44:d5:b0:d9:88:c3:9d:99:46:
         a7:ab:ff:bf:7f:0d:a2:ba:2b:43:f5:c6:82:de:95:cf:91:58:
         81:8d:40:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:29:49 2025 by rpki-client