Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft
File:                     mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft (raw, json)
Hash identifier:          Oje48chPrvWAVwWId9MXxEb4k21fj8Z14ORnUdIZNhU=
Subject key identifier:   61:30:87:BE:51:1B:45:65:D9:B1:4F:93:C6:6C:A1:63:B1:25:27:2B
Authority key identifier: 98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00
Certificate issuer:       /CN=987b6812cf7a074580f5942be762f477f67c9500
Certificate serial:       01964EFE91AC36605BD86F9B83436E2F859C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft
Manifest number:          14FD
Signing time:             Sat 19 Apr 2025 17:00:28 +0000
Manifest this update:     Sat 19 Apr 2025 17:00:28 +0000
Manifest next update:     Sun 20 Apr 2025 17:00:28 +0000
Files and hashes:         1: mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl (hash: O+yKAr2abZUyiWXCwCQV3RiYR/ZaXZ2Pj1bhFuJ7tno=)
                          2: s3dIm20GepVqtr86hU4U0PO_ew8.roa (hash: IACsMI0iHVIsWExBAgSS418a6ZTtpolE9FZ0jLsNao8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:fe:91:ac:36:60:5b:d8:6f:9b:83:43:6e:2f:85:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987b6812cf7a074580f5942be762f477f67c9500
        Validity
            Not Before: Apr 19 17:00:28 2025 GMT
            Not After : Apr 20 17:00:28 2025 GMT
        Subject: CN=613087be511b4565d9b14f93c66ca163b125272b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:dc:0e:13:3e:e3:5f:b1:71:ad:29:5c:59:ed:
                    34:96:4d:2d:58:7b:5a:75:59:bb:e5:e1:6f:5a:14:
                    15:1a:91:4e:f2:1d:5e:68:10:58:70:3f:08:7e:4e:
                    13:8a:8f:aa:0b:db:65:0f:7b:22:24:dd:03:16:07:
                    ce:79:25:de:ad:1d:13:d4:e9:49:47:52:96:06:e6:
                    79:bd:ce:de:2f:29:bf:6a:ec:74:33:92:a0:91:f5:
                    f0:a1:69:9c:f4:da:73:2b:30:37:d5:57:aa:6f:5e:
                    a4:68:fb:7a:36:89:e7:63:54:0f:4e:c9:5e:d5:9b:
                    8d:0e:51:f6:38:7a:9e:05:f1:2b:c2:59:a3:b8:c7:
                    4b:21:14:f4:c5:3f:f6:b4:33:b3:0d:5f:47:1b:a6:
                    cc:73:88:52:a3:ce:56:e1:6a:ea:1d:0a:bb:df:7f:
                    31:96:49:7c:dc:81:71:6b:26:3b:39:b8:cd:24:c7:
                    46:ea:1d:f8:6c:99:ff:b7:e1:10:76:1e:bb:be:99:
                    be:96:79:8e:18:71:28:a9:77:9a:c0:96:c4:fd:2c:
                    e6:d2:9a:73:05:76:91:1a:59:94:f2:57:34:08:8c:
                    fe:d6:eb:41:d9:60:08:c0:f6:ab:53:67:b4:a6:82:
                    de:49:d4:46:29:7f:24:fb:59:09:f9:dc:94:3d:9c:
                    ff:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:30:87:BE:51:1B:45:65:D9:B1:4F:93:C6:6C:A1:63:B1:25:27:2B
            X509v3 Authority Key Identifier:
                keyid:98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:30:f7:01:f3:6c:bd:f4:52:2c:e0:fc:65:37:13:23:da:af:
         b8:46:4d:32:56:50:f9:1d:02:42:67:da:89:79:c8:4b:b1:30:
         ce:ec:5e:9e:e3:ee:80:18:5f:9c:b0:c7:e3:ac:fa:a2:14:dd:
         62:d3:b0:8e:27:4b:1b:2f:ac:9b:e9:a3:29:7a:fe:38:3a:44:
         47:a1:ff:25:fc:9a:32:23:78:66:42:5b:56:ac:67:95:db:c4:
         75:e1:37:49:4e:df:3c:8e:ab:3d:f0:2b:97:e9:b6:f4:56:0e:
         56:59:5c:96:6b:66:0c:76:6f:b9:c4:4e:72:57:41:46:41:9f:
         3f:c7:cc:52:88:58:15:4d:70:5d:1c:db:9a:37:2b:7f:83:4c:
         9c:0a:af:84:44:f3:32:bd:4e:7b:8b:03:e6:7a:4a:90:8f:3b:
         42:29:83:dd:7d:7b:0d:44:f1:88:98:4a:22:03:14:c2:4d:de:
         5e:fc:3a:8f:d9:46:f9:b7:82:2c:08:ed:6e:46:cc:60:67:0e:
         33:1a:7d:03:f2:b9:a7:c5:96:6a:ec:99:64:0f:aa:24:8e:50:
         92:7f:b5:91:18:d6:cf:81:b6:40:c4:1d:2f:ac:67:23:d8:fe:
         6e:6d:3b:0d:c3:7a:c4:03:db:2a:e2:34:7f:e4:d2:46:ac:f6:
         05:cb:8a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:03 2025 by rpki-client