Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
File:                     1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft (raw, json)
Hash identifier:          6M6ZHkIokANX/2fcv+0qFLXNercw5SJtCgEaucT6CXw=
Subject key identifier:   DA:35:AD:67:79:5F:E6:E2:C6:F3:7F:EF:57:D6:C7:1D:27:A4:53:FC
Authority key identifier: D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
Certificate issuer:       /CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Certificate serial:       01963F1DCC4FAD95E4276049425C8273BDF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
Manifest number:          14F2
Signing time:             Wed 16 Apr 2025 15:00:39 +0000
Manifest this update:     Wed 16 Apr 2025 15:00:39 +0000
Manifest next update:     Thu 17 Apr 2025 15:00:39 +0000
Files and hashes:         1: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl (hash: +AjjMhSOO9VhZ24waF2S+TgorXtnF6+s+BqMQGGINpk=)
                          2: qflKZTF3zhSp7clCgQY6deaVcuQ.roa (hash: YrrT0H2VFpPiuVpFBvUMkkYVOwRQGbWJWicWDvr4Ns0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:1d:cc:4f:ad:95:e4:27:60:49:42:5c:82:73:bd:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
        Validity
            Not Before: Apr 16 15:00:39 2025 GMT
            Not After : Apr 17 15:00:39 2025 GMT
        Subject: CN=da35ad67795fe6e2c6f37fef57d6c71d27a453fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:02:93:03:0e:ce:b3:ed:3d:8c:76:0b:70:f8:
                    c2:2a:84:da:56:48:2f:18:d8:55:63:8c:31:e2:b3:
                    18:7a:b7:39:65:18:18:4d:30:ea:ca:88:9f:54:19:
                    16:51:97:5d:c3:8e:e8:b1:e6:8e:a1:3b:d5:51:1a:
                    bd:a9:a5:46:fa:8f:e8:03:6b:44:e1:38:be:d2:49:
                    8f:00:62:92:8c:f8:72:58:7b:fb:34:82:76:7c:62:
                    ba:fc:ee:53:2a:12:61:8e:04:c7:82:b4:16:cc:fd:
                    8d:fd:e6:b5:ce:03:53:2f:e3:80:63:6a:96:0e:13:
                    d7:98:49:65:e1:8b:be:44:d7:fd:c9:41:c9:91:c7:
                    d3:df:fb:b8:96:15:16:be:c8:c4:6f:63:27:d5:79:
                    a6:4b:69:d0:75:04:df:de:5c:f5:d9:c8:f3:32:e8:
                    5d:56:61:69:e0:22:ec:53:8b:18:14:3c:3d:40:06:
                    37:04:da:bb:7e:0b:d4:63:72:57:bc:ff:3c:d8:0e:
                    00:ee:be:49:23:8f:62:f4:10:82:93:91:01:f2:b7:
                    45:ac:83:de:1c:87:0c:ae:27:e2:64:09:5b:50:4d:
                    12:4a:99:59:78:7c:29:27:9f:56:c5:ce:39:75:0b:
                    17:f9:ad:a4:7e:d4:5f:ee:1e:05:94:35:d3:03:cd:
                    92:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:35:AD:67:79:5F:E6:E2:C6:F3:7F:EF:57:D6:C7:1D:27:A4:53:FC
            X509v3 Authority Key Identifier:
                keyid:D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:6e:76:98:a4:83:4c:43:59:66:95:eb:44:99:2e:25:86:9c:
         b5:81:36:a1:1c:52:ce:17:6f:d5:15:85:53:c1:78:74:ac:3f:
         5a:fc:ce:12:6c:6c:4a:cf:c0:50:5e:1b:8e:d5:d1:42:78:af:
         18:68:03:83:cb:bf:8a:56:35:a5:5e:c3:53:0c:c4:78:6f:b9:
         01:33:40:0f:3e:9a:57:26:6e:df:95:cc:a2:51:7f:25:a3:42:
         fe:a4:56:ed:79:74:37:51:3b:60:64:41:e5:e0:0d:65:ed:7b:
         be:d1:7b:a0:9f:90:ce:64:17:79:23:97:d8:1c:f3:31:42:5b:
         c1:f1:73:ee:7c:bd:3e:ad:39:23:ae:51:e5:47:a7:26:c0:b7:
         06:fd:63:38:53:88:83:71:bb:75:db:94:20:5d:03:4b:81:ab:
         06:34:6e:c8:4e:74:86:28:7e:cb:68:a7:c3:c9:9d:f3:36:68:
         ee:3f:a8:0b:78:15:1b:82:81:37:7b:ce:4b:f2:db:a9:fa:83:
         f3:25:73:9c:13:ad:5a:bb:be:3c:22:fd:9d:d0:8a:c7:ca:63:
         47:f7:98:90:5f:2c:c4:41:d9:c6:9c:32:6f:88:29:f2:94:33:
         97:79:47:9c:4d:06:55:f7:69:8c:a2:49:1d:69:f4:51:14:86:
         06:04:ab:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:54:15 2025 by rpki-client