Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
File:                     e-CvRatOV0VvWgpA36hPjYBhBmQ.mft (raw, json)
Hash identifier:          R9A9kUPfuPSVx0ShANE1VN8zq1LGd3so/9YCqchfBaA=
Subject key identifier:   C4:42:88:AF:68:AC:4E:FB:73:9A:B0:68:6A:07:87:B3:49:BA:3A:12
Authority key identifier: 7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
Certificate issuer:       /CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Certificate serial:       01962896DFF442710BF2C053770C02467C4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
Manifest number:          14E8
Signing time:             Sat 12 Apr 2025 06:01:38 +0000
Manifest this update:     Sat 12 Apr 2025 06:01:38 +0000
Manifest next update:     Sun 13 Apr 2025 06:01:38 +0000
Files and hashes:         1: L3EzGRS_cQiiqxRcr6-IVlPq90c.roa (hash: WyhkbKAlOi0tYeIJPyH0sVoGZlIljn2uVDmX+5Mz2XM=)
                          2: d3-nUmhWPxilxJYRIxnkrR3tjhI.roa (hash: nCRP7GSY9Gpb6j6rYf+Ya74feBJgqnxBiBarST+uqyM=)
                          3: e-CvRatOV0VvWgpA36hPjYBhBmQ.crl (hash: tXaSBKcRqjVR7Rhu5eTupALw9hYfxSxwwIo/+HiGGRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Apr 2025 23:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:28:96:df:f4:42:71:0b:f2:c0:53:77:0c:02:46:7c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
        Validity
            Not Before: Apr 12 06:01:38 2025 GMT
            Not After : Apr 13 06:01:38 2025 GMT
        Subject: CN=c44288af68ac4efb739ab0686a0787b349ba3a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:33:2d:7a:b9:79:b6:8a:29:57:1f:87:9e:ca:
                    62:45:4f:50:13:c9:39:43:86:34:17:c9:d2:ee:35:
                    ff:a8:f2:4b:f7:e3:92:2b:86:67:d2:99:ed:91:a4:
                    91:3f:04:ae:df:2e:25:d6:87:85:d2:19:2d:9c:1b:
                    97:89:d3:2d:aa:ce:c7:57:59:fc:63:95:78:c4:b7:
                    d2:e8:7b:ae:fb:b8:e0:a7:79:3f:2b:98:56:a9:c3:
                    2f:1e:c3:d8:17:d7:57:31:35:3f:9c:da:bf:38:b7:
                    a9:9e:72:42:d5:55:c2:4f:5d:58:2f:1c:80:41:1b:
                    2b:48:73:ee:7e:72:f3:b5:c0:cf:93:75:d2:c6:f4:
                    bc:04:dd:db:6d:00:85:d1:b4:db:aa:9a:fd:41:83:
                    9e:54:d5:d9:2d:37:12:91:51:fb:db:79:97:86:4e:
                    c5:e5:61:c3:e3:38:d5:d4:8d:40:ff:66:9f:34:ce:
                    95:e3:18:c2:31:1e:1f:14:45:86:a9:0f:ae:b1:23:
                    89:e5:11:cc:7a:ab:8f:5a:f6:60:9b:78:d7:91:18:
                    e9:a0:92:96:d8:aa:27:22:15:7e:08:20:7b:df:a5:
                    38:fa:5e:0a:8d:4c:75:97:88:5b:43:31:b4:99:44:
                    58:72:b4:93:43:73:24:28:a3:28:97:0f:39:29:4e:
                    b5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:42:88:AF:68:AC:4E:FB:73:9A:B0:68:6A:07:87:B3:49:BA:3A:12
            X509v3 Authority Key Identifier:
                keyid:7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:71:7f:dd:8b:ac:39:54:b4:a6:76:1a:38:a5:cc:0c:05:1b:
         e1:64:d2:2e:46:cb:dc:02:55:2b:e9:9d:b0:ef:1a:41:e7:45:
         93:b7:77:e1:cb:4e:1d:28:28:52:87:86:67:45:3a:82:93:40:
         00:a0:09:91:f0:c9:a4:5a:ff:e6:a2:16:3d:b5:ce:fe:3f:12:
         7d:f9:fd:fb:7b:c5:af:25:f2:c8:58:92:3e:44:a9:f4:26:f3:
         d2:69:bf:31:0c:4b:c6:6d:bc:9b:61:41:c9:5d:86:1e:0a:b5:
         9b:cb:ab:13:5e:6d:6f:d4:73:c4:e1:4c:ae:a5:ef:88:ca:19:
         53:69:3c:e9:16:8c:cf:7d:3e:81:9b:65:87:75:78:20:6d:af:
         de:ba:f1:71:36:08:a0:0d:82:b0:2f:c2:ab:8f:a0:e8:dd:06:
         3e:59:e5:67:40:18:d2:c3:72:ff:76:d6:00:d6:25:f8:c9:22:
         d5:8e:bc:d2:d1:61:90:01:72:23:3d:b8:b4:b5:dc:ad:43:c6:
         0c:7d:a8:4b:47:04:52:3e:4d:8d:ef:6d:0a:17:95:f2:56:cb:
         38:a7:50:00:f0:8e:6f:88:ac:6f:a8:4a:c6:02:0c:17:ae:3a:
         c5:f3:f6:f9:8a:f4:87:f9:d8:9a:d6:9b:92:0c:d6:92:12:16:
         bc:9b:88:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:47:23 2025 by rpki-client