Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
File:                     1pI99NrpGVDPANI1_jngDuo4FtI.mft (raw, json)
Hash identifier:          6bMRg2nUMW+gOd9Kxt1PXTxUs8k4XjEaHqYpO42CQCM=
Subject key identifier:   17:D7:48:88:DA:34:FB:4D:BE:FA:93:23:22:32:17:17:14:CE:72:D4
Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
Certificate issuer:       /CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Certificate serial:       0196458D8873D4F48906CFE8A78F0810963D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
Manifest number:          14F6
Signing time:             Thu 17 Apr 2025 21:00:25 +0000
Manifest this update:     Thu 17 Apr 2025 21:00:25 +0000
Manifest next update:     Fri 18 Apr 2025 21:00:25 +0000
Files and hashes:         1: 1pI99NrpGVDPANI1_jngDuo4FtI.crl (hash: ZkVQjjBef1vXO9M9OR5qc+/Np8vrhH2rwCBpslV/OVA=)
                          2: DiWaQ483B87mmH9xBQjUT-gKREU.roa (hash: +HNilVQSXx0rRIqto+Np0Fi3ncazRRex3uQcgtaQ1OY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:8d:88:73:d4:f4:89:06:cf:e8:a7:8f:08:10:96:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2
        Validity
            Not Before: Apr 17 21:00:25 2025 GMT
            Not After : Apr 18 21:00:25 2025 GMT
        Subject: CN=17d74888da34fb4dbefa93232232171714ce72d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bc:a6:e6:c3:f4:2f:83:a0:c1:1c:9f:2c:68:
                    87:dc:b1:79:25:fd:6f:76:0d:0f:53:75:be:4f:e9:
                    99:66:58:89:9d:e8:3c:54:b3:18:7b:93:dd:cc:05:
                    b1:42:57:88:6c:24:a5:2c:e9:cc:4b:4d:6d:98:88:
                    5e:25:30:78:94:a3:a0:e9:1e:0b:81:75:04:28:f1:
                    85:0c:03:0d:aa:e8:b7:6e:3a:5e:bc:89:37:c6:33:
                    81:59:99:0d:35:5a:7e:e7:15:38:56:9e:53:56:d2:
                    43:92:d7:ee:67:0c:01:b6:a7:b1:da:1f:cf:86:91:
                    a7:46:8b:3f:47:8f:e8:7b:c8:c2:b1:e9:dc:46:a2:
                    ce:40:45:7e:bc:4c:80:c0:24:60:90:ea:62:43:b2:
                    5d:c9:21:76:f0:f3:7f:fb:f2:7d:c7:0d:ea:ee:22:
                    56:bd:aa:0e:20:43:e0:64:66:4b:c3:1d:7d:50:7c:
                    7e:ee:b4:ef:b5:f0:58:d1:b6:0a:54:09:e9:7a:bb:
                    47:28:e7:18:45:4c:de:b0:ba:2e:88:7c:a8:7e:d4:
                    63:bf:fc:63:c7:20:cc:b5:1d:4a:af:3f:30:bd:ec:
                    c8:74:db:f9:a2:98:1b:42:60:71:5b:4b:d1:d1:f0:
                    8d:ff:c8:b2:54:9d:ec:4d:69:4d:b8:56:c0:a4:f0:
                    96:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D7:48:88:DA:34:FB:4D:BE:FA:93:23:22:32:17:17:14:CE:72:D4
            X509v3 Authority Key Identifier:
                keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f1:f5:3c:5c:36:02:d9:38:a4:c7:16:53:27:88:92:44:54:
         d4:42:12:fb:14:14:a8:66:03:1a:95:df:5b:33:03:6b:fa:a3:
         c1:f2:1a:8c:a4:84:0b:2f:64:ce:65:e2:cd:44:05:a2:b3:3a:
         d0:32:35:9c:d8:15:76:e4:2d:de:af:31:61:e0:be:0a:c4:88:
         0e:3f:10:2d:44:91:6f:33:e9:5f:80:bd:b3:a4:2c:2b:db:5c:
         72:0e:94:94:2e:ea:c3:49:ed:ea:58:48:05:a2:9f:cf:d5:61:
         f0:ab:cc:d2:f2:97:24:3c:4e:33:15:13:75:7e:bb:68:8b:d7:
         a7:da:47:91:49:7b:4c:c4:a0:be:c0:70:e6:bd:b8:0c:22:15:
         12:fc:d3:f5:f7:28:3a:b6:81:98:01:42:6c:27:a3:65:79:97:
         e3:12:b7:6e:07:b6:f3:8c:44:f1:f4:e5:b2:cc:71:3a:54:ab:
         b7:74:b9:52:77:55:97:fa:47:b4:7f:29:47:18:df:5d:34:7c:
         0c:48:46:ad:4d:88:65:a5:6c:c8:b0:94:18:78:70:74:6d:8b:
         67:cb:62:87:46:57:6f:93:bb:a1:a6:56:6b:6e:42:d2:9d:e2:
         cc:1b:11:f1:1b:04:b0:56:3f:3e:ec:0f:c1:c4:11:d4:eb:7b:
         8b:4a:8c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:15:02 2025 by rpki-client