Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
File:                     121x2IRdL-KWpG15F29ZDY208Wo.mft (raw, json)
Hash identifier:          NRZJyfLkR2/a4EPlMVvQmxk/eQ6IYI3WhHByQa0fNEY=
Subject key identifier:   EB:2C:87:02:C4:7E:29:62:F6:38:E3:F1:15:A6:D1:C2:BB:94:1C:C2
Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
Certificate issuer:       /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Certificate serial:       0196447B12F5DA53272EB6107888A8CC1B5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
Manifest number:          14FD
Signing time:             Thu 17 Apr 2025 16:00:38 +0000
Manifest this update:     Thu 17 Apr 2025 16:00:38 +0000
Manifest next update:     Fri 18 Apr 2025 16:00:38 +0000
Files and hashes:         1: 121x2IRdL-KWpG15F29ZDY208Wo.crl (hash: kM4muPL1IEO0wxUwlol1y7pTXKyp4afYZotfy8WsSO8=)
                          2: vtQbm6_VRhmLRi0RHGDc9fplBTM.roa (hash: eADEScAIa4bIWKJyJycVlqpQxZJCdFWOZOPAomMNKiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:7b:12:f5:da:53:27:2e:b6:10:78:88:a8:cc:1b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
        Validity
            Not Before: Apr 17 16:00:38 2025 GMT
            Not After : Apr 18 16:00:38 2025 GMT
        Subject: CN=eb2c8702c47e2962f638e3f115a6d1c2bb941cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:54:b1:e2:52:9e:d8:ae:81:a6:fe:de:f8:96:
                    33:92:45:55:db:fc:b6:18:64:4c:18:10:83:91:80:
                    9d:17:54:77:b6:73:8e:d6:3e:97:8d:21:d6:65:85:
                    97:9a:88:6b:9b:84:e8:f5:e1:a4:87:f4:3b:65:a1:
                    89:d2:09:21:4c:89:5b:9a:0d:df:fa:2d:a7:09:7a:
                    ec:09:1d:ee:97:54:14:9f:c7:8f:60:7e:fb:d1:45:
                    0a:aa:a0:36:c4:ed:ff:30:bc:3b:69:72:6a:fe:e3:
                    39:f2:13:94:88:6b:cd:20:4d:a7:27:5d:72:48:57:
                    df:e5:12:c1:a2:72:1f:43:26:b5:9c:36:31:a7:76:
                    2f:b4:4e:54:08:9e:77:54:0c:49:ae:9e:6e:59:7e:
                    53:ba:7e:d0:3e:80:e7:2c:10:18:17:ab:eb:fc:e9:
                    07:bc:46:1b:90:a4:ad:75:16:d1:83:c1:73:31:c1:
                    dd:a6:a8:0c:da:30:ee:8e:2f:17:16:c4:f4:68:dc:
                    bd:5f:73:7d:7e:d9:dd:a1:3f:d7:10:48:7b:8f:40:
                    af:3f:5f:29:a7:cc:43:41:51:d9:65:c0:61:a6:67:
                    55:fe:fa:25:b8:95:58:55:11:69:81:dd:80:f9:c3:
                    92:48:c4:25:49:e1:35:14:aa:67:ea:3d:fe:fa:00:
                    21:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2C:87:02:C4:7E:29:62:F6:38:E3:F1:15:A6:D1:C2:BB:94:1C:C2
            X509v3 Authority Key Identifier:
                keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f7:ac:b3:5d:c9:d5:a5:ff:17:94:f3:e0:6a:d0:7b:70:9d:
         e9:36:cb:35:9e:b1:c9:7c:49:d4:6e:ee:d7:49:7b:b8:5c:65:
         02:f6:dc:68:fe:3f:ca:a6:e0:af:84:23:22:5b:19:a4:27:fc:
         9f:4d:4a:c5:88:a9:f8:c5:08:8a:cd:35:c1:64:fe:d6:ca:30:
         fc:d2:f4:a3:4d:2c:6b:91:30:73:fc:36:6b:a5:db:f7:8a:c4:
         0d:80:45:c6:a7:61:e8:eb:3f:3e:49:c7:f4:b3:0f:28:84:dd:
         8b:60:92:12:fd:2f:77:05:f2:a3:50:5b:cd:3f:d6:63:bb:87:
         25:00:a0:cc:ef:70:3f:27:c7:70:83:43:39:cd:8b:9e:c9:00:
         43:0f:ba:4a:67:30:8c:e2:d5:c5:15:d0:94:c2:12:3e:5d:60:
         dd:f5:e6:03:5e:fb:1a:a3:a3:db:40:34:ea:76:a9:fb:c7:5f:
         1c:ad:ed:3c:8f:e2:a4:c0:6d:11:c9:7d:67:c6:5e:e6:40:3a:
         6e:b0:be:f4:a3:23:6f:df:11:89:53:04:a2:00:0b:f2:b9:77:
         c8:cb:3b:28:b1:1e:38:11:c6:66:09:50:67:68:5c:37:9b:17:
         7d:23:6b:ec:1f:a0:dc:a0:0b:39:02:04:d5:c6:fc:38:0e:4a:
         cb:21:65:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:49:45 2025 by rpki-client