Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
File:                     zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft (raw, json)
Hash identifier:          3/47NP3EtQQQZJUQFis4T7LSRSE23Ct2GDt8uVKdcec=
Subject key identifier:   83:26:AB:8D:3F:EE:73:04:07:35:E6:13:E1:1F:D9:5A:31:9F:67:2B
Authority key identifier: CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
Certificate issuer:       /CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Certificate serial:       01965537C82CD797394F1718F76ACEDA3B6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
Manifest number:          14FE
Signing time:             Sun 20 Apr 2025 22:00:41 +0000
Manifest this update:     Sun 20 Apr 2025 22:00:41 +0000
Manifest next update:     Mon 21 Apr 2025 22:00:41 +0000
Files and hashes:         1: 6jUnw4ABLZRGWLZ3VvsECujZOn8.roa (hash: 80lSH+cuu92XEp7oB7l+5noYKD/CLX9ilJo36guu33A=)
                          2: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl (hash: 479CPVyszEjDUTk4jDJlOO6fIRgNlztQdrf4cne62sk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 22:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:37:c8:2c:d7:97:39:4f:17:18:f7:6a:ce:da:3b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1c5bea595d890f21307c1b336519fb0edc089c
        Validity
            Not Before: Apr 20 22:00:41 2025 GMT
            Not After : Apr 21 22:00:41 2025 GMT
        Subject: CN=8326ab8d3fee73040735e613e11fd95a319f672b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3b:a5:ca:91:6b:62:79:af:c3:04:9e:3b:33:
                    0d:ec:60:1c:82:84:18:ed:af:bf:94:2a:68:46:4a:
                    8f:68:a9:82:5e:18:c2:17:fa:14:0b:da:69:a8:d3:
                    6e:c4:a5:e3:39:5b:ca:55:6c:6a:d5:8c:f6:c5:52:
                    4a:72:33:58:e3:d0:41:48:55:f9:ed:26:c8:75:bf:
                    b6:88:eb:76:d8:42:d9:c9:06:11:62:32:2b:8b:68:
                    ee:c7:d2:f4:f9:09:69:1a:cd:69:04:4f:fa:02:6f:
                    99:dd:ba:47:f0:fb:49:df:1a:c0:88:c6:4d:ed:31:
                    dd:8a:9f:0a:63:6e:91:6a:22:a9:46:d0:be:2c:a5:
                    10:09:75:7d:d2:66:d0:9a:3c:74:da:fc:73:4b:a0:
                    c7:7b:61:85:35:da:89:cc:ff:cb:3f:41:c7:64:9b:
                    fd:9e:c0:0c:59:cd:02:dd:39:61:45:c8:ed:51:fa:
                    40:f6:ba:89:3f:84:d4:0e:7d:df:ec:b7:53:a1:94:
                    24:f8:93:59:a9:af:48:9c:13:77:3d:ec:45:33:ba:
                    c7:72:dc:03:02:6c:b7:df:fb:8f:9e:c1:fd:e6:86:
                    35:14:22:5a:74:37:e9:d1:45:e2:d7:74:8a:e1:b6:
                    e2:2e:07:be:c8:f6:7c:46:a5:2d:ac:4d:10:e0:13:
                    42:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:26:AB:8D:3F:EE:73:04:07:35:E6:13:E1:1F:D9:5A:31:9F:67:2B
            X509v3 Authority Key Identifier:
                keyid:CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:4b:86:de:5e:2c:f4:98:b0:97:0d:68:ae:25:18:af:58:49:
         76:b7:23:9c:3a:55:93:9c:6b:27:95:ac:00:7e:75:1d:18:ae:
         a7:ea:e3:71:d6:a7:49:8e:a1:c9:45:fe:1f:14:b9:17:a9:82:
         f4:93:93:0c:08:1d:d7:ab:45:e3:18:93:f9:88:8f:bd:51:2f:
         b0:76:f1:db:a0:49:fb:87:db:48:d1:60:1a:52:55:1d:a3:22:
         21:3b:74:e1:d3:25:9f:92:93:c1:52:00:0b:6f:1f:fc:c6:2a:
         2c:7d:e0:26:60:07:0f:0f:ef:43:a8:8c:5c:9e:e3:0e:ae:3a:
         09:28:c1:b4:c9:94:50:79:3b:31:cb:b2:35:fa:de:52:0c:3a:
         38:d9:b5:d9:8e:34:e3:8f:2e:64:c1:e0:e1:13:2c:bd:d8:5b:
         10:ec:ac:18:44:fc:37:58:22:ff:51:8b:68:ac:0d:68:f3:9c:
         2c:9e:2d:de:e0:3e:fb:c7:77:1e:83:50:f3:28:f3:ec:6a:9f:
         b8:c8:7c:64:a1:ae:a4:59:3a:40:d7:d8:26:d7:28:6f:32:21:
         f7:f3:2c:62:b6:37:d2:15:a2:55:e9:33:7e:56:94:df:b8:85:
         6d:08:c3:c7:38:a8:cc:be:1d:24:39:41:d5:8f:1a:08:99:6c:
         5a:d3:53:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:32 2025 by rpki-client