Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
File:                     dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft (raw, json)
Hash identifier:          6JasjWMtYG7MGtQMtT7xKt/S2eQD6Oydo2BRoke3bcc=
Subject key identifier:   4D:1C:C8:69:B4:A7:56:0F:E0:DD:69:8A:5D:83:7D:5E:DE:EE:E4:20
Authority key identifier: 74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64
Certificate issuer:       /CN=749ea3b1e58ba060b41fc2a078f6016264759664
Certificate serial:       01964D46FC368CCA67497FEDA0F2A56EA071
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
Manifest number:          14FB
Signing time:             Sat 19 Apr 2025 09:00:19 +0000
Manifest this update:     Sat 19 Apr 2025 09:00:19 +0000
Manifest next update:     Sun 20 Apr 2025 09:00:19 +0000
Files and hashes:         1: 8ufIDITsiM6oD6O8MQCNfNFjxSc.roa (hash: 8hR826cHBgGmwXj/DW4UGY4gM4QS8fSh6KW7UDD9poY=)
                          2: dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl (hash: VQsVu2XX+N/OWsSdTIRZsLtARr3uKBuh5GZ8wEfMkMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:46:fc:36:8c:ca:67:49:7f:ed:a0:f2:a5:6e:a0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749ea3b1e58ba060b41fc2a078f6016264759664
        Validity
            Not Before: Apr 19 09:00:19 2025 GMT
            Not After : Apr 20 09:00:19 2025 GMT
        Subject: CN=4d1cc869b4a7560fe0dd698a5d837d5edeeee420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b4:c8:17:fa:32:4d:3c:17:50:05:75:1b:4e:
                    c7:ea:0b:83:4d:4e:6e:04:46:53:df:30:53:8c:9c:
                    6c:52:8e:bb:c3:13:3b:0a:c1:6b:1f:0c:95:52:9e:
                    12:a7:2a:db:90:11:64:48:37:57:a3:ff:82:21:f2:
                    1e:ff:1c:51:25:86:6a:26:5d:04:a7:68:70:05:72:
                    06:c3:5c:6a:0a:50:38:fb:6b:ab:c2:1b:0e:45:62:
                    73:a1:75:b5:27:4a:44:6a:0d:e9:d0:79:50:47:3f:
                    ad:a3:60:d3:50:ea:62:ab:1b:43:25:8a:be:29:e0:
                    44:b3:2f:df:7b:f5:0d:04:8c:93:64:ee:41:47:4e:
                    af:33:58:a7:f4:84:5c:f2:04:6f:64:52:24:c5:7c:
                    54:c9:6e:17:e0:92:4b:a0:c6:7c:15:f7:86:62:ba:
                    8c:21:9e:9f:3f:e7:03:3b:b0:0f:37:88:1c:be:f2:
                    e1:3a:c2:23:ec:2a:07:12:f0:96:8b:89:c7:db:ba:
                    ce:64:e5:82:6e:e3:e7:1c:ba:aa:ce:a9:01:e7:b7:
                    44:94:55:1c:50:3a:f5:ce:45:64:3c:10:cf:57:17:
                    85:2a:89:92:2d:c1:41:ce:fb:eb:d1:36:a3:d8:d9:
                    e7:37:df:ba:a6:31:81:bb:6c:4b:cd:8c:c6:7a:78:
                    d8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1C:C8:69:B4:A7:56:0F:E0:DD:69:8A:5D:83:7D:5E:DE:EE:E4:20
            X509v3 Authority Key Identifier:
                keyid:74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:09:6c:72:1c:4b:aa:ac:12:33:88:bf:7f:d9:9c:c5:61:7e:
         a5:6d:c4:9f:29:62:24:b6:23:31:3e:15:33:be:6e:9f:1b:17:
         88:5b:88:47:29:73:95:ac:cd:e5:62:b6:a6:4d:4f:35:83:17:
         51:c2:16:16:5f:62:11:10:3b:95:b1:51:93:42:46:61:5c:b6:
         10:f5:92:b1:2d:f9:91:c8:80:c8:23:17:33:bd:c7:e7:f6:4e:
         91:23:de:12:6e:d8:72:f2:12:11:cf:6e:85:49:e9:b4:3e:16:
         72:73:8c:f0:68:da:af:d7:58:0f:aa:4f:37:cf:52:8e:e9:f9:
         2e:b1:ac:07:31:64:ac:7c:70:08:7e:b5:07:88:5e:39:a3:e2:
         6c:11:9d:e6:25:90:21:5c:d3:00:44:31:04:1d:c2:05:e5:48:
         43:2b:f1:47:49:ed:0d:bb:d4:b9:48:e4:70:a4:1c:e4:aa:72:
         e9:7b:a0:e6:e0:33:50:40:a9:be:36:4c:9d:99:42:b9:ec:2b:
         93:48:31:49:ee:d6:87:c0:cc:2a:11:eb:d9:ad:f3:e9:27:26:
         1b:7e:8a:c5:ee:91:3b:0c:2f:a0:86:c9:a5:5b:65:aa:61:ad:
         b9:2e:17:27:87:6d:6f:40:e8:1b:e0:e4:fe:89:63:b6:bf:8b:
         d8:7c:da:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:24 2025 by rpki-client