Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
File:                     iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft (raw, json)
Hash identifier:          F0RmUgteoP11Zp81Oe7skRzvfGSTNhMzQbuE06TovJM=
Subject key identifier:   A3:94:82:66:36:DC:64:11:C4:53:14:A9:92:27:5D:A3:B4:48:04:19
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Certificate issuer:       /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial:       01965915367B8416DDB0DBA421FD1C743DC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
Manifest number:          15AD
Signing time:             Mon 21 Apr 2025 16:01:24 +0000
Manifest this update:     Mon 21 Apr 2025 16:01:24 +0000
Manifest next update:     Tue 22 Apr 2025 16:01:24 +0000
Files and hashes:         1: 5jyvM7zUsDe1Lex0DtFpG8BBbZo.roa (hash: PCMtayIHrF6LrkVGhI1nprpYM2aF/ClvU/EhrY1JrmQ=)
                          2: Dv5aKJ2pDNq6PQejY9KYLcZgexI.roa (hash: LTTZywdBBEaru6D3i2kCVgDeRzQz8voiBDF73OfU/U0=)
                          3: WeiKZlrZMWBmHmFyIba_qVs-J6c.roa (hash: QeA2Crhl6GOiBpaxxnH+m2YNQAEe2rgEWLu15CjW2Bs=)
                          4: iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl (hash: ZCnUhY2QQ48uqcu2jiSQjOxuc0SH0aSl0MeRfFNEdyw=)
                          5: twVpvlgGcn2wMFxLET5jabKj7lE.roa (hash: 6O74RoMA1Bml+kLutB1Hui+CE3ATKHf//KCCsZVvIEI=)
                          6: yGtx0WOJHSICwJhdbTk60NjhMK0.roa (hash: vFmVeHUZ5/DLzIgWYqSmmpUMBj7nmSH/NYBLn/8iMRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 16:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:15:36:7b:84:16:dd:b0:db:a4:21:fd:1c:74:3d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
        Validity
            Not Before: Apr 21 16:01:24 2025 GMT
            Not After : Apr 22 16:01:24 2025 GMT
        Subject: CN=a394826636dc6411c45314a992275da3b4480419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:67:68:37:50:d1:67:3d:15:dc:c9:59:66:
                    bf:e7:2c:03:56:47:0f:b3:a6:1e:96:ed:5c:5e:c8:
                    40:2c:8a:d5:0f:75:6f:b8:3b:20:38:e3:36:87:fd:
                    c5:7c:a7:aa:80:00:be:de:60:83:1f:ed:d6:c9:70:
                    8f:4b:ea:01:98:42:91:cc:bc:7a:4c:1e:ea:a6:94:
                    d5:92:3b:b1:8b:eb:1c:31:19:79:85:b8:66:cd:8c:
                    0f:8c:80:3b:d0:64:bf:4a:74:08:60:30:50:27:8b:
                    32:9a:24:ae:89:08:76:f7:a4:3c:06:46:a5:48:9d:
                    91:9f:92:86:ff:ea:dd:99:7e:53:c3:b4:23:7a:fb:
                    8b:c2:32:c4:85:91:3e:53:74:81:30:d6:14:ec:48:
                    3d:de:58:36:d4:67:f6:e8:26:b2:e0:34:d5:b4:f5:
                    5a:14:20:47:5c:26:05:35:ed:af:87:d4:bf:77:6c:
                    af:d7:b9:92:9e:61:df:88:67:16:c4:b4:03:08:e9:
                    e6:92:ec:c5:19:94:61:dc:ff:03:4f:22:2a:92:f1:
                    74:7a:e8:ba:0c:8c:30:fd:57:36:f7:c4:2b:c1:df:
                    7c:f7:bf:c5:c6:ac:61:f0:d8:33:da:06:69:e4:7e:
                    73:23:91:a9:5c:47:68:ee:b1:04:5d:21:b7:7c:ac:
                    63:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:94:82:66:36:DC:64:11:C4:53:14:A9:92:27:5D:A3:B4:48:04:19
            X509v3 Authority Key Identifier:
                keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:07:23:9f:06:b9:bf:31:e9:c3:89:fe:13:8d:67:b7:d9:99:
         1c:78:9e:85:e8:d7:cf:62:e3:17:3e:14:b4:2a:2e:59:ed:5c:
         d9:17:86:2f:80:ff:0c:f3:c3:02:2e:83:0d:2b:a0:9f:fe:2c:
         d8:5f:28:e2:a3:ba:bd:0f:47:bd:0b:a2:f7:4c:68:94:94:f6:
         72:78:c2:bf:63:38:a6:17:51:48:4e:4a:23:ec:81:34:cf:76:
         8c:3a:5f:2d:30:b4:89:70:b3:a0:98:78:16:72:ea:41:6e:04:
         a8:ff:24:eb:d8:b6:8e:b5:e8:74:15:8c:8b:ef:76:89:27:30:
         f2:21:9c:b2:63:30:f8:96:b0:d1:65:01:ab:35:a4:cf:34:02:
         92:d4:05:10:ae:44:aa:63:0d:1f:f9:45:89:b4:35:47:e6:d7:
         71:8d:15:c8:d1:d6:b4:b9:35:8e:a5:9d:70:16:e7:cb:dd:7a:
         45:78:56:4c:1e:6f:67:af:e5:96:a8:71:fd:63:5a:5e:ea:a1:
         8e:2b:8e:ea:eb:3b:a8:73:29:f0:3a:10:22:7f:54:bc:ac:45:
         15:28:c3:49:a2:ec:01:da:5d:30:f0:e1:b0:a4:43:58:12:b9:
         78:3d:82:2f:bb:dd:5d:48:4d:85:a7:e0:90:6c:a1:9b:d0:d2:
         e2:89:2f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:16:22 2025 by rpki-client