Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.mft
File:                     cVuIXDswL9UObCJkejPcR3J_6pU.mft (raw, json)
Hash identifier:          5keOVgzPjO+1aTdLD42j5w1IwLTrqygbhW56tfSdp88=
Subject key identifier:   66:1E:80:23:74:25:21:08:3E:63:46:70:91:90:5B:5F:75:E7:20:47
Authority key identifier: 71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
Certificate issuer:       /CN=715b885c3b302fd50e6c22647a33dc47727fea95
Certificate serial:       019602D2CAE08BF599671EF82623C536AEEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.mft
Manifest number:          14D8
Signing time:             Fri 04 Apr 2025 22:01:30 +0000
Manifest this update:     Fri 04 Apr 2025 22:01:30 +0000
Manifest next update:     Sat 05 Apr 2025 22:01:30 +0000
Files and hashes:         1: 14pido6o0wqfomgXR8pucw1gPzU.roa (hash: jgQtihM0UCn7BbKxbmBUgDGUKYz/W0MyqwuDhDbNzpY=)
                          2: 2etIb7Rnc-HqeeBf3zVt1jLWUNA.roa (hash: OC17SOEObLk3HsIqjo4SamQfndEYttT241yoTEhMhMM=)
                          3: NA4JD_GnqQvOyR7m4m3Vw9okgE8.roa (hash: J1cBhjZo1uGeijpNkjCbQKnO6iIh1rl0/dVJtp6h+ew=)
                          4: cVuIXDswL9UObCJkejPcR3J_6pU.crl (hash: Q6uy6jA1LV3heNA6G4GuyJOYKxmekvbzgb3+gSYaqDg=)
                          5: eHn6AySlJiBAuuxtiCIN3RwN6qA.roa (hash: LgEJiOedO8COAzGV0am2pAV/Vl26Jh1hgQQo5CskTyg=)
                          6: i3VhAkwmg1Hp-iEg5-4DqgQXOCM.roa (hash: mdFfnRZh31uX+xwiVUHnQrTZIRO7yKpYbNnQm8yN5rc=)
                          7: iNOcJVz2_fB3iFNvhul_qe9ZMbQ.roa (hash: PTNjFEC+8LOf9p9/46EB/Gyud8WBITxQ3kLEIaOMY6c=)
                          8: oi_n1Va3IGPAcBfd-0AP3-FX77M.roa (hash: szdc2nWaBES7VDGsxzr+xrQOccNyUqGV5KOPHZLY5gM=)
                          9: qAgR3U_rmhTk9ylZXwkHVA3MlH0.roa (hash: aIy0e102scbWahaNYsLiO2Tj1Fxcl0+tQeOdYm8oqFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:02:d2:ca:e0:8b:f5:99:67:1e:f8:26:23:c5:36:ae:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715b885c3b302fd50e6c22647a33dc47727fea95
        Validity
            Not Before: Apr  4 22:01:30 2025 GMT
            Not After : Apr  5 22:01:30 2025 GMT
        Subject: CN=661e8023742521083e63467091905b5f75e72047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a4:25:e9:88:05:a3:51:6b:48:49:2e:12:1c:
                    7a:e9:31:72:65:85:34:1d:25:2b:d9:57:7b:78:53:
                    7e:6b:14:97:46:b0:b2:17:0e:77:f2:59:1b:03:c9:
                    20:d8:d6:e5:28:0e:d1:6a:9e:ff:5f:7e:72:77:d0:
                    f4:49:ed:ae:f5:63:b8:f4:56:36:6f:45:81:fe:69:
                    cf:01:60:d5:68:08:46:c4:48:13:0c:09:23:8d:a3:
                    c8:3b:c2:41:b9:ed:ae:d1:07:6b:61:25:84:e0:6d:
                    9f:0c:3f:ba:40:68:61:fb:c3:28:9d:d9:15:bd:c1:
                    3a:7e:05:8c:7e:94:c3:8e:70:0c:77:e5:57:ea:8f:
                    65:bf:7a:e1:8f:f7:69:c6:64:56:d9:d2:c5:b3:ed:
                    04:56:b8:02:41:0e:e5:ee:a1:a6:93:dd:c2:ac:a1:
                    f7:d4:24:72:b6:6e:a1:67:37:f5:0d:9b:85:54:2c:
                    ad:98:bf:7d:3b:a0:f9:c8:64:ec:f4:ee:96:08:8b:
                    a1:c3:29:14:bb:d3:78:84:b3:9f:39:28:8d:f8:9c:
                    f8:db:35:0c:a4:8b:ed:10:ec:66:c8:b1:32:93:fc:
                    51:43:ff:63:bd:36:d6:1c:70:58:3d:33:5c:6b:11:
                    20:b8:74:8e:68:f8:cc:cb:aa:1e:89:3f:ac:28:41:
                    62:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1E:80:23:74:25:21:08:3E:63:46:70:91:90:5B:5F:75:E7:20:47
            X509v3 Authority Key Identifier:
                keyid:71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:af:2a:9f:9b:58:be:e2:62:d7:4d:9d:a6:6f:57:ff:93:23:
         66:bd:6d:20:6b:65:21:12:cd:3b:43:f5:25:d0:34:df:d7:08:
         79:9b:d5:b0:6c:6a:6b:3a:d7:fc:77:cc:26:9f:76:fb:0f:e3:
         e6:41:e4:84:54:77:87:33:f1:51:ae:a4:04:84:65:a5:12:f8:
         f8:a8:0f:89:04:c1:d6:d3:da:7b:b0:ee:b7:33:8a:14:25:c9:
         84:27:bc:b7:45:fe:c3:62:73:35:f6:c4:12:0d:72:f0:de:d4:
         f6:e1:7e:04:1d:30:e1:3d:e7:43:bc:d7:9d:74:e3:d8:07:d3:
         32:de:98:3c:55:1f:76:3a:27:c5:b1:95:39:49:92:e8:ca:09:
         ad:ab:59:31:84:ea:5f:88:7f:91:0d:3b:2d:b5:49:fd:bf:2a:
         ff:43:fc:63:72:9c:94:88:c2:d1:6a:70:40:82:c0:1b:6e:c1:
         cd:ac:46:cb:37:8b:90:5a:c3:00:cf:26:71:4d:89:e1:5e:89:
         2d:68:48:99:7e:b4:16:06:e6:9e:f1:95:15:8d:f5:d5:17:87:
         93:50:05:1e:41:6c:0f:71:e4:1a:f3:82:d3:2e:06:3b:fc:9e:
         a8:99:7e:a1:b0:fc:68:76:d4:b0:d2:75:06:cf:9e:11:a0:e1:
         84:e0:a0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:42:43 2025 by rpki-client