Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
File:                     cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft (raw, json)
Hash identifier:          eeJ8ksN4DK4msXjFFE6MW8LwUoBC0jn9CbNcgimuWVw=
Subject key identifier:   08:01:59:EF:75:F2:DB:50:25:91:D4:9C:01:02:6E:3E:46:4D:FA:E7
Authority key identifier: 70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
Certificate issuer:       /CN=70c12309ee98d442ec8a7650127eb0e621894df1
Certificate serial:       01958C97082D7E854E49FED86732493D7FCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
Manifest number:          1496
Signing time:             Wed 12 Mar 2025 23:01:02 +0000
Manifest this update:     Wed 12 Mar 2025 23:01:02 +0000
Manifest next update:     Thu 13 Mar 2025 23:01:02 +0000
Files and hashes:         1: 8Lh_EZUjo4d8T-WMsVc5_oid1Mo.roa (hash: cbyV06wf44D7SymSNRd5DeNmzcspVDJoD1qFeH8lxNU=)
                          2: cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl (hash: GGZ1olNVHiO0Vl5tf6Dc0F1v8L68ilEBoLMftu5CmEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:97:08:2d:7e:85:4e:49:fe:d8:67:32:49:3d:7f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70c12309ee98d442ec8a7650127eb0e621894df1
        Validity
            Not Before: Mar 12 23:01:02 2025 GMT
            Not After : Mar 13 23:01:02 2025 GMT
        Subject: CN=080159ef75f2db502591d49c01026e3e464dfae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:a2:30:54:51:bf:23:dc:4e:55:e1:81:91:
                    83:e9:aa:33:69:62:12:80:e4:82:cf:eb:e9:81:40:
                    dc:0c:ef:e8:7a:d5:3d:73:44:c4:ab:44:31:40:3d:
                    0a:88:23:24:4a:34:5a:53:7f:84:2b:a5:b5:5c:d4:
                    b3:04:4d:fd:61:9b:42:2c:c2:35:a5:34:1e:47:18:
                    79:af:2a:65:7a:0a:70:9e:62:08:55:3f:44:83:7d:
                    1a:9e:84:75:23:53:eb:11:b1:cc:02:65:32:df:6a:
                    9d:d6:0c:2d:e5:61:2e:85:14:0e:51:cb:db:57:76:
                    73:f7:4c:6c:1a:95:ed:f9:cc:64:20:32:43:d1:9d:
                    24:81:4c:a0:ff:f0:50:ad:26:52:39:92:5d:b6:2d:
                    2d:1a:a6:40:3c:c8:f6:a9:5d:01:3d:80:8b:6d:4d:
                    c4:af:10:0f:f6:ee:11:50:f3:51:3f:0b:bd:9c:90:
                    31:f9:1e:8b:10:c2:32:fc:91:57:59:4f:69:dc:ef:
                    58:3c:4e:45:f1:10:6e:b3:6a:26:92:83:ca:2b:ed:
                    b9:bd:fb:b8:9a:90:a5:65:33:f9:0b:2e:83:09:49:
                    df:37:3b:ef:48:bf:b1:e4:ab:80:8c:8a:6c:d2:74:
                    a3:54:16:0c:0c:87:d4:b0:a1:07:a2:e2:20:6a:b5:
                    80:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:01:59:EF:75:F2:DB:50:25:91:D4:9C:01:02:6E:3E:46:4D:FA:E7
            X509v3 Authority Key Identifier:
                keyid:70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b3:b9:86:ad:9e:5e:cf:a2:cd:7b:2a:7e:be:08:f8:5f:62:
         8a:d4:24:2b:e8:e6:bb:12:73:ba:1d:75:41:61:03:7d:94:ed:
         42:92:83:98:ea:b5:ad:f9:c6:61:f3:c3:15:be:9c:06:19:f3:
         23:cd:68:52:b6:81:3c:5d:90:85:ee:82:43:f0:7f:d1:4b:ad:
         ec:71:ca:ee:a9:dd:bf:de:3c:4c:b8:4a:8a:9d:88:2e:3f:4a:
         75:31:13:89:81:26:4e:c9:14:10:8a:e7:e7:8f:9f:79:23:70:
         0e:87:11:1c:24:4b:1d:bc:46:7c:12:bd:d2:95:74:fb:d7:2b:
         03:c1:38:91:f9:22:37:27:13:91:94:ca:ca:1b:89:f1:b0:e6:
         e5:38:7a:e6:1b:49:4d:4b:5a:e7:01:88:72:92:24:2c:fb:89:
         ec:9b:53:65:e4:1d:34:7d:3c:f0:f4:eb:22:b5:fb:b0:ee:f1:
         a1:d2:ce:aa:5c:4b:0e:a7:de:8b:06:4d:66:55:ae:f1:32:d3:
         27:b4:83:9d:1a:0d:22:6a:ef:05:5d:45:fb:83:dd:92:d3:39:
         ff:9e:c6:4a:5b:d5:8c:28:6b:98:38:ec:22:e7:67:c7:4c:f3:
         51:42:64:98:ee:1e:db:8b:7c:fd:76:34:13:d1:f2:a7:c7:b1:
         cb:1f:73:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:16 2025 by rpki-client