Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
File:                     rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft (raw, json)
Hash identifier:          GrVZf0Qzma8JZe6P9QayEZNWyDJn7tJj4aAEtud45bQ=
Subject key identifier:   A5:F0:64:A6:6C:A7:C4:86:8C:E1:63:99:4F:FC:2A:7C:AC:DB:18:7F
Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
Certificate issuer:       /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Certificate serial:       0196496A2C514A45FB9D34D73E6B1F1A2382
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
Manifest number:          14FA
Signing time:             Fri 18 Apr 2025 15:00:16 +0000
Manifest this update:     Fri 18 Apr 2025 15:00:16 +0000
Manifest next update:     Sat 19 Apr 2025 15:00:16 +0000
Files and hashes:         1: 04xKoR3HixjwEV_dOrG3hKpzMP4.roa (hash: XSQ1jLSVKuR/7tbazdYV2Fv1OeY0/BCC+/gGVvZRwVw=)
                          2: rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl (hash: WM21hN6/63Kpb02PjjHHP/69ynXv8QsqPnIKpr/gh1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 15:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:6a:2c:51:4a:45:fb:9d:34:d7:3e:6b:1f:1a:23:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
        Validity
            Not Before: Apr 18 15:00:16 2025 GMT
            Not After : Apr 19 15:00:16 2025 GMT
        Subject: CN=a5f064a66ca7c4868ce163994ffc2a7cacdb187f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:ad:e9:d8:04:df:34:26:77:e5:b8:99:25:
                    34:9a:20:8e:40:ad:a7:13:5c:c7:de:ce:15:b0:ef:
                    cb:17:bc:e0:ab:0a:e1:6f:cd:72:ff:75:b9:3a:c9:
                    60:cd:0e:ea:8b:1d:0a:c0:d4:57:5a:7c:74:96:92:
                    5a:3d:77:b3:47:de:75:3a:b6:55:fc:84:8f:08:ff:
                    8f:71:ce:78:35:1a:f3:f3:ad:32:41:00:35:14:cb:
                    f1:db:a0:46:13:ba:8f:49:2b:36:9c:44:c2:be:bc:
                    8e:e7:6f:1f:21:6c:1c:bd:b0:4e:66:c5:08:e2:04:
                    55:81:52:62:bd:20:4b:10:10:ea:f3:ee:7b:46:3e:
                    80:f6:83:d4:4e:0e:33:8c:0a:71:df:39:09:30:bd:
                    24:48:c4:6f:b1:61:e2:15:2d:f9:6b:af:35:e1:93:
                    19:6e:43:7f:d4:12:3b:ed:15:06:cb:73:a7:39:8a:
                    0e:b0:56:89:58:ba:13:06:6d:2a:1a:0b:30:72:57:
                    ed:71:d2:c6:37:21:a8:4a:49:64:4a:2c:62:fd:45:
                    d3:db:5d:ff:c6:ec:da:1d:ee:bb:0d:8e:b6:a1:a9:
                    62:f5:e1:99:0c:dc:f2:f9:33:81:92:cf:f8:69:e1:
                    e4:d2:21:96:fd:ad:f8:8b:65:c5:6a:bf:ce:0e:e9:
                    63:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F0:64:A6:6C:A7:C4:86:8C:E1:63:99:4F:FC:2A:7C:AC:DB:18:7F
            X509v3 Authority Key Identifier:
                keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:c2:9e:76:53:2e:9e:2c:3a:81:51:eb:92:6b:e5:77:e6:8c:
         3a:74:8c:aa:34:5b:fc:4c:d2:f8:99:9c:dc:8d:d4:1e:04:4f:
         99:d4:d9:30:bc:57:b4:a1:f1:bc:ee:d0:4c:ff:29:92:a1:25:
         71:51:35:7a:ec:f5:bc:41:41:de:0e:30:23:1a:c7:f9:7b:a7:
         fc:66:3e:45:13:2a:1e:77:62:c5:2e:dc:9f:c2:a7:b7:6f:b2:
         ec:2c:8e:74:d1:7c:d8:73:bf:32:a0:48:ad:41:c7:89:31:c3:
         58:9d:59:29:2e:e1:ec:62:9d:e2:3d:cf:6e:89:53:f7:2a:eb:
         af:3b:5e:26:3b:3d:76:52:2f:d7:1b:c2:78:4a:09:30:91:17:
         38:b2:65:6a:06:ff:c1:8b:d0:b7:4d:2c:08:d2:9f:9f:f4:d7:
         9d:3b:19:ec:5c:15:fb:f5:2c:5c:c3:b9:3e:58:01:d8:ba:eb:
         9e:0c:d7:03:e4:6e:6a:3d:86:f2:d5:6a:45:ad:a8:f0:58:cf:
         3e:22:bf:20:ee:f3:49:24:a1:96:2a:0f:d9:99:b9:bb:11:5e:
         58:77:1b:a4:64:a4:ba:93:15:15:28:85:ff:09:34:50:81:12:
         a0:25:a1:fc:07:d0:2c:30:6d:e6:d0:da:f8:bf:8f:a2:47:fb:
         e9:d3:2f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:51:50 2025 by rpki-client