Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
File:                     yWncvDPoAQQ4EpKC03rU6L-EuB8.mft (raw, json)
Hash identifier:          ZZOowERdsGhKjBXucC+oFptzYUSkuf3zVOO5LqpUA0c=
Subject key identifier:   45:E5:55:E8:26:BD:23:A7:95:63:A2:79:30:3E:03:4C:10:B9:7B:22
Authority key identifier: C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F
Certificate issuer:       /CN=c969dcbc33e8010438129282d37ad4e8bf84b81f
Certificate serial:       01965011819A4CF0F21CE24D5969AA7F1ECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
Manifest number:          1426
Signing time:             Sat 19 Apr 2025 22:00:46 +0000
Manifest this update:     Sat 19 Apr 2025 22:00:46 +0000
Manifest next update:     Sun 20 Apr 2025 22:00:46 +0000
Files and hashes:         1: FU1o4K68ASMHjxslt5agTXMw1Z4.roa (hash: cFpnMXx4SNy55YthuxgRWkF2I8U6u41jmzS8UiT8Yts=)
                          2: yWncvDPoAQQ4EpKC03rU6L-EuB8.crl (hash: 7bvucmHkiREE24Vgii99qwTztxPDAlc52SJJHRjBgnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:11:81:9a:4c:f0:f2:1c:e2:4d:59:69:aa:7f:1e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c969dcbc33e8010438129282d37ad4e8bf84b81f
        Validity
            Not Before: Apr 19 22:00:46 2025 GMT
            Not After : Apr 20 22:00:46 2025 GMT
        Subject: CN=45e555e826bd23a79563a279303e034c10b97b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:94:31:81:f8:f0:0e:e3:7e:a7:b9:c2:c1:43:
                    1f:69:3e:f3:a9:f2:2c:3a:c9:ea:e8:cf:ef:55:13:
                    6d:88:ca:ad:b0:7e:ff:d6:80:d7:fa:59:45:7a:eb:
                    ab:66:f7:05:07:9d:37:23:47:00:7e:01:65:b5:d4:
                    27:fd:2c:82:7c:5d:cb:c8:a3:2e:e7:ae:7a:0e:b1:
                    16:68:b2:6f:c3:3b:88:73:99:03:cc:65:75:0c:4c:
                    bf:08:9f:5f:0e:98:ac:a8:2e:bd:c7:e9:c5:80:5a:
                    84:86:ee:d5:29:2b:12:ec:2c:6a:84:93:54:b0:c7:
                    c5:22:a8:75:2e:a0:e3:c8:89:d3:a1:ba:74:e6:be:
                    93:0a:65:49:f0:fa:f7:de:a3:43:8c:a0:09:87:6b:
                    f5:45:6e:91:9c:2d:99:14:89:92:7d:b4:23:b8:4b:
                    1d:5d:59:a3:24:bb:fb:a6:69:ac:75:3c:f0:4c:da:
                    31:16:57:d6:89:d8:f7:b1:87:bb:f8:57:a0:26:49:
                    7e:87:d4:07:75:88:cf:0a:23:f8:2e:1d:aa:13:2e:
                    2e:4b:43:9f:70:f2:f5:22:ae:4d:45:dc:4b:65:20:
                    8a:5c:1e:e7:57:cf:7a:f8:7e:d8:fb:9c:ea:38:d8:
                    e7:63:cd:63:36:1d:ef:53:c8:ed:d0:6a:6a:09:e1:
                    b1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E5:55:E8:26:BD:23:A7:95:63:A2:79:30:3E:03:4C:10:B9:7B:22
            X509v3 Authority Key Identifier:
                keyid:C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:99:2a:4d:88:ca:db:76:6c:15:9f:b3:c2:2b:4d:3d:08:f6:
         5e:7e:1b:5b:10:dd:3d:6f:53:20:be:c5:cf:f7:64:ec:82:92:
         70:1f:53:f3:fb:82:e2:87:7a:25:8e:e9:a2:6e:64:07:3e:6f:
         2c:19:57:8e:1c:ba:79:05:a9:34:d2:b6:e8:88:e6:d7:95:08:
         da:d8:a0:27:8a:94:6f:89:65:de:95:bc:39:b8:5e:e9:29:03:
         ab:65:23:b1:99:51:65:16:de:80:4c:16:b7:bf:29:95:7e:b9:
         73:fe:c6:fb:8d:1b:13:11:6e:50:fe:f3:a0:d0:73:21:9f:75:
         bb:a5:58:25:43:d1:24:26:c7:dd:c8:76:0c:81:2a:b2:7a:f1:
         43:02:bb:ee:74:db:f3:43:22:b3:7d:d3:12:0a:45:3b:3c:3a:
         95:0a:da:65:9f:51:da:ef:19:d7:08:39:c3:76:34:91:31:39:
         e0:16:c3:35:a4:2a:a3:22:fe:55:61:d8:d5:0d:af:ea:56:25:
         2d:72:7d:56:87:c6:19:f7:4e:4c:1a:6a:d7:1d:b7:00:7a:58:
         1f:7f:6a:d0:16:22:e0:c5:01:0e:48:f9:d4:e5:41:b7:9f:ff:
         23:92:b9:6b:fb:b3:01:88:56:89:df:80:8f:b1:55:5e:49:dc:
         cd:4a:6a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:44:30 2025 by rpki-client