Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
File:                     GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft (raw, json)
Hash identifier:          v86FumnRyumhR1VPivYjGS7ko+KQnJrkniWei1Bh5ns=
Subject key identifier:   01:A2:6F:94:5E:E9:C7:21:74:14:F2:07:DB:68:69:42:4E:2A:10:6E
Authority key identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
Certificate issuer:       /CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Certificate serial:       01964E22E28DD626BFB14A75E201BDB88E27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
Manifest number:          14FD
Signing time:             Sat 19 Apr 2025 13:00:31 +0000
Manifest this update:     Sat 19 Apr 2025 13:00:31 +0000
Manifest next update:     Sun 20 Apr 2025 13:00:31 +0000
Files and hashes:         1: Co6M_nxOxRb4ejhwPMZFPOzlY1U.roa (hash: sSWEBAjRZaqtAdwjOfykVqgf7b7OWWPQ8cRcY8XqZmU=)
                          2: GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl (hash: ofhNBMncAQ8Perc6pildHjORerzjDRj/Od+OtrYnNh4=)
                          3: LASNDVJFR7nISIIuLJuen3qOehA.roa (hash: zvljnKWMuxdFNbiIQd7aWSR9xyeCp6tRJSsTE0UC5w8=)
                          4: y0q_mnHeqqODRkh3mN1XsHcA07o.roa (hash: vPYM1qZGBQlB55R1ITXDPJhnP7mpA1SIlCNpOTcVP6w=)
                          5: zO1aOnWzpH8Vmp45J1jZtXxaKKw.roa (hash: N6qZrGzU3tG6EdhOgnUHNSlOSI1pX79eNnDUPpj91So=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:22:e2:8d:d6:26:bf:b1:4a:75:e2:01:bd:b8:8e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
        Validity
            Not Before: Apr 19 13:00:31 2025 GMT
            Not After : Apr 20 13:00:31 2025 GMT
        Subject: CN=01a26f945ee9c7217414f207db6869424e2a106e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2f:0e:cf:14:41:28:02:d6:3d:61:80:6a:d4:
                    dd:28:d6:3c:3a:5d:30:bd:64:06:61:65:0c:7c:6e:
                    5a:d4:26:ae:b0:d5:94:09:0f:43:26:b9:90:73:d3:
                    9a:ae:61:47:f1:71:10:c7:9e:f3:85:b7:59:60:86:
                    bd:79:45:d9:ba:24:f4:41:1e:75:5f:95:78:b6:dd:
                    53:a1:68:c6:d6:01:ef:28:52:c2:c7:0b:69:fa:a7:
                    d6:56:dd:f2:6f:c6:a0:1a:ab:0a:ed:ef:d1:00:41:
                    ab:3e:71:d8:ed:3f:02:15:ee:c9:c1:62:62:72:2f:
                    64:cf:66:d7:d8:0d:7d:36:f6:7f:12:71:cf:d3:ea:
                    7d:80:4e:0f:9d:88:5e:7a:16:06:a6:00:fa:aa:df:
                    98:81:15:84:ec:c8:8f:9b:7a:fd:f8:c1:c9:bc:4f:
                    24:01:71:39:34:ae:bc:50:a0:9f:b1:3d:a0:62:91:
                    ed:b3:f2:7d:05:9d:b2:14:4a:19:2e:3b:74:c1:0a:
                    d4:45:13:88:19:b3:19:77:5c:de:3d:bc:0c:88:af:
                    98:af:f6:51:39:d8:be:c7:47:d9:6c:c2:80:2e:e7:
                    38:20:06:7e:d3:f4:cd:17:b4:94:c2:da:84:d0:ab:
                    d1:70:d9:69:03:21:8d:86:39:88:05:a6:b4:e1:c2:
                    cc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A2:6F:94:5E:E9:C7:21:74:14:F2:07:DB:68:69:42:4E:2A:10:6E
            X509v3 Authority Key Identifier:
                keyid:18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:54:55:c1:0c:7e:e2:b7:a0:0d:d0:12:9e:f3:18:c8:19:61:
         35:8e:95:17:ac:03:ee:b5:e5:92:6a:d5:c8:c3:8b:cb:58:64:
         cf:9a:02:d1:b7:6e:34:07:d5:7e:9d:60:81:f7:01:da:91:6c:
         d6:1a:59:eb:0a:4d:d8:6c:67:be:2e:48:7a:a4:65:d8:6d:28:
         81:17:d0:cc:f9:f7:9c:9a:ce:28:4f:e5:83:ed:12:c9:89:6e:
         c9:1e:fb:14:c3:6c:f8:04:6c:69:e4:84:5c:d4:d8:02:4f:af:
         41:37:19:34:3c:7d:a4:15:bf:52:3d:39:97:e5:12:5e:23:0e:
         eb:50:3d:33:e6:bb:3c:f6:54:fd:c0:61:db:2b:5d:d1:17:5a:
         a5:18:89:83:01:ad:ee:e7:db:1d:bd:23:5d:63:eb:a9:c2:93:
         04:e1:e2:4d:e6:60:d6:e8:42:93:1a:be:c6:88:16:2a:17:89:
         b3:7c:64:2d:58:a6:8d:bd:fb:3e:df:a6:0c:82:a7:05:d7:e4:
         e1:94:0d:ff:e2:e5:3c:94:a6:e3:fb:02:c2:c5:e9:23:71:ae:
         d5:f3:b7:39:13:69:28:9f:a1:e4:0e:02:cc:ac:a2:88:a5:15:
         0e:eb:13:d9:87:45:6c:dd:ca:81:dd:1e:1c:6b:c7:ed:b7:ba:
         af:a7:b7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:52:18 2025 by rpki-client