Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft
File:                     Eeb3cZPydkuolChd0vZPEib9kSY.mft (raw, json)
Hash identifier:          tDLSRbkfvpkVn/7y+3W0cHcACuNwOoQ0zaQlkL5ol4M=
Subject key identifier:   49:E9:39:08:90:37:86:81:3C:42:0C:B4:BE:E4:E4:69:BC:7A:20:32
Authority key identifier: 11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26
Certificate issuer:       /CN=11e6f77193f2764ba894285dd2f64f1226fd9126
Certificate serial:       0196515A9AE8B2D35C1F9BE272BE39FEA054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft
Manifest number:          14FE
Signing time:             Sun 20 Apr 2025 04:00:14 +0000
Manifest this update:     Sun 20 Apr 2025 04:00:14 +0000
Manifest next update:     Mon 21 Apr 2025 04:00:14 +0000
Files and hashes:         1: Eeb3cZPydkuolChd0vZPEib9kSY.crl (hash: U3vJEWVX+L+7EUCCKkVVPRHciINcepVeImzJLWBLPCY=)
                          2: XFg9UB4gTIL8wJ9DUJTpOfsymeY.roa (hash: xjEc3UgcuslMKxGxfh1ksiSKMzapldmW9N+WDd88oT0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 04:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:5a:9a:e8:b2:d3:5c:1f:9b:e2:72:be:39:fe:a0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e6f77193f2764ba894285dd2f64f1226fd9126
        Validity
            Not Before: Apr 20 04:00:14 2025 GMT
            Not After : Apr 21 04:00:14 2025 GMT
        Subject: CN=49e93908903786813c420cb4bee4e469bc7a2032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b6:a1:47:3f:a9:0d:87:81:f7:70:9a:b3:b5:
                    76:03:d4:24:67:8d:38:02:63:cc:98:85:2f:b8:58:
                    c1:56:2d:a3:b3:74:55:3f:ee:12:e0:63:25:cc:57:
                    52:29:26:16:d9:23:c8:53:05:db:0d:7a:66:bc:86:
                    53:af:b5:08:b4:bc:28:1a:e2:e2:0a:ed:da:2f:ed:
                    c7:00:55:80:df:c1:45:7c:3f:d1:21:a7:2c:eb:1d:
                    b6:aa:3d:0b:c9:84:06:96:c6:be:b0:7c:35:7b:00:
                    7e:3a:b9:53:37:1d:2c:c4:04:c9:04:7c:6d:d5:b1:
                    f6:76:cd:f2:68:e5:64:43:58:f3:6c:af:b5:3f:e1:
                    04:c4:df:ba:6c:64:a0:04:4a:3e:03:ad:53:69:34:
                    ae:75:16:a2:95:29:e6:50:ff:2c:41:f1:ae:60:36:
                    63:0f:f5:3c:46:ee:cc:d2:24:f4:cd:22:f2:48:30:
                    1d:46:a8:05:38:52:67:69:0e:7f:ca:0c:ed:3e:7b:
                    9b:1c:73:31:eb:d5:82:19:23:88:07:9a:d7:75:f0:
                    2b:21:c4:e5:da:c0:96:3b:b9:b4:de:63:aa:1c:7b:
                    91:95:cb:a3:85:21:bb:86:25:88:c7:b2:f5:46:4a:
                    85:09:41:85:39:03:b4:96:e4:12:53:0f:20:f7:41:
                    33:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E9:39:08:90:37:86:81:3C:42:0C:B4:BE:E4:E4:69:BC:7A:20:32
            X509v3 Authority Key Identifier:
                keyid:11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:79:28:c7:9c:dc:2a:c7:e5:c6:1e:41:9c:b7:56:3f:f9:09:
         05:f6:44:1f:be:b4:4d:c0:07:4b:07:26:82:d4:57:91:01:b2:
         5a:fc:7b:e0:9b:e4:f7:ab:47:a6:15:52:0c:7b:c3:f9:bf:7b:
         86:b9:93:c8:6b:c5:53:29:a6:5a:ba:6f:66:f7:f5:5d:02:d7:
         30:6a:26:6e:c4:59:78:0d:ec:cd:f4:ac:be:0d:5f:f4:db:f4:
         a3:a3:2b:d8:0f:68:8f:a3:86:ad:02:00:64:e0:5d:0d:98:4f:
         51:a5:a2:64:9c:4f:38:af:25:bc:0a:6e:34:0a:8c:b0:0c:2d:
         f2:fb:e4:09:fe:ca:ee:83:96:49:13:ea:26:f7:d1:79:43:83:
         8c:e7:11:69:68:d4:86:d5:f9:86:e0:79:04:e4:d3:1b:23:0d:
         d3:33:19:f5:32:67:49:98:05:0e:88:69:df:2c:53:6c:0d:00:
         d3:cb:2d:30:bf:ce:ed:70:5b:73:8b:36:4a:40:a0:72:2f:df:
         fd:3a:85:18:58:7d:c5:8e:9d:d0:d1:ab:f7:5f:72:65:a4:36:
         26:d6:e6:f6:10:ed:0a:28:e8:50:86:ff:6f:75:96:e0:35:ec:
         dd:fa:b4:f1:ee:e3:ce:8e:6c:13:60:b6:7a:69:de:bd:bc:a0:
         cb:e3:ef:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:13:14 2025 by rpki-client