Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
File:                     9n7U99NVdSgcF2yuPdy9QMxcHdY.mft (raw, json)
Hash identifier:          7U/H2e+tEzrhy/qUKAqKdEEKw44H0/v61Scd/w5QVrE=
Subject key identifier:   B8:22:75:EF:12:C3:DB:99:1A:99:DD:3E:82:16:01:7C:EF:F9:FE:19
Authority key identifier: F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
Certificate issuer:       /CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Certificate serial:       019646D754D65ABC12903C19B6762BE34BA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
Manifest number:          14F8
Signing time:             Fri 18 Apr 2025 03:00:39 +0000
Manifest this update:     Fri 18 Apr 2025 03:00:39 +0000
Manifest next update:     Sat 19 Apr 2025 03:00:39 +0000
Files and hashes:         1: 88-pt2hIN1dTOb7W_yyIcsyIKos.roa (hash: rXxfNXMHY0jcVNFeL7a/dvDj6ZDtDB0GLjdB35wLnIg=)
                          2: 9n7U99NVdSgcF2yuPdy9QMxcHdY.crl (hash: UaDNNCrGEo7nbasxUlvJNdunlwwffikMkTwMlGF6Rfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:46:d7:54:d6:5a:bc:12:90:3c:19:b6:76:2b:e3:4b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
        Validity
            Not Before: Apr 18 03:00:39 2025 GMT
            Not After : Apr 19 03:00:39 2025 GMT
        Subject: CN=b82275ef12c3db991a99dd3e8216017ceff9fe19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:dc:d6:d7:69:e0:30:eb:3d:3d:4b:b4:72:e1:
                    e9:f0:57:a3:e6:c6:ed:44:76:b2:3c:c4:eb:38:c2:
                    89:d1:b9:aa:90:70:89:58:93:7e:eb:f0:5a:c6:ca:
                    89:7f:0b:32:56:35:49:c5:6d:f1:29:d5:a3:2d:fd:
                    07:8d:54:c9:5d:4b:18:87:f4:8b:b7:95:20:dc:ec:
                    0b:2d:59:8c:e6:95:6c:f5:71:a7:2b:d6:2b:50:a0:
                    ab:82:2b:63:81:b4:ca:5a:fe:61:2d:8e:c8:86:fa:
                    83:26:82:6b:09:d7:b4:2e:f5:aa:11:e2:97:e1:62:
                    26:26:33:79:77:1c:40:11:34:03:22:6b:c3:d0:4d:
                    f7:b2:8d:77:c2:91:17:2b:89:c9:06:39:ee:b8:b4:
                    d2:6e:fc:02:0e:23:58:bf:ee:7b:a2:09:4c:d0:8e:
                    36:b8:24:60:df:3f:d1:e8:ab:f0:bb:68:29:66:4e:
                    bc:9c:a1:2e:bf:ea:36:09:63:78:18:ff:b1:bd:f3:
                    c7:f6:e9:00:a4:6b:dd:18:cc:a6:d5:03:8e:e6:b1:
                    34:24:0a:78:1e:95:56:ec:e1:43:2b:f9:52:e1:32:
                    4e:0e:cc:d0:0d:a0:b9:7f:3c:76:83:f2:4a:d9:8a:
                    47:26:29:68:a7:2d:51:0e:0e:d1:5f:67:98:ef:4c:
                    a7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:22:75:EF:12:C3:DB:99:1A:99:DD:3E:82:16:01:7C:EF:F9:FE:19
            X509v3 Authority Key Identifier:
                keyid:F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:16:b2:b6:94:2e:c6:a0:80:08:7b:f8:94:7f:84:ec:aa:3a:
         2e:34:fb:38:87:97:b5:a8:f8:9b:33:aa:03:ca:a2:8e:66:43:
         96:c0:ea:67:12:f6:cf:50:52:70:40:fc:8e:99:8d:6a:2e:c3:
         fd:37:7e:3d:96:30:db:8c:af:fc:f8:1d:a1:fa:0e:c5:bd:17:
         11:3f:53:04:c7:e9:01:da:a9:80:ef:fe:87:f0:20:a1:a0:e3:
         f3:87:38:04:ef:7a:d6:32:bd:30:86:48:90:5b:a3:d9:26:98:
         bd:c7:12:53:0e:67:08:6a:2a:02:c4:79:91:e6:30:b6:c1:e9:
         22:00:1c:ad:2e:65:90:f7:88:e8:6e:dd:8b:31:01:78:79:86:
         a3:02:6b:25:79:84:77:4f:7a:da:b7:8e:a0:36:70:eb:cf:73:
         7b:a1:52:95:f2:54:a9:1a:1c:bf:6a:e7:ae:d5:e5:77:e3:60:
         b9:e5:45:f1:0a:e4:29:db:4d:ae:f7:91:2b:63:4d:cc:37:11:
         22:53:8a:f1:49:5d:f2:4a:e5:0f:bf:62:d6:9d:a7:79:64:f7:
         aa:70:e4:c3:72:7e:b9:e9:92:aa:1b:e2:2e:7b:b9:68:f6:e5:
         76:c6:ff:6f:82:0d:1c:2c:6e:ad:54:dd:a0:ad:fd:c3:3c:05:
         c3:78:e5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:02:41 2025 by rpki-client