Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.mft
File:                     7uVzCEEAtB18weRHKVunHQGdUZI.mft (raw, json)
Hash identifier:          E/2wXM0UayvDHwvJYt6QW2MzhLgcyyOFI7QCFd1l9UY=
Subject key identifier:   C2:12:CF:2C:B6:F5:25:D9:60:1B:FE:68:E5:61:F5:0B:D3:90:41:1F
Authority key identifier: EE:E5:73:08:41:00:B4:1D:7C:C1:E4:47:29:5B:A7:1D:01:9D:51:92
Certificate issuer:       /CN=eee573084100b41d7cc1e447295ba71d019d5192
Certificate serial:       01964DEC6F2B624638D696CEEF1EA15CEEFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.mft
Manifest number:          14FB
Signing time:             Sat 19 Apr 2025 12:01:02 +0000
Manifest this update:     Sat 19 Apr 2025 12:01:02 +0000
Manifest next update:     Sun 20 Apr 2025 12:01:02 +0000
Files and hashes:         1: 7uVzCEEAtB18weRHKVunHQGdUZI.crl (hash: 5/KF8NifP07QDoA6dsGnSsQUv23u6JELJCfNYBFphVk=)
                          2: IJhPQVRGmqp2pjIIawE6kNe1OmA.roa (hash: CLam7RT5Mlb2eTTNUeyHDRKz53rH3cHg09btZTqWmkw=)
                          3: S_z8DOWyNqRuSYsoNxOGS1HcX3s.roa (hash: Mq3Rqz1j87jNxXs/3bRKlJRnnyA70lJEZiezb6Fqhc4=)
                          4: dnyAO2e2MHHQ1XFb2CgMjxPEqcc.roa (hash: c0VoSxfboUw4trXfnDtHSy3KMTHFMkoTCFwVZzWFcm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 12:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:ec:6f:2b:62:46:38:d6:96:ce:ef:1e:a1:5c:ee:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee573084100b41d7cc1e447295ba71d019d5192
        Validity
            Not Before: Apr 19 12:01:02 2025 GMT
            Not After : Apr 20 12:01:02 2025 GMT
        Subject: CN=c212cf2cb6f525d9601bfe68e561f50bd390411f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4c:8e:b2:cc:1e:ac:e1:48:ee:07:14:9b:88:
                    84:4a:f7:c1:3a:9b:ba:76:34:4a:b5:92:a5:dd:a3:
                    c2:2d:30:02:89:61:61:b7:2f:b8:04:e9:ae:32:3d:
                    68:e5:f4:53:1c:37:23:91:82:77:41:62:60:ee:0d:
                    74:73:25:cf:13:06:d4:31:b6:ec:f0:89:65:39:c9:
                    6e:2c:7b:27:13:5e:06:82:ca:26:7a:3b:2e:3c:f5:
                    3a:f2:83:9a:3e:91:5d:1a:8d:d2:3a:98:3f:c3:2c:
                    9b:e9:75:61:9b:3e:6b:25:74:3f:ee:36:b9:75:cd:
                    f5:d3:99:1e:de:bd:cd:f6:31:4d:fb:fd:3f:62:5e:
                    66:6b:36:66:b8:c2:35:76:92:b1:86:9c:77:35:97:
                    1e:23:d1:52:47:30:aa:d1:5e:07:93:51:75:4c:9d:
                    b6:40:9d:57:b5:63:4b:4f:6b:93:4b:02:43:3d:14:
                    fa:86:0c:5e:3c:fa:5f:f7:43:f9:2f:0b:9c:6f:1e:
                    09:76:30:8f:df:76:13:d0:3d:58:7a:bb:7d:6e:7a:
                    f6:6c:e3:25:15:9e:4c:0e:8d:0e:d6:9c:7a:e3:5c:
                    7d:8e:ef:51:33:fb:7c:62:b7:b5:36:3f:d5:c1:9e:
                    94:30:97:b2:2d:05:57:65:c9:51:2e:a7:bf:6a:2e:
                    08:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:12:CF:2C:B6:F5:25:D9:60:1B:FE:68:E5:61:F5:0B:D3:90:41:1F
            X509v3 Authority Key Identifier:
                keyid:EE:E5:73:08:41:00:B4:1D:7C:C1:E4:47:29:5B:A7:1D:01:9D:51:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:58:03:4d:a3:16:ff:c7:25:89:f6:00:32:6b:72:07:17:c4:
         ff:ef:ef:e0:52:b1:a6:02:8f:dc:0f:e3:76:0d:fc:63:0f:36:
         b6:9e:37:17:83:0d:06:d6:dd:03:47:4e:a1:e5:6d:49:dc:27:
         26:34:08:89:3f:7e:aa:60:08:da:e5:43:9f:a2:29:3d:37:f1:
         08:b1:0d:fc:b3:15:85:02:6f:5f:61:e7:22:3e:8a:da:85:8a:
         74:30:a4:04:f9:8a:af:0e:40:3e:79:ec:02:ce:09:e6:f2:a6:
         3a:d4:69:62:c7:99:2b:bf:26:2d:93:26:bd:8e:f6:d9:fb:db:
         2b:a1:04:5c:56:23:ef:b2:4e:56:ed:c5:ff:5f:73:37:ef:58:
         ea:3e:c5:6d:43:65:3e:89:15:40:02:d3:6e:b5:48:c0:4f:62:
         80:15:96:a9:a9:e2:be:a6:a4:59:f0:31:11:0b:f9:84:ef:a1:
         89:16:51:5f:3e:fd:e0:32:25:65:8a:72:a6:53:e9:1a:97:7f:
         74:21:94:b8:3f:0a:e4:db:0c:a8:da:c4:92:ed:88:2f:92:60:
         f4:38:3e:bd:ac:31:7d:59:9e:48:dd:1d:fa:af:51:6e:67:f3:
         80:dc:7d:5d:20:1c:46:db:68:ea:6c:cf:21:47:e2:0b:69:a2:
         cb:e9:2e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:45:50 2025 by rpki-client