Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
File:                     V2VnM04DVjndfMtJdqmycPcmMh0.mft (raw, json)
Hash identifier:          j94SQi+902UW2/XAdbDeQQ1XHYEPgLCGyWRkQemRI2w=
Subject key identifier:   6F:40:04:29:71:51:F1:BE:72:E0:24:38:BB:76:B1:E3:27:E2:11:F4
Authority key identifier: 57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
Certificate issuer:       /CN=576567334e035639dd7ccb4976a9b270f726321d
Certificate serial:       019651920F4112145570E5D36767FCAC488B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
Manifest number:          14F8
Signing time:             Sun 20 Apr 2025 05:00:48 +0000
Manifest this update:     Sun 20 Apr 2025 05:00:48 +0000
Manifest next update:     Mon 21 Apr 2025 05:00:48 +0000
Files and hashes:         1: BF6mEEyNMbb-xRm9_vXJ4CAvddM.roa (hash: LKI2ZmXTKLgLquBH6Yp7C5JIlsxvJUmapEogTIwlb5g=)
                          2: V2VnM04DVjndfMtJdqmycPcmMh0.crl (hash: qgV6ZM3X6MpLl04CzdT7j8UhDdSssRda9fo0ol58y/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:92:0f:41:12:14:55:70:e5:d3:67:67:fc:ac:48:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576567334e035639dd7ccb4976a9b270f726321d
        Validity
            Not Before: Apr 20 05:00:48 2025 GMT
            Not After : Apr 21 05:00:48 2025 GMT
        Subject: CN=6f4004297151f1be72e02438bb76b1e327e211f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d3:56:18:a0:08:5f:a0:79:5d:e7:5f:3a:a2:
                    ff:74:b7:ec:f7:a7:d2:12:8f:fd:a4:08:e7:73:38:
                    2c:94:1a:56:01:1e:fe:e7:fe:ee:dc:27:a4:e8:39:
                    54:d6:9d:47:77:e8:d0:c1:45:fd:96:51:7d:a3:cf:
                    3a:48:c2:ec:48:f2:5d:e0:08:e7:02:02:11:87:6d:
                    38:64:10:d6:0e:3a:a2:bc:52:2f:60:91:16:e2:72:
                    e9:3a:87:44:68:c5:19:94:1c:3b:0b:22:d9:62:04:
                    98:38:38:6d:bd:d8:ce:0f:28:c2:9f:35:0a:48:c6:
                    e3:50:ac:c7:c9:3c:2b:27:29:e5:ae:84:d8:89:ab:
                    97:64:dd:84:9d:25:fd:14:9d:1e:38:2b:ea:b9:b5:
                    14:de:a7:5b:03:99:86:3a:f9:b8:26:3e:62:60:69:
                    15:e4:16:86:17:32:8d:fc:11:f0:08:5c:ef:d3:63:
                    60:77:03:1b:4b:26:91:9c:4d:55:d8:4c:b2:32:cd:
                    df:80:f3:41:be:4c:f8:a0:c6:ba:34:5d:30:b8:6d:
                    29:1d:86:7a:99:36:e1:7a:d2:54:23:97:4b:59:f7:
                    79:47:60:50:10:75:07:25:c9:c2:47:6f:f6:33:d3:
                    18:d4:1a:bf:51:ae:79:f1:a4:66:0a:85:82:19:cc:
                    5a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:40:04:29:71:51:F1:BE:72:E0:24:38:BB:76:B1:E3:27:E2:11:F4
            X509v3 Authority Key Identifier:
                keyid:57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:45:8f:3f:6b:37:b1:ca:54:2b:b1:f9:06:ae:f4:72:f2:1a:
         7c:9d:12:13:42:4e:bd:9f:2e:3f:9b:34:db:f5:73:83:bf:d3:
         fc:d1:a8:00:fe:2d:b3:ea:b6:d6:83:4a:99:50:d0:e0:81:8a:
         d8:0b:84:51:16:57:35:19:43:6d:82:0e:3e:0f:b8:b1:f1:95:
         08:09:1b:34:13:dc:35:e1:4e:83:34:f7:f9:10:87:9f:1f:d9:
         53:f7:8f:07:54:74:aa:d0:e3:c9:25:e4:69:65:0f:e4:57:4a:
         63:36:5b:79:d8:c5:b5:1a:11:0f:f8:b7:36:c0:f2:55:c6:4b:
         eb:6e:e5:8f:cb:40:cb:e5:57:e7:5a:61:9c:6c:8e:60:03:73:
         c6:55:f6:5a:46:e0:e5:51:d1:49:f3:8f:07:52:af:24:e5:81:
         6c:18:1d:f8:17:88:ab:36:d4:b6:30:b7:89:2c:50:9e:32:20:
         82:1b:17:87:cb:7e:95:6b:ae:9c:b8:d9:c0:97:12:06:19:c7:
         bc:0a:83:71:5f:e4:20:86:63:52:e0:e2:20:19:a4:a6:5c:02:
         54:3d:29:fe:d0:55:97:9a:d7:db:ff:43:a8:25:bb:b5:e1:fc:
         f1:b8:a2:ff:69:6f:7b:ab:ee:22:d9:4b:4b:c3:14:b7:11:4c:
         94:a6:e2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:22 2025 by rpki-client