Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
File:                     SAw7k_8qNPv6WuglVvZwNAy11ck.mft (raw, json)
Hash identifier:          uBrPxxmX42G7OSV4+CArW/KDcwbONigYDsp3rmfLlKc=
Subject key identifier:   CC:BE:5F:8B:94:0C:2E:7A:6E:BC:8D:67:0F:8D:5D:04:8D:91:EF:FA
Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
Certificate issuer:       /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Certificate serial:       0196447B5F31BAF0F3A5AEFCE2A0D003ECDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
Manifest number:          14F5
Signing time:             Thu 17 Apr 2025 16:00:58 +0000
Manifest this update:     Thu 17 Apr 2025 16:00:58 +0000
Manifest next update:     Fri 18 Apr 2025 16:00:58 +0000
Files and hashes:         1: M6pYVSPeRii26Fe6-xA2oF6TOhY.roa (hash: ALWsaRUrnNv1Osi/17oum/JvXg9TackTfLVpB/IG6ok=)
                          2: SAw7k_8qNPv6WuglVvZwNAy11ck.crl (hash: XRbfzjI86XMGlfCrydHBFqoaGZx05a7UFFNMijmSNmY=)
                          3: o_-CPWekkGbizNj3OifTY4NJDPc.roa (hash: uwNEErvUsdFhNjQ3+JpAmIUn/dDzO0Gs7xJ0LsO1aD4=)
                          4: xR8JRniMXIcnxz5B1H7wwKMwL8E.roa (hash: U8VTiajHorcJU61emonuHN7kXOWFA3+lZIhrr1YC8IY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:7b:5f:31:ba:f0:f3:a5:ae:fc:e2:a0:d0:03:ec:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
        Validity
            Not Before: Apr 17 16:00:58 2025 GMT
            Not After : Apr 18 16:00:58 2025 GMT
        Subject: CN=ccbe5f8b940c2e7a6ebc8d670f8d5d048d91effa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:59:9b:84:c9:dd:28:5a:bf:91:86:30:19:4f:
                    5b:01:ec:42:61:c1:c2:3f:40:02:78:45:a3:09:4b:
                    16:17:14:ed:36:14:42:42:a4:cd:19:d1:ef:1b:92:
                    2c:b4:d0:eb:b9:25:2a:7d:fe:c9:a6:79:7d:0b:93:
                    c6:4d:58:0e:39:45:f9:64:f7:9b:2c:d5:61:30:72:
                    20:10:36:f4:eb:8f:8b:bb:d6:13:19:d4:1c:23:dd:
                    b2:20:44:b5:79:86:4a:3d:fb:8f:2f:03:61:ce:ce:
                    7c:b5:e6:8f:b9:a0:e0:65:db:15:c5:67:48:2c:19:
                    ea:0c:ab:5c:48:da:79:4c:89:da:63:16:f3:83:4d:
                    06:ad:10:f3:93:f7:79:80:18:18:98:45:cc:0a:86:
                    cf:43:c0:03:8d:55:64:53:f1:aa:20:29:4e:6e:ca:
                    f0:24:0b:9b:61:9e:94:f1:d1:bb:79:b1:11:dd:f4:
                    97:9d:99:b0:07:c4:73:66:9d:2c:e6:8f:c5:fc:fe:
                    dd:42:71:7c:58:df:cb:11:16:66:37:79:68:9c:46:
                    c4:aa:d6:3a:d2:ee:f4:ae:45:ae:58:2a:f0:e0:6e:
                    1b:7c:95:d1:bd:96:72:60:f0:8a:1b:14:c4:a0:69:
                    2b:78:dd:62:67:87:5f:09:35:64:f9:12:db:05:ef:
                    0a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BE:5F:8B:94:0C:2E:7A:6E:BC:8D:67:0F:8D:5D:04:8D:91:EF:FA
            X509v3 Authority Key Identifier:
                keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:86:2f:15:a5:50:58:c7:58:74:2d:04:91:d4:dc:39:43:25:
         0d:35:8e:49:aa:cb:92:c1:0d:69:8b:06:d5:28:ff:03:9f:19:
         45:d6:6a:90:43:ae:51:41:65:62:9a:d4:70:8e:18:eb:67:7a:
         70:e3:d2:cd:7c:88:64:06:08:a2:a0:7d:cb:e1:7c:a6:e5:0a:
         7f:ee:e6:c3:13:0a:f9:fc:93:f2:56:28:2a:a3:34:13:fc:b8:
         b6:ac:e9:10:6f:8c:6a:4a:4f:c8:a8:76:fd:e3:d6:e9:8b:76:
         fa:4f:8c:e5:9f:79:f5:71:89:93:e7:af:ac:ec:bf:95:98:0d:
         bb:2d:0e:2e:ed:8d:42:46:d4:51:2a:85:97:15:86:80:1a:3f:
         c5:d8:78:fe:60:46:96:21:74:63:16:fb:fa:5b:a8:bb:28:13:
         61:f7:29:4e:44:66:63:43:1a:0d:77:96:76:b3:dd:e6:e9:e6:
         e8:af:70:ca:ca:72:78:3b:fd:d9:1a:49:3c:e3:4a:f3:5f:85:
         ff:85:21:0d:b3:b9:93:cb:96:78:62:f8:6c:d8:83:f7:c2:84:
         ef:bc:ae:26:8f:b2:5c:93:af:f2:e6:bb:92:51:a9:9c:cd:ce:
         97:ea:34:36:82:b4:0c:31:94:85:4c:0a:6d:03:98:ee:c3:4d:
         da:06:28:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:37:43 2025 by rpki-client