Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.mft
File:                     OEDxTHgwNEVl2ZKq7U8Gzls6P-w.mft (raw, json)
Hash identifier:          nLb/bDI9YripyuS45oxHtGxma3BDauKwscoWn+oIX5o=
Subject key identifier:   B7:E6:6D:02:95:34:F5:93:D3:6B:CB:9A:DC:8B:7F:4C:7C:3D:6C:CF
Authority key identifier: 38:40:F1:4C:78:30:34:45:65:D9:92:AA:ED:4F:06:CE:5B:3A:3F:EC
Certificate issuer:       /CN=3840f14c7830344565d992aaed4f06ce5b3a3fec
Certificate serial:       01965680F103E4E1C2EFC6C925FB3A3848B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.mft
Manifest number:          14
Signing time:             Mon 21 Apr 2025 04:00:12 +0000
Manifest this update:     Mon 21 Apr 2025 04:00:12 +0000
Manifest next update:     Tue 22 Apr 2025 04:00:12 +0000
Files and hashes:         1: OEDxTHgwNEVl2ZKq7U8Gzls6P-w.crl (hash: DwyHav7bR8iBESTCS6l+apWwfTVhw7L6xODyVuKLWuY=)
                          2: Sd24d28V76HUXI5tJozId-LBxGU.roa (hash: sz6vCalE+qZ8AG41dIYIziT32WF467U+LgWfS31nXaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:56:80:f1:03:e4:e1:c2:ef:c6:c9:25:fb:3a:38:48:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3840f14c7830344565d992aaed4f06ce5b3a3fec
        Validity
            Not Before: Apr 21 04:00:12 2025 GMT
            Not After : Apr 22 04:00:12 2025 GMT
        Subject: CN=b7e66d029534f593d36bcb9adc8b7f4c7c3d6ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d8:16:40:33:5c:ea:b7:ab:12:17:30:40:30:
                    a4:44:67:b2:e1:77:4d:ce:e7:58:a2:65:cc:0a:c6:
                    8f:ed:01:94:84:fa:34:67:03:0c:8a:7c:cd:a2:b2:
                    4b:48:5d:a5:27:18:22:e4:e2:e8:2e:1d:e7:97:17:
                    c4:44:bb:51:89:d7:6b:0f:87:53:87:74:f9:92:a2:
                    66:2f:c4:b6:7a:67:04:6f:2f:9d:e5:75:e4:6a:e0:
                    cf:a9:64:b4:58:37:74:89:3e:0c:f2:61:39:06:af:
                    34:52:8a:a8:8f:38:b1:88:34:7c:06:da:db:73:9c:
                    fd:bc:93:5b:8e:29:78:55:01:c1:72:65:67:5d:12:
                    d2:80:ad:77:0d:05:f2:40:52:ed:af:fb:2b:e8:0a:
                    2c:0a:4a:f4:03:2d:f8:aa:31:6a:89:bd:31:dc:d4:
                    d6:03:a0:6b:1d:53:ff:65:c1:59:0c:dc:af:80:73:
                    d5:8a:c4:14:5f:49:5a:5a:19:12:7e:59:9b:d7:3c:
                    a9:67:66:f7:fd:53:82:f4:35:7d:b1:09:ac:a6:5d:
                    ac:73:6c:4a:85:74:09:fe:6b:7b:9d:c3:73:df:d1:
                    db:0d:20:b1:56:fe:0b:d0:30:6a:cc:e4:72:e7:98:
                    cd:e0:28:1e:af:1e:45:77:3e:e9:9c:7c:9e:95:ac:
                    43:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E6:6D:02:95:34:F5:93:D3:6B:CB:9A:DC:8B:7F:4C:7C:3D:6C:CF
            X509v3 Authority Key Identifier:
                keyid:38:40:F1:4C:78:30:34:45:65:D9:92:AA:ED:4F:06:CE:5B:3A:3F:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:46:01:fb:15:64:e2:80:e3:c3:38:60:a0:e2:18:ae:f5:49:
         4e:bb:e7:25:2d:c3:08:e1:c6:f7:71:54:dd:e6:6a:84:ff:e5:
         8c:23:78:d9:f6:59:09:32:2e:c3:3b:c2:25:8d:ad:4b:92:c1:
         33:c0:eb:4f:08:c3:ed:d5:85:5a:b6:4a:38:1a:80:9e:52:8c:
         d7:e9:e7:c8:af:83:1c:f1:07:86:87:15:e9:c1:c2:37:6f:1b:
         cf:4f:85:57:16:54:ef:c0:57:5e:1c:c5:6e:7b:ad:82:2f:14:
         6e:70:04:76:bf:28:95:6f:73:d4:be:9d:28:5d:11:ed:67:36:
         ca:ee:de:a9:99:af:94:76:95:16:43:41:27:fc:40:1a:14:06:
         b4:01:61:16:a1:85:40:21:36:ef:b6:80:60:68:39:32:5d:a0:
         2d:61:a3:49:23:fb:a0:6e:7a:7d:55:b7:1a:39:bf:37:66:3c:
         10:3d:f4:53:ad:9f:27:9f:a3:f4:ec:a5:0b:73:ff:81:e4:ba:
         ae:b4:62:8b:ea:a1:5e:51:e6:a9:ac:b4:bb:af:70:91:4a:88:
         43:7b:f6:cf:f0:b5:a7:d5:8b:1f:29:17:23:75:09:51:83:45:
         29:29:6e:df:04:70:ab:2c:8e:a8:4a:82:65:27:9f:aa:72:7e:
         0e:d4:88:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:47:10 2025 by rpki-client