Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
File:                     cw4Zvy8v23MCMtosRVGjEro-LuI.mft (raw, json)
Hash identifier:          +keSIVB8hIFqsz7PmIoJrcT/D6OuK+zZPXhTt7Ep21g=
Subject key identifier:   42:A8:4B:0D:4E:9A:A3:BB:66:B2:5A:BB:2B:66:56:1D:31:76:18:F0
Authority key identifier: 73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
Certificate issuer:       /CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Certificate serial:       01962896C4EC99984C610CAC0AA34D5BFEB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
Manifest number:          14EE
Signing time:             Sat 12 Apr 2025 06:01:31 +0000
Manifest this update:     Sat 12 Apr 2025 06:01:31 +0000
Manifest next update:     Sun 13 Apr 2025 06:01:31 +0000
Files and hashes:         1: 1z8pyfwC2t4dhlRaN8IL2Vz2Hao.roa (hash: okZD4KMt3vd7NMiadPiaHzBYrfOLxrrZpbs/oGs3PRE=)
                          2: 4PCFTZ1aepYvP13_Ep7q7mZBv_s.roa (hash: nxXggf/AC/RJxQoUxCNgb0lu+FwJmy4tkPULZ/J1w0w=)
                          3: cw4Zvy8v23MCMtosRVGjEro-LuI.crl (hash: oCebJUKvQTU2n8deOVQJYScUYXqwWa0R8Egh3NEhVrw=)
                          4: sZiDjovlZR7TPPXq724QB4yd_Ds.roa (hash: g0NC0qA2yq5MjWHr5RjOBshN8A2Yl9uqhpeNRfy6QdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:28:96:c4:ec:99:98:4c:61:0c:ac:0a:a3:4d:5b:fe:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
        Validity
            Not Before: Apr 12 06:01:31 2025 GMT
            Not After : Apr 13 06:01:31 2025 GMT
        Subject: CN=42a84b0d4e9aa3bb66b25abb2b66561d317618f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:48:b6:1d:4f:67:32:1a:2a:6d:0b:91:bb:23:
                    6d:23:a1:61:39:01:d0:67:e8:d8:78:96:8e:23:0e:
                    f2:4d:9d:9b:83:d7:e5:14:c7:6a:10:26:d0:00:89:
                    ca:7e:53:28:88:e9:85:97:7c:10:c5:3b:f6:bb:80:
                    20:c0:15:23:2a:35:29:c4:72:2f:23:c0:4c:60:0d:
                    d1:35:c8:15:56:9c:f0:04:96:6d:af:ca:02:5b:9b:
                    11:ef:bf:82:e8:33:fc:df:6e:bf:70:55:23:f2:87:
                    a9:8a:bc:df:33:a1:d2:b5:3c:b8:6f:12:17:2e:47:
                    f6:d2:87:1f:94:7f:83:9b:54:4d:d0:09:69:a1:4a:
                    b6:b7:b5:44:f4:eb:89:4f:0d:79:cc:8f:05:2a:86:
                    dd:35:ed:b3:db:28:ce:aa:30:ae:1c:aa:a5:b1:a6:
                    61:09:58:b1:22:7b:a0:b1:5e:3a:05:f8:12:36:16:
                    0d:14:0f:eb:11:bf:c7:f1:46:27:fa:ce:45:61:a3:
                    85:65:1a:3c:36:27:37:24:00:7b:f4:91:4e:76:fe:
                    5f:ea:e6:52:b0:dd:39:a3:f4:d0:cc:9f:09:dc:98:
                    5c:ab:79:6d:83:21:5e:bb:00:a6:0d:58:b7:80:ab:
                    d0:d9:83:dc:a6:4d:e7:fa:95:41:c5:8b:73:86:29:
                    46:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A8:4B:0D:4E:9A:A3:BB:66:B2:5A:BB:2B:66:56:1D:31:76:18:F0
            X509v3 Authority Key Identifier:
                keyid:73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:2b:8b:4b:6c:08:bf:d9:8b:96:6a:0e:26:88:12:b9:29:5e:
         e3:16:ec:de:59:e2:f1:61:a0:03:8b:1a:4a:58:53:55:35:9f:
         b2:68:ca:ed:ea:f0:02:6c:c8:6d:71:bd:e2:84:53:1a:a0:40:
         12:fb:69:45:30:b9:7e:18:9d:a3:f6:7e:4b:7f:43:1f:c8:5d:
         f5:53:83:94:80:4d:b7:d3:52:75:86:fa:1e:98:84:d9:f8:68:
         ef:0b:a5:3b:2b:db:ad:f6:30:61:1c:a5:05:ff:62:cc:0f:31:
         45:22:00:be:37:77:9d:0c:a1:08:c4:cc:4f:ca:19:75:25:27:
         4a:63:20:fc:95:7c:32:b5:fd:7f:40:3f:48:69:c9:8a:03:42:
         f9:96:61:97:41:af:6c:3c:38:2b:d4:85:a5:ae:07:84:c8:61:
         84:fc:65:c9:43:59:d6:a7:7c:d5:8a:0b:05:5c:b2:f2:da:27:
         6b:76:7f:a2:e0:11:06:be:b4:e4:72:69:1f:52:84:31:1d:84:
         5d:27:02:5b:50:de:9e:b0:20:f6:13:b1:99:82:7e:32:42:02:
         76:e6:4a:79:14:7a:cc:56:a4:3c:2d:1a:8f:bd:b1:a5:38:ad:
         0c:e4:b5:b8:31:25:77:bb:99:ec:47:6a:fc:fd:72:21:72:70:
         49:d8:e8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:29:37 2025 by rpki-client