Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
File:                     IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft (raw, json)
Hash identifier:          2aDQf6Q7qvp2HfFCZ4ZgKEfb4hjyvHwuBrtjwQHxQm4=
Subject key identifier:   72:4E:18:91:81:3E:B0:98:8C:7F:94:DD:2D:9B:F5:D3:A7:1B:C0:DA
Authority key identifier: 22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
Certificate issuer:       /CN=2213007596493802fb93a326731fd3329eae2dac
Certificate serial:       019641E7B5AC3928DDAB8BF27A54B0925147
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
Manifest number:          14F4
Signing time:             Thu 17 Apr 2025 04:00:26 +0000
Manifest this update:     Thu 17 Apr 2025 04:00:26 +0000
Manifest next update:     Fri 18 Apr 2025 04:00:26 +0000
Files and hashes:         1: DjsbeUScAR9EUfRE070QFYOZXx0.roa (hash: Jj0CL6iZxJ5XW4ZpctnqFGBbj6Ygbs9fspzlTAigxwY=)
                          2: IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl (hash: S1m9h40nGA9WvOPx3BEYWf7un0PGb79uw7Eoh2/u/aY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:41:e7:b5:ac:39:28:dd:ab:8b:f2:7a:54:b0:92:51:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2213007596493802fb93a326731fd3329eae2dac
        Validity
            Not Before: Apr 17 04:00:26 2025 GMT
            Not After : Apr 18 04:00:26 2025 GMT
        Subject: CN=724e1891813eb0988c7f94dd2d9bf5d3a71bc0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bf:ad:bc:4d:34:19:02:67:57:c3:f1:dc:49:
                    27:48:c4:f4:f0:41:ba:44:41:74:da:b5:fa:83:8c:
                    2f:7d:2d:d7:45:b4:fe:2d:25:3c:0e:69:a0:42:6b:
                    ed:5b:22:2b:65:5b:ea:e9:69:a7:0d:a0:f4:f0:e9:
                    d3:fe:69:d5:e7:fb:03:dc:54:7d:34:96:27:89:b9:
                    c2:9c:fd:d1:89:6c:ca:a6:99:f7:17:bc:ed:8c:b1:
                    32:a8:82:d7:01:b5:02:04:27:be:5a:20:5c:86:d6:
                    92:ec:ef:87:c5:2c:f0:71:2c:cd:51:cd:1a:ec:02:
                    20:ca:e1:90:1a:ac:b8:87:f3:85:03:b4:e4:90:b4:
                    f5:4e:cd:bc:94:8c:4c:35:51:43:5c:65:fa:a7:e1:
                    9f:56:6a:8a:55:b7:6f:79:d3:c9:29:e1:3c:cf:85:
                    ea:05:3e:ad:0f:b6:a6:9c:da:77:63:04:47:e9:69:
                    a4:b5:f4:b3:08:aa:95:bd:56:71:04:c1:59:eb:9c:
                    25:2e:c8:cc:bb:94:24:51:65:30:f9:b1:01:b5:18:
                    af:ae:80:4f:2e:0c:68:50:7c:de:74:ad:c6:0f:c9:
                    23:c3:3a:51:49:f0:f4:d6:07:27:a4:36:a6:7c:ac:
                    7d:f2:fa:f0:36:96:93:3d:da:46:b8:20:c6:c3:07:
                    ef:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4E:18:91:81:3E:B0:98:8C:7F:94:DD:2D:9B:F5:D3:A7:1B:C0:DA
            X509v3 Authority Key Identifier:
                keyid:22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:88:9c:ca:76:e1:50:90:0a:c1:a3:5c:d1:83:46:df:95:00:
         8d:ed:46:f1:6c:70:b9:a3:eb:82:b3:a3:8e:94:1d:d6:a0:fc:
         9c:09:64:8c:46:e0:91:8c:4f:ad:30:15:18:30:19:24:52:80:
         d0:9b:09:a7:cb:79:53:c1:0b:a5:c6:40:ac:4b:73:8f:66:db:
         6b:bf:bf:73:6c:a5:7b:de:c7:f9:92:a7:08:4a:5b:a8:9b:da:
         4c:14:f7:9c:d6:99:3c:46:4a:1a:f5:b0:4f:d7:82:0f:8b:c9:
         bb:54:56:c4:28:e1:4f:b2:f5:91:70:53:55:8a:80:a6:1e:74:
         be:9e:a4:c4:44:dc:0d:22:33:49:6d:b0:f4:e0:11:68:da:bd:
         95:68:01:ff:cf:34:8d:af:2b:e5:28:d2:80:8a:56:cc:88:fd:
         ed:4b:2b:a4:86:0a:81:21:1c:84:8f:22:b6:4a:91:1d:fa:ac:
         7d:77:65:79:b9:b2:f7:d7:b7:17:c2:69:61:29:c2:86:72:ed:
         0a:5f:cb:ef:6f:a2:f4:49:60:e7:5b:1d:e0:30:b4:68:88:8d:
         95:d9:ef:b1:e7:85:7d:c7:34:79:60:34:aa:58:ca:15:b2:03:
         f4:5d:ea:3a:84:17:a8:37:11:69:7b:7d:ab:f9:b2:77:1b:91:
         a4:40:d0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:27:13 2025 by rpki-client