Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
File:                     M1etQG35k0tQSLX6Id4xRQuTb6k.mft (raw, json)
Hash identifier:          4Miu9CrQJuO57hfXEvCJTaYyHTkVbRLW0SuZaJILWt4=
Subject key identifier:   54:44:AB:CD:E6:D6:D4:AE:0A:60:74:81:E7:39:C4:78:75:0C:C8:E2
Authority key identifier: 33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9
Certificate issuer:       /CN=3357ad406df9934b5048b5fa21de31450b936fa9
Certificate serial:       01958C60AAD315BA47983795A2E1576D906B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
Manifest number:          1498
Signing time:             Wed 12 Mar 2025 22:01:40 +0000
Manifest this update:     Wed 12 Mar 2025 22:01:40 +0000
Manifest next update:     Thu 13 Mar 2025 22:01:40 +0000
Files and hashes:         1: M1etQG35k0tQSLX6Id4xRQuTb6k.crl (hash: JQ3ov5UMcZ+hf/reMAObdPA2qDHJOsHqg5SD3S27f2A=)
                          2: m9KlvtpTq4Ql79O_O_rULA1w-zY.roa (hash: +h4/STkGCXYgH/sIOVE5dquJUDdEfzAIpbql2yKK20U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:60:aa:d3:15:ba:47:98:37:95:a2:e1:57:6d:90:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3357ad406df9934b5048b5fa21de31450b936fa9
        Validity
            Not Before: Mar 12 22:01:40 2025 GMT
            Not After : Mar 13 22:01:40 2025 GMT
        Subject: CN=5444abcde6d6d4ae0a607481e739c478750cc8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:36:1e:4c:25:77:ad:53:8d:db:d1:ea:84:d0:
                    dc:25:c0:db:17:cd:47:85:ae:34:c9:20:1d:23:2a:
                    bb:81:72:ae:3c:89:d7:b8:f1:b0:a9:42:58:ba:07:
                    61:43:95:92:4a:92:7f:63:e7:5d:15:50:c8:5f:f7:
                    49:c6:7a:3d:f0:65:70:cc:8c:da:9d:1f:9b:41:fa:
                    47:be:71:bf:53:c6:c8:65:aa:46:0c:d8:81:e0:91:
                    9a:5c:51:bc:a5:67:89:23:01:63:7e:fa:ba:00:d2:
                    d7:68:20:83:12:cd:6e:4c:b5:81:61:67:17:fc:7b:
                    b3:37:2f:f5:f8:4b:f7:25:a3:39:0c:be:b7:2c:97:
                    90:94:3d:7f:3b:ca:a1:88:77:dd:22:2c:1f:56:a2:
                    05:ec:02:44:94:39:d7:2e:49:9e:19:ba:e9:e0:6a:
                    71:cb:6c:66:f7:d7:f5:5d:20:41:c7:53:86:84:5a:
                    d3:a9:50:0e:ef:d2:65:2d:6f:eb:67:bf:9f:c7:91:
                    64:00:7c:35:8a:45:61:1f:02:80:a1:48:2e:41:fd:
                    f2:34:40:60:ab:8f:f3:0a:b8:4d:46:de:5d:82:eb:
                    65:eb:7f:59:d0:74:0f:7e:db:b5:7e:bd:8c:fc:ec:
                    f0:09:96:b2:17:b1:65:f2:51:98:c4:8f:56:f8:56:
                    c6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:44:AB:CD:E6:D6:D4:AE:0A:60:74:81:E7:39:C4:78:75:0C:C8:E2
            X509v3 Authority Key Identifier:
                keyid:33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ab:8b:ae:1b:01:a9:20:ba:12:95:c1:d8:14:e7:34:23:0f:
         8d:04:ee:96:32:f5:e2:8a:bb:0c:11:a7:98:36:5c:6f:ac:d3:
         e1:ae:c3:93:9c:7e:1f:c6:5b:20:43:93:2e:16:35:d8:11:35:
         30:4e:65:57:a0:c3:62:70:58:70:65:ab:86:2d:59:6f:4d:5f:
         08:bf:10:7c:41:eb:44:57:d6:67:06:e3:00:f7:2d:4c:88:0f:
         8b:f3:77:8f:cf:f3:b9:26:fa:fd:34:6a:b1:b2:a1:fc:71:9a:
         79:47:c6:57:bc:c1:da:e6:ee:e3:9c:f4:37:fb:7d:ae:f5:68:
         5e:f6:48:ae:94:3c:2f:cd:68:a9:ba:08:aa:2e:b3:90:50:04:
         f9:37:a6:09:f3:2d:70:e7:4c:cb:3d:b3:08:74:28:e0:d9:45:
         ca:ad:68:dc:4e:8c:6a:de:40:2d:5a:47:13:e6:62:d4:a4:f0:
         e8:3e:15:7f:7a:b0:df:6a:55:6a:5d:18:c7:28:6d:45:f9:65:
         35:cc:1a:f1:75:75:4d:2c:42:ed:27:60:28:14:5d:08:9d:e6:
         9a:1e:31:8a:92:cd:29:84:a5:1d:4d:c7:47:70:b0:f5:97:74:
         e7:02:c3:5e:b0:67:e8:18:f9:b2:81:a3:1f:3d:7a:8c:ef:3e:
         c2:04:32:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:03 2025 by rpki-client