Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
File:                     AUa0KfjElhH8_qHvoaUbnA7dtuc.mft (raw, json)
Hash identifier:          kpm8dejyfPE8QmIg6sruit5p3s5x6q9Vn0W4jghiNQU=
Subject key identifier:   60:D0:EA:52:58:2D:89:A1:74:E1:75:DD:5F:8C:58:29:27:6A:84:C9
Authority key identifier: 01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
Certificate issuer:       /CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Certificate serial:       01968A00B5395DE4F89AADB23C4835540711
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
Manifest number:          13AC
Signing time:             Thu 01 May 2025 04:00:24 +0000
Manifest this update:     Thu 01 May 2025 04:00:24 +0000
Manifest next update:     Fri 02 May 2025 04:00:24 +0000
Files and hashes:         1: 4lSW2DqUUyfLAwCJxmdcakNOOAc.roa (hash: 0bkR+y4/sbmt2mM+LAt7tzsFlo9ay8a2libMzm6BQSQ=)
                          2: A1UUEmWN8hJvE_QDz6Phuppzgos.roa (hash: 71wzKo8KkCCIqHry8cTGiYr86Ds73uxSzDKBszKZYsI=)
                          3: AUa0KfjElhH8_qHvoaUbnA7dtuc.crl (hash: xUH49M079Li13PxxNspW4EY3RIjrIO6l9T4+B7KZ63k=)
                          4: PUvtKljRLvuOqowlndxBwGQKDl4.roa (hash: U5kHad25poEIvcwR4qtcel7KCFYyUvjuPf1N4FDV5NU=)
                          5: g4grZmuORaKS7qXdfY2Tw1BKwR8.roa (hash: J3nP1OMrsWuilznvZEcg4t0c4Ea3mup5IdWbWJUSouo=)
                          6: iciSv140fL3PtQnQ9u8uKNyjZD0.roa (hash: 3xoVorNvU/VeFcuXASi64FFVnBKDDjZqYnmoKneCFZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8a:00:b5:39:5d:e4:f8:9a:ad:b2:3c:48:35:54:07:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
        Validity
            Not Before: May  1 04:00:24 2025 GMT
            Not After : May  2 04:00:24 2025 GMT
        Subject: CN=60d0ea52582d89a174e175dd5f8c5829276a84c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1a:0d:58:6a:d2:51:74:bc:0e:b2:47:a4:64:
                    cd:94:ef:06:4f:81:7f:c9:7d:a3:64:6b:a0:47:17:
                    63:14:00:01:8a:5c:d1:18:7e:ee:d0:09:32:12:d0:
                    8c:e3:d4:55:8b:9a:13:3c:14:9e:d3:11:ac:d8:58:
                    8e:7a:e2:af:c7:ff:7f:3c:71:d5:07:98:bc:e3:b0:
                    e7:57:e6:6b:74:28:c8:3e:54:ac:fe:4f:f3:e3:cb:
                    fa:e6:20:67:04:c8:a6:ea:f7:c5:a5:a5:91:3a:e5:
                    b1:c8:57:cf:f5:31:76:18:f0:d9:a8:20:24:a0:5b:
                    ba:59:a1:20:78:44:c7:7a:07:4a:0e:90:a5:e3:a9:
                    1b:e4:97:b0:c0:b7:53:4a:ab:a6:ef:07:a1:28:b5:
                    f6:79:74:6c:2a:7a:52:f1:6d:ab:1b:fa:dc:63:2c:
                    07:cb:37:80:e3:6a:0a:20:09:14:21:91:ee:f4:ab:
                    19:ce:8e:ae:6e:8f:06:46:77:f2:b3:2a:20:1a:f2:
                    ea:9d:69:d2:c1:41:97:a0:f9:10:8a:42:1d:7c:ef:
                    53:6f:a8:14:b8:97:0d:92:02:39:88:5a:76:92:bf:
                    ee:c3:d1:e3:f6:16:4b:98:50:32:3d:50:6c:cd:a3:
                    5e:c0:3e:06:60:2c:6a:af:35:a4:ef:e9:e2:59:30:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D0:EA:52:58:2D:89:A1:74:E1:75:DD:5F:8C:58:29:27:6A:84:C9
            X509v3 Authority Key Identifier:
                keyid:01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:75:4e:e4:0b:80:19:3c:7c:96:ec:cb:be:84:4d:3f:3b:7a:
         77:10:3a:a9:23:4d:8e:eb:bc:4c:3e:ab:af:5d:8b:09:2d:6e:
         65:52:12:23:c3:ed:cd:23:22:52:bc:cf:78:a8:7b:3e:31:e8:
         bb:3d:72:b1:3d:72:16:ae:4f:a7:14:c0:68:29:4c:a1:4b:2f:
         71:0b:4e:ac:f0:09:de:91:85:f8:34:1f:ef:bd:a4:3f:22:83:
         92:9e:c9:91:cb:ca:5f:53:73:25:11:d6:06:1a:50:b3:96:a6:
         4e:e7:f4:30:5c:20:bd:d8:f4:90:ad:a3:1a:df:50:14:88:1d:
         ca:2a:88:ad:a3:15:03:19:55:59:c8:2e:37:f4:fa:9b:78:06:
         f8:6f:44:f6:f1:b7:d0:eb:38:c8:a6:c2:d6:82:a0:22:98:a7:
         7c:7b:a8:3e:f3:2a:85:b9:9b:1f:14:04:44:fc:94:3f:87:a1:
         65:41:2a:83:ab:54:79:46:da:c4:a7:92:1c:d6:e0:6b:d4:d6:
         06:f1:13:93:4d:68:5c:ef:1e:b0:29:22:0a:15:87:6d:17:6a:
         5c:cd:59:e6:8f:b9:c4:d7:5e:7d:de:df:db:e0:3a:f0:1e:06:
         c6:70:ac:1f:c6:2d:94:f7:c1:fb:be:17:b7:3f:10:8e:64:73:
         e9:36:86:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:11:20 2025 by rpki-client