Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/ge7hf9vLCdu87vZjxhV7X-MIH_Q.mft
File:                     ge7hf9vLCdu87vZjxhV7X-MIH_Q.mft (raw, json)
Hash identifier:          CLiujUq1g3uUF/U+Gg3T6e5et0KGIxLu1hl1p4Ojj3U=
Subject key identifier:   F9:01:9F:DC:48:96:77:26:EE:76:0E:DA:D0:79:B5:00:C8:A9:3E:B5
Authority key identifier: 81:EE:E1:7F:DB:CB:09:DB:BC:EE:F6:63:C6:15:7B:5F:E3:08:1F:F4
Certificate issuer:       /CN=81eee17fdbcb09dbbceef663c6157b5fe3081ff4
Certificate serial:       01967D57AE51C8D8946B1B7C074B6BA26D7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ge7hf9vLCdu87vZjxhV7X-MIH_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/ge7hf9vLCdu87vZjxhV7X-MIH_Q.mft
Manifest number:          1514
Signing time:             Mon 28 Apr 2025 17:00:20 +0000
Manifest this update:     Mon 28 Apr 2025 17:00:20 +0000
Manifest next update:     Tue 29 Apr 2025 17:00:20 +0000
Files and hashes:         1: F4qvGIYkJR23AR8i3U55htWfFrA.roa (hash: sLcl2GBXiso+t+Z5Jf9zcobxR79ID28gM2VuGSdiFAw=)
                          2: ge7hf9vLCdu87vZjxhV7X-MIH_Q.crl (hash: Tzf/QNrD4yhx8lO9JfqhHrUvW4vUyV6EWAZg5Ca+UrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/ge7hf9vLCdu87vZjxhV7X-MIH_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/ge7hf9vLCdu87vZjxhV7X-MIH_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ge7hf9vLCdu87vZjxhV7X-MIH_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7d:57:ae:51:c8:d8:94:6b:1b:7c:07:4b:6b:a2:6d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81eee17fdbcb09dbbceef663c6157b5fe3081ff4
        Validity
            Not Before: Apr 28 17:00:20 2025 GMT
            Not After : Apr 29 17:00:20 2025 GMT
        Subject: CN=f9019fdc48967726ee760edad079b500c8a93eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:dd:10:29:9f:7b:7e:0a:94:11:06:08:b5:
                    aa:6d:64:02:07:b0:d7:ce:2f:6e:dd:8b:04:61:db:
                    02:78:95:86:49:45:76:d2:62:92:4e:5a:a0:28:cc:
                    50:6c:42:bd:55:16:2c:c3:77:0f:03:9e:3f:f5:cb:
                    46:46:3e:50:c6:ee:b6:07:3f:b6:45:63:54:69:2e:
                    bd:76:4b:04:fa:4a:fc:87:58:08:34:97:d2:0a:a9:
                    cd:86:3a:90:49:14:b1:9b:a9:93:c0:fd:fb:a9:10:
                    01:2f:cb:1c:33:be:47:6e:d7:90:ad:24:67:e8:36:
                    30:9f:47:b1:ba:37:8f:e7:ea:61:f9:0f:7b:d0:fa:
                    a9:c3:b9:02:75:88:76:f0:2d:77:5d:9f:56:09:6b:
                    7c:ed:31:38:0d:e0:07:41:4c:45:30:f1:7b:5e:a6:
                    c8:1a:98:86:0d:56:48:ff:cc:57:9b:d6:d9:f4:ae:
                    c7:1b:3f:be:19:e5:53:74:3c:4c:15:f5:3c:9e:25:
                    74:7d:c5:99:6f:b2:5a:59:af:48:25:15:f9:b0:dc:
                    4d:35:50:dd:52:44:17:35:b4:89:5f:1e:53:28:94:
                    9b:93:fa:02:bc:c2:28:de:44:58:6a:94:11:2e:fd:
                    05:bd:96:da:ab:73:67:29:39:40:f0:ef:67:e5:b9:
                    e6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:01:9F:DC:48:96:77:26:EE:76:0E:DA:D0:79:B5:00:C8:A9:3E:B5
            X509v3 Authority Key Identifier:
                keyid:81:EE:E1:7F:DB:CB:09:DB:BC:EE:F6:63:C6:15:7B:5F:E3:08:1F:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7hf9vLCdu87vZjxhV7X-MIH_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/ge7hf9vLCdu87vZjxhV7X-MIH_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/ge7hf9vLCdu87vZjxhV7X-MIH_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:cb:d5:04:95:6d:0d:a8:4f:54:3e:bb:4d:ae:6a:b3:5b:ca:
         da:ac:09:6f:b4:54:45:a2:b6:cc:0c:d2:23:53:f4:b3:cb:b1:
         62:30:5a:fe:9a:b7:8e:e7:5a:16:9f:48:f1:d0:b4:e4:df:6e:
         14:3c:fc:3c:b2:5e:55:b5:f0:9d:fa:ef:3d:6b:e4:7c:58:68:
         e1:9e:a3:3c:14:4a:d4:81:e7:a5:31:64:c1:f9:a6:74:a7:cc:
         8b:93:79:ac:00:1d:a2:f7:d5:92:a1:d2:19:d2:b9:2e:48:0f:
         d6:02:e0:40:e8:55:52:51:75:d3:c2:27:44:7d:dc:fe:48:f0:
         24:4e:44:52:86:22:72:e0:03:bb:30:bf:a4:f6:c6:dd:3e:f4:
         a8:7a:f6:67:06:b5:ae:20:38:76:e3:1d:aa:4a:ba:ed:0f:2a:
         35:20:74:94:70:3e:40:2c:cb:62:2d:51:00:3e:bc:dd:e0:28:
         44:7b:d6:7d:e0:e1:de:b5:b5:75:2d:94:ef:b4:57:0a:00:15:
         cf:70:40:d2:31:f1:55:36:fe:eb:f7:42:ad:c0:d9:08:a5:de:
         97:95:ad:1e:02:44:01:09:31:1f:5b:c5:de:6c:ce:a6:21:b4:
         5c:d0:fe:91:3e:4e:47:0a:94:a5:20:50:40:a8:54:83:b7:84:
         c0:99:4b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:16:57 2025 by rpki-client