Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
File:                     eTT37l0EoCYiPDqjGRK_YQ0A23s.mft (raw, json)
Hash identifier:          OdmyU0Jq4xd2+E49W2AUfrONGFIoWuGyCPnXcfONpWU=
Subject key identifier:   2B:76:CA:AC:1E:63:BF:E0:D0:C8:42:19:40:9F:4F:41:50:21:E6:21
Authority key identifier: 79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
Certificate issuer:       /CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Certificate serial:       01968DDD94CF8BDFB8B8F378F4EF61A6D85A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
Manifest number:          1499
Signing time:             Thu 01 May 2025 22:00:31 +0000
Manifest this update:     Thu 01 May 2025 22:00:31 +0000
Manifest next update:     Fri 02 May 2025 22:00:31 +0000
Files and hashes:         1: VNYCVzbiU_3jbeJ25u2hye6LJrc.roa (hash: fFv8A65gc1twwkAZ87BZHCT4KPuUQXD/tqltH8mgh/g=)
                          2: eTT37l0EoCYiPDqjGRK_YQ0A23s.crl (hash: Ns51DM3AkTLENGZ4GrzN+7oqrFrOPwtXJbuxL4re8sM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 19:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8d:dd:94:cf:8b:df:b8:b8:f3:78:f4:ef:61:a6:d8:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
        Validity
            Not Before: May  1 22:00:31 2025 GMT
            Not After : May  2 22:00:31 2025 GMT
        Subject: CN=2b76caac1e63bfe0d0c84219409f4f415021e621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:05:53:0c:b3:95:da:73:bf:85:43:53:5a:63:
                    57:31:b0:fb:d5:f0:3d:28:f2:ca:46:a0:4b:8b:80:
                    6c:d5:a3:d2:db:2d:6d:e4:41:7b:31:35:b4:91:59:
                    4e:c6:88:3c:09:0a:f4:93:17:a6:41:6a:9f:31:55:
                    af:47:07:df:d8:94:71:e0:43:05:cb:48:dd:96:38:
                    bf:50:b2:7b:1a:3b:ec:f0:cd:9f:e8:87:1c:1b:a5:
                    79:6e:49:e0:a4:e2:54:30:84:89:e4:58:9c:0a:2a:
                    80:95:ea:5b:06:4f:7c:2a:c4:a5:d6:82:68:3d:21:
                    61:e5:0d:4f:63:39:58:b0:14:6d:18:36:f7:e4:1a:
                    30:84:56:69:31:ad:11:d1:19:6e:24:f6:23:b8:8c:
                    0a:a6:19:4a:a1:ef:77:1c:08:43:24:08:92:37:b5:
                    dc:64:a3:1e:dd:34:8f:36:ed:31:6b:c4:d2:75:04:
                    4e:13:28:a5:ae:40:d5:89:51:3d:2d:48:9c:14:16:
                    31:39:ec:21:ce:82:51:91:02:ac:2e:96:09:ab:7e:
                    fe:f2:48:21:0d:96:c1:c8:5b:08:24:64:d6:d5:be:
                    c8:82:9f:47:bf:84:00:52:00:a8:44:88:fd:d7:03:
                    77:ba:86:f2:03:62:08:94:c3:a4:55:aa:ae:49:fe:
                    80:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:76:CA:AC:1E:63:BF:E0:D0:C8:42:19:40:9F:4F:41:50:21:E6:21
            X509v3 Authority Key Identifier:
                keyid:79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:cc:a0:07:87:e3:e0:06:80:e7:07:8b:d3:5a:c3:c1:39:61:
         d4:67:af:05:5e:9c:48:67:ea:59:dd:70:e9:6b:91:74:27:1e:
         60:e0:8f:f0:8a:74:94:a3:4d:9a:6a:71:a0:5b:c1:e4:d1:9d:
         e0:47:a8:a2:48:b8:ab:62:1b:df:a2:a6:5d:46:a2:f9:e3:4d:
         e2:f3:00:f9:d5:e9:06:c9:fb:ea:ed:f1:96:53:62:27:04:83:
         c6:0d:04:9a:c2:86:98:be:87:40:7d:0a:64:01:3b:41:ca:99:
         2e:2e:5d:fd:b3:fa:f4:df:b3:34:bf:2c:00:2f:44:d9:f5:67:
         e8:c5:1e:d3:29:8b:14:71:ac:e6:99:08:76:cb:a9:4a:fc:f7:
         d2:5c:17:31:99:ee:be:78:57:cf:63:20:ca:38:9f:0b:d2:80:
         ac:13:6c:94:e0:6a:7a:cb:2b:77:eb:e1:28:20:fa:8a:5c:a9:
         85:ac:94:33:49:93:bb:bd:18:d6:1c:79:9d:e1:bf:0b:dc:18:
         b7:fd:6a:d6:2a:d3:fe:6c:c8:05:de:2c:cd:71:c2:8d:cf:30:
         0c:92:ac:04:67:56:f7:cf:b1:94:22:b5:9a:30:71:b5:f3:db:
         39:f7:b7:d7:d5:50:54:3a:b1:74:2d:b9:4b:e1:69:d3:3e:60:
         9d:3d:85:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:51:05 2025 by rpki-client