Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
File:                     CNedINdqndsHW5T58ABSqyGCdrc.mft (raw, json)
Hash identifier:          Qsfu2J1TdjTgHX1VD/qf25+J2jj569FsXz44PasPkG4=
Subject key identifier:   F6:BE:6D:24:D3:6C:2E:FF:1D:F5:C8:55:39:CC:0E:15:06:04:B8:38
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Certificate issuer:       /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial:       01968210A6E3264DFB382C9EDF6FC80CA71E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
Manifest number:          0EE0
Signing time:             Tue 29 Apr 2025 15:00:51 +0000
Manifest this update:     Tue 29 Apr 2025 15:00:51 +0000
Manifest next update:     Wed 30 Apr 2025 15:00:51 +0000
Files and hashes:         1: CNedINdqndsHW5T58ABSqyGCdrc.crl (hash: TTTXDANhor4cG75PD6VyKi30j3v+qvL1yFTqu3i4tls=)
                          2: NxR6rjQYDvK-6beKZqhb21Ma0h0.roa (hash: eDS+0w8Ojc9YalXnJemejPGahb1kTWYCKBq2prUt9qg=)
                          3: _BQI9-Z6Ir5h5KACcOfrToSjkeU.roa (hash: +8QwmWebGpDaCA9AoYcnSa24keLkeW7OwUobTrC8xMY=)
                          4: ytooMvIrVe1UKIoWb2AsvqDHusU.roa (hash: FNi924Rn+Q0YpiKfx0DUW4i6K1Um3nkEm9RbN6FN7Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:10:a6:e3:26:4d:fb:38:2c:9e:df:6f:c8:0c:a7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
        Validity
            Not Before: Apr 29 15:00:51 2025 GMT
            Not After : Apr 30 15:00:51 2025 GMT
        Subject: CN=f6be6d24d36c2eff1df5c85539cc0e150604b838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9d:2e:80:cb:e3:36:05:c6:6f:be:fe:26:e6:
                    0e:d5:fb:24:96:00:ad:2b:9e:03:8c:7e:fc:cd:86:
                    30:41:ff:b3:20:c3:d9:3e:32:a2:67:b8:c2:dc:09:
                    0d:9c:53:3c:4c:37:c0:f1:8b:e2:0c:d5:b9:9a:2d:
                    b4:a6:e9:88:79:5b:a2:71:d4:5f:f1:8b:0b:8d:7e:
                    60:76:26:b2:cb:1f:46:73:94:39:ff:08:52:06:87:
                    7f:4b:1e:99:5b:bd:30:da:e4:2e:ea:7f:b3:e0:de:
                    9b:e3:f6:b5:78:70:01:76:12:5d:6d:8c:bf:73:72:
                    77:17:cd:76:ed:53:50:f2:5d:0b:0e:f0:ad:75:8d:
                    45:8b:10:bc:38:a9:50:0b:c6:35:dc:7c:f6:4b:e5:
                    26:d9:68:ee:b4:1e:67:4b:89:13:a7:0a:b8:f6:45:
                    9f:5d:3c:e3:ea:ae:1a:7f:e6:f0:65:be:35:e6:ac:
                    66:5c:dc:3d:0b:63:34:67:9b:c3:9f:52:70:43:f8:
                    8c:fe:81:43:d7:3e:96:18:19:89:f2:af:9f:b1:37:
                    a1:f1:20:42:84:59:bd:fc:85:cc:96:1d:f2:59:5c:
                    1d:e2:d2:89:23:78:d8:e5:8c:58:f7:fd:5d:6a:bb:
                    af:4d:98:77:82:a9:46:b4:3c:66:24:fc:7e:ed:ae:
                    02:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BE:6D:24:D3:6C:2E:FF:1D:F5:C8:55:39:CC:0E:15:06:04:B8:38
            X509v3 Authority Key Identifier:
                keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:29:e3:05:73:9e:13:cb:53:63:08:af:67:f2:4b:9d:2e:a0:
         c5:de:66:90:b1:a9:aa:d4:09:d8:79:08:e2:d9:32:69:12:12:
         ab:6c:c7:5f:96:8a:7d:31:bc:73:c5:f4:1e:5c:9b:b1:da:38:
         5f:87:99:1c:b2:98:c8:6e:81:be:26:84:2a:45:8d:bf:3a:f7:
         a4:90:55:7b:f8:d1:c1:ce:a7:14:d1:e7:b0:5c:0e:5b:2d:45:
         3d:a9:ed:b3:a7:ed:65:90:f8:bc:3d:0b:9e:71:8a:2a:7c:f0:
         1d:a9:22:b1:d3:88:d0:8e:5f:8b:44:07:b7:76:f9:3d:23:16:
         34:73:d6:c2:68:ae:e9:e3:c5:dd:91:b3:df:0f:5b:46:69:f7:
         94:26:79:bb:d1:c2:37:9c:d3:7b:3a:46:43:1f:2e:29:d1:29:
         76:88:5d:0b:ef:61:37:b3:17:14:3b:10:26:56:c8:1f:ab:8e:
         8b:ef:06:02:45:2a:2a:90:98:b8:fb:8d:8a:3b:01:a3:99:09:
         e5:72:87:92:fd:20:a2:f2:c2:0a:3d:f9:2d:d3:c2:f3:77:c9:
         67:3a:59:53:5c:8d:d9:57:30:11:da:66:6a:b8:65:e0:d7:0e:
         43:48:42:a9:77:47:89:42:80:d3:c9:43:c0:53:05:0f:fa:36:
         f2:af:71:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:56:49 2025 by rpki-client