Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
File:                     AyudLeU3ELMVjkLyKIkQnixA9Ds.mft (raw, json)
Hash identifier:          zAtFEdnMquy+UzL11bhho2p4/vkGTrJiWVvrpRxcVZ8=
Subject key identifier:   CD:49:C4:EB:87:16:D2:E4:EB:7F:BA:79:A2:A1:3F:A9:35:CD:B2:41
Authority key identifier: 03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
Certificate issuer:       /CN=032b9d2de53710b3158e42f22889109e2c40f43b
Certificate serial:       01967755986729C1295C2F56AF04887DC96D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
Manifest number:          0318
Signing time:             Sun 27 Apr 2025 13:00:20 +0000
Manifest this update:     Sun 27 Apr 2025 13:00:20 +0000
Manifest next update:     Mon 28 Apr 2025 13:00:20 +0000
Files and hashes:         1: 6iLRNmhEkle6ivGQW1sZ5gcKS8Y.roa (hash: +zvQRhGc/V+HMxoGc8X8w2swmCXbOVN2JfxwGb1F+xI=)
                          2: AyudLeU3ELMVjkLyKIkQnixA9Ds.crl (hash: Qm/eAeC4d12kFgwq18/s4p2hV2Gn6LTMjzEfWadJg7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 13:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:55:98:67:29:c1:29:5c:2f:56:af:04:88:7d:c9:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032b9d2de53710b3158e42f22889109e2c40f43b
        Validity
            Not Before: Apr 27 13:00:20 2025 GMT
            Not After : Apr 28 13:00:20 2025 GMT
        Subject: CN=cd49c4eb8716d2e4eb7fba79a2a13fa935cdb241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:81:3c:ff:fd:4f:0b:49:2f:aa:ac:f7:03:5d:
                    bf:37:db:75:40:38:30:78:b2:f3:8e:d8:e1:6d:0b:
                    1c:c2:0d:53:03:e4:cd:42:bd:f5:84:e8:83:0e:48:
                    4c:f2:50:ba:d2:4d:19:d0:87:50:85:a7:00:f4:47:
                    66:db:46:fd:7d:5e:17:44:fb:72:b0:ef:80:07:80:
                    21:75:de:87:56:6a:c0:0c:36:04:ef:1b:c1:c3:61:
                    c4:f1:fd:2a:83:ea:5d:ff:a3:c0:73:30:37:8b:d3:
                    16:a3:d1:67:f9:7f:5d:8f:80:33:70:90:19:a7:89:
                    a1:e4:92:ea:bd:a0:7d:80:4d:78:fa:1d:b8:c7:05:
                    a4:dc:b2:ef:84:8a:1f:77:42:1b:0a:0f:74:ee:a8:
                    7b:21:cb:37:91:52:cb:d3:60:55:2d:56:ca:8a:0e:
                    5a:92:39:c5:73:86:fb:16:54:e3:f9:5a:a0:e3:ed:
                    80:ec:eb:40:5b:f4:4b:b7:56:98:a4:5c:13:a9:7f:
                    16:9d:6d:1c:2c:bd:a5:37:a5:54:56:0c:bf:22:31:
                    3e:b4:64:c6:46:51:92:d8:db:79:fc:6a:46:17:11:
                    37:94:19:8e:5b:67:73:81:79:4e:f8:6d:9e:a5:b4:
                    d7:67:58:f5:db:84:78:cc:8d:74:e2:86:9b:ec:a1:
                    3c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:49:C4:EB:87:16:D2:E4:EB:7F:BA:79:A2:A1:3F:A9:35:CD:B2:41
            X509v3 Authority Key Identifier:
                keyid:03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:84:28:74:97:9e:b8:6c:4c:9c:98:f0:f4:40:20:30:cc:15:
         3f:f2:e8:96:f1:db:f3:51:5c:f0:b1:a0:3d:01:6d:b1:3d:8e:
         e2:bd:4d:08:1b:61:64:39:fb:fb:78:31:41:66:82:90:a2:0b:
         3e:5f:f7:2f:21:98:30:cb:9d:23:55:3b:2d:45:62:c8:a4:dd:
         d2:21:82:b9:1d:c7:e1:af:c3:a9:ab:cb:ee:fa:13:fe:ed:bd:
         7f:2a:0d:d8:0e:76:44:16:01:da:f1:d7:94:58:be:1c:96:9f:
         24:5b:27:4d:e9:39:7f:e4:89:e9:0b:7f:b8:65:f6:4c:3e:fd:
         73:83:93:84:09:68:54:25:be:5c:09:76:f9:65:f7:51:9f:a1:
         57:fe:76:94:1c:67:f4:af:ec:27:7e:b9:5d:ef:d0:7f:66:77:
         28:1d:a8:3f:aa:26:35:4e:27:40:dc:b3:8d:97:40:0c:1c:0c:
         62:0b:c7:37:cf:4f:c1:ad:ee:71:79:58:cf:e0:17:30:ce:86:
         b6:2b:62:dd:3d:5d:d0:e8:52:26:3e:fa:4f:c5:cf:9e:13:a2:
         bf:78:c3:b1:f6:8b:a6:54:c4:91:c2:d4:20:c6:57:79:fb:fc:
         ad:18:0c:ca:d6:eb:5f:91:14:86:10:af:22:01:40:6c:26:a7:
         4f:0e:14:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:33 2025 by rpki-client