Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
File:                     79rqxvigN0g5cw_IVnlXCeGO2RY.mft (raw, json)
Hash identifier:          syTaCchCDNOS6JdtcPE4m3ocihA2ex1m42CsQCh1nBY=
Subject key identifier:   31:88:74:FD:46:35:C3:80:29:D7:04:6A:4E:00:01:E6:BF:2B:0F:73
Authority key identifier: EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16
Certificate issuer:       /CN=efdaeac6f8a0374839730fc856795709e18ed916
Certificate serial:       019681A2DA6009886B4EC56E749AE8EC5D84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
Manifest number:          14A5
Signing time:             Tue 29 Apr 2025 13:00:55 +0000
Manifest this update:     Tue 29 Apr 2025 13:00:55 +0000
Manifest next update:     Wed 30 Apr 2025 13:00:55 +0000
Files and hashes:         1: 79rqxvigN0g5cw_IVnlXCeGO2RY.crl (hash: JvGAO9QNL0mwfAKVSw7ve+ZgFcXY76PqDP4Rigyhii0=)
                          2: jBd9B-QxZd6kSJHakHtwWCRpb8g.roa (hash: D/BN6zrh/Ppu12+wqVsmd0mbM1Dy48uvpuG5EGpyN0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 13:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:81:a2:da:60:09:88:6b:4e:c5:6e:74:9a:e8:ec:5d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efdaeac6f8a0374839730fc856795709e18ed916
        Validity
            Not Before: Apr 29 13:00:55 2025 GMT
            Not After : Apr 30 13:00:55 2025 GMT
        Subject: CN=318874fd4635c38029d7046a4e0001e6bf2b0f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:64:44:b4:b6:ad:96:ff:c3:2b:61:77:8d:10:
                    55:3f:19:be:b0:8a:29:04:db:d2:fc:5f:32:e8:41:
                    5e:05:b3:09:78:56:2e:34:3d:60:c2:c8:19:28:49:
                    20:b5:0c:1f:0b:11:f0:d5:e6:4d:74:bb:31:b5:90:
                    da:78:01:54:0f:eb:7c:b5:9d:49:86:7b:f5:80:b0:
                    6e:bf:d7:75:29:6a:97:3b:86:ce:b9:d9:49:66:d4:
                    95:ad:46:c8:be:da:b3:96:31:ae:38:1e:54:a4:c7:
                    69:a3:67:da:76:cd:3e:19:3b:3c:a7:d6:52:17:7d:
                    d6:84:09:13:fd:e3:04:ca:3a:07:48:87:b9:f2:2c:
                    c7:f2:67:55:3b:19:43:d9:11:d3:e3:4d:3d:f0:b8:
                    73:02:53:37:5e:d0:92:70:53:38:4c:47:86:3f:f6:
                    74:47:ac:d2:f4:41:02:a4:d0:06:85:31:8a:69:2a:
                    81:b3:59:51:2a:c7:35:9a:aa:b4:ca:53:80:a3:61:
                    b2:09:71:64:eb:cb:0d:c6:1b:b4:64:2c:a9:7e:14:
                    ff:66:29:3d:7b:9c:24:0a:9d:65:32:75:e7:bd:2c:
                    d9:56:24:6a:83:be:b0:f3:1e:51:40:7f:bf:17:67:
                    91:70:23:bf:43:ab:51:96:dd:0d:f5:eb:a4:37:c9:
                    de:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:88:74:FD:46:35:C3:80:29:D7:04:6A:4E:00:01:E6:BF:2B:0F:73
            X509v3 Authority Key Identifier:
                keyid:EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:bc:56:32:ca:b0:bf:10:21:30:9a:05:07:35:3e:58:0b:64:
         73:7e:6d:76:92:71:60:d5:c7:e7:2e:6f:fa:0a:b2:3a:a4:47:
         1c:1a:03:3a:34:1a:a4:90:28:ff:82:be:27:46:86:a2:02:a8:
         27:79:ea:55:77:03:b3:1f:c1:f5:b3:a1:cd:08:46:1a:81:d9:
         ba:14:ee:44:0b:76:96:10:96:eb:ac:3a:c8:00:7f:a9:b7:c8:
         e2:e8:35:06:2f:c0:a7:d7:2a:20:18:25:22:74:d9:88:15:7e:
         59:f5:ed:b4:3d:cd:48:4e:82:7b:7e:28:43:6e:72:45:ae:88:
         3c:e0:b5:09:96:b7:94:99:ed:d8:4e:3c:e9:d0:38:b3:e3:4a:
         e6:17:39:24:e0:c1:6b:2a:ef:2e:53:b4:aa:0a:69:7a:b3:b0:
         c2:b0:2a:8d:48:7e:18:48:7c:b8:34:7e:4b:a8:14:c2:51:d8:
         ec:03:1a:96:b0:e2:87:a6:9c:f4:bf:81:5d:dc:89:9c:9a:4c:
         e4:a4:2f:95:7a:07:2c:8f:e6:f7:37:db:e3:ba:a5:95:22:ff:
         db:e4:b1:14:e4:a2:81:cd:7f:b8:40:bc:53:ca:28:9f:a9:7d:
         71:34:81:fc:84:f2:c6:bf:db:aa:1b:d5:e1:a2:2e:f9:28:38:
         e0:05:a5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:42:02 2025 by rpki-client