Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
File:                     b88Z734vchyq9pz4LUynxLVBU2Q.mft (raw, json)
Hash identifier:          WC9gH1A3RGweARCrLyq2XqlrpvVkqLo07cIOmaBtDL4=
Subject key identifier:   8A:F2:98:32:84:82:81:6E:FB:DF:6A:EC:26:86:F5:75:F2:5F:13:3D
Authority key identifier: 6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64
Certificate issuer:       /CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364
Certificate serial:       01967FB478737609ADCAE3F296770EF6A7B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
Manifest number:          1514
Signing time:             Tue 29 Apr 2025 04:00:55 +0000
Manifest this update:     Tue 29 Apr 2025 04:00:55 +0000
Manifest next update:     Wed 30 Apr 2025 04:00:55 +0000
Files and hashes:         1: WzJBeEEQzWYcl7q5TX6p0F9jB_8.roa (hash: fTX9dCvlUyS92mU9zMfvVFn7IN42FVvudIXSZvqnY2s=)
                          2: b88Z734vchyq9pz4LUynxLVBU2Q.crl (hash: Gi5FeiNlnpwTeRlVQpzRX/ltfdQG6mhHZDWlCRfa82M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 04:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:b4:78:73:76:09:ad:ca:e3:f2:96:77:0e:f6:a7:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364
        Validity
            Not Before: Apr 29 04:00:55 2025 GMT
            Not After : Apr 30 04:00:55 2025 GMT
        Subject: CN=8af298328482816efbdf6aec2686f575f25f133d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3a:d9:d2:11:77:2a:f8:d6:32:4f:26:5d:62:
                    8c:a7:ee:af:88:c4:1e:4a:99:fa:af:92:8a:67:f5:
                    32:c2:50:e3:b0:af:65:16:a4:9e:81:dc:19:3f:5d:
                    69:0e:6a:ec:7a:60:5a:26:08:a7:8b:5a:63:dd:47:
                    91:2e:7d:49:4f:c1:c7:82:d5:58:4a:34:37:1e:68:
                    7e:48:ac:18:9a:54:c7:88:ba:91:1e:74:29:d6:d0:
                    91:99:2c:cc:70:12:44:1f:80:12:3a:7c:b6:77:be:
                    6d:8e:32:ea:68:21:0b:b0:2d:e3:15:7b:15:fd:26:
                    ed:3c:7e:e4:8f:f9:0e:67:b5:da:d1:8c:54:e7:09:
                    bf:99:53:d9:3f:d5:2b:a8:8a:89:3a:24:53:15:71:
                    a3:b4:0f:a6:e9:45:b5:f7:50:bf:ea:e0:0e:9b:27:
                    18:dc:7f:a7:3b:e1:d9:b2:02:dd:b4:b7:87:77:d5:
                    90:73:26:10:a1:fd:54:2d:47:8b:95:6b:23:67:84:
                    92:f2:f9:c7:3f:0b:db:5e:63:54:8c:21:9c:8a:22:
                    58:f6:e3:0c:f9:d6:51:3d:bc:e9:34:b2:9a:3b:b2:
                    7b:1d:03:2a:2c:1d:05:ee:b4:80:e1:29:1e:4d:ba:
                    cd:c4:81:08:3f:53:ad:9d:36:fb:f7:b0:4d:8f:d7:
                    f6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F2:98:32:84:82:81:6E:FB:DF:6A:EC:26:86:F5:75:F2:5F:13:3D
            X509v3 Authority Key Identifier:
                keyid:6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ea:29:d4:50:7b:65:9f:9e:66:da:a4:4a:59:c6:04:d3:b5:
         2c:76:37:a0:84:30:f1:8a:bf:b2:81:2e:ac:98:65:b9:f4:8a:
         19:a7:f7:af:0b:75:ec:db:32:0e:56:93:11:82:dd:f3:db:2c:
         a1:8c:c7:da:c1:b1:b0:ee:4c:c7:8d:ff:b1:b6:e6:65:39:1a:
         47:f9:9e:5e:84:26:d7:fc:3a:c7:40:48:a8:3d:20:22:6c:66:
         08:57:bf:28:ba:80:b4:10:29:9e:98:cf:3a:0a:15:02:37:34:
         1b:dd:d5:42:6c:2e:a2:56:cb:45:5d:c2:38:bc:96:ce:b5:32:
         46:f4:4f:5d:f8:ea:31:70:30:15:16:58:d9:68:f1:d3:cc:81:
         1f:91:67:2c:49:e5:fc:8d:67:0f:11:c7:8b:fd:1c:e6:52:cb:
         d9:92:d9:a1:8a:88:1e:32:e5:aa:ae:7d:1d:38:b6:da:3a:fe:
         08:9e:75:e0:e2:97:28:6f:e7:59:e8:a0:90:9a:01:87:db:a7:
         75:a5:36:2a:2a:ba:7b:c8:96:ce:f0:b2:97:32:8a:28:3d:25:
         83:2a:ce:4a:49:2e:4c:55:2a:d8:a4:fe:57:2f:fc:f4:d6:a5:
         5c:8e:25:9b:0c:22:58:f1:6f:21:69:e5:a1:3b:fd:f7:2e:68:
         65:69:8a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:36:18 2025 by rpki-client