Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
File:                     M1etQG35k0tQSLX6Id4xRQuTb6k.mft (raw, json)
Hash identifier:          tQIoM4SCuDPTa+/HprakIEnHPyXhBhkflE6eMglEomQ=
Subject key identifier:   8B:BB:C0:57:A1:3C:8C:D3:B7:6F:25:26:AD:1D:47:A4:7E:7B:76:99
Authority key identifier: 33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9
Certificate issuer:       /CN=3357ad406df9934b5048b5fa21de31450b936fa9
Certificate serial:       01967BD74ABAA831376BED5CE35E7255A189
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
Manifest number:          1514
Signing time:             Mon 28 Apr 2025 10:00:29 +0000
Manifest this update:     Mon 28 Apr 2025 10:00:29 +0000
Manifest next update:     Tue 29 Apr 2025 10:00:29 +0000
Files and hashes:         1: M1etQG35k0tQSLX6Id4xRQuTb6k.crl (hash: HgbsghWwC0Mo7jLiQsprDKzWZOzWGX31qEsdp0tiVHs=)
                          2: m9KlvtpTq4Ql79O_O_rULA1w-zY.roa (hash: +h4/STkGCXYgH/sIOVE5dquJUDdEfzAIpbql2yKK20U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7b:d7:4a:ba:a8:31:37:6b:ed:5c:e3:5e:72:55:a1:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3357ad406df9934b5048b5fa21de31450b936fa9
        Validity
            Not Before: Apr 28 10:00:29 2025 GMT
            Not After : Apr 29 10:00:29 2025 GMT
        Subject: CN=8bbbc057a13c8cd3b76f2526ad1d47a47e7b7699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:50:d7:88:be:b2:e8:0c:63:fe:10:c3:73:ea:
                    f9:fe:4c:ea:ca:dd:ce:02:cc:3c:5d:20:ed:c4:da:
                    67:47:5a:73:37:5d:27:ac:cd:35:89:36:a6:e0:34:
                    a0:ef:eb:ab:99:1a:83:ad:b9:cf:b8:95:15:1a:28:
                    54:d8:4e:f1:b5:74:a6:f0:30:1d:d2:45:48:5b:be:
                    89:82:13:50:af:05:b0:6e:95:ec:20:aa:08:1a:ff:
                    25:d0:13:cc:f4:e9:8f:04:0b:5f:a1:d0:dd:88:7d:
                    dd:e6:15:49:fa:20:0e:74:e8:08:2b:f5:9f:1d:47:
                    51:15:ac:25:ef:40:53:65:03:a9:6a:2a:d8:6b:66:
                    70:1c:99:11:ab:1f:23:78:a2:9a:fa:bb:c0:fc:e6:
                    84:71:90:90:da:dd:41:e9:5d:6f:57:cf:96:5a:23:
                    2f:08:90:c0:45:6d:72:30:bb:4b:01:42:4d:39:59:
                    07:31:2e:98:04:62:4f:15:60:d9:e2:a6:e5:75:26:
                    f1:96:24:e5:db:28:f3:40:64:2a:40:32:c3:57:b7:
                    b8:63:f9:05:12:b3:92:94:ec:07:68:c9:05:9d:81:
                    3b:2e:76:54:76:0e:85:22:68:f1:03:3d:c3:49:f0:
                    9b:73:b1:25:5e:d1:9b:f1:2a:7e:60:d6:41:26:fa:
                    69:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BB:C0:57:A1:3C:8C:D3:B7:6F:25:26:AD:1D:47:A4:7E:7B:76:99
            X509v3 Authority Key Identifier:
                keyid:33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f2:b0:e7:0d:23:83:6d:93:fa:ca:f4:10:d2:77:b3:4f:f0:
         33:ea:f2:3e:bd:06:5e:f3:4a:56:d0:4a:e2:34:03:07:89:ce:
         7f:a7:5c:1d:0b:b0:1b:7d:d8:f7:8c:2c:18:a6:25:b7:e0:ff:
         3f:ae:de:a5:6f:eb:0c:63:ef:6d:10:92:b7:ec:bf:54:e2:48:
         da:94:58:2e:3a:c8:a1:b6:bb:1c:e3:c7:f2:9c:2d:db:5b:2f:
         bf:19:0b:14:ce:63:8a:61:fb:66:ae:ba:bf:65:b2:2e:0a:6d:
         93:a6:c7:57:93:26:c6:b3:a6:d6:a8:9a:ab:10:0a:84:90:cd:
         9b:93:24:cf:20:32:85:d7:a3:a8:2d:bc:9c:bf:08:b8:40:67:
         20:55:71:49:b1:2c:01:31:92:69:8d:d6:84:66:30:d3:ef:0a:
         d0:b9:4c:27:fa:7f:2c:e0:13:b0:98:09:42:74:2a:01:16:22:
         62:fd:a1:41:70:0c:35:8f:45:91:b0:b8:ef:39:ef:aa:1b:3a:
         d4:f1:a6:d4:34:a1:37:63:d2:e7:a7:71:53:8f:ca:89:61:96:
         c9:7a:b4:bd:65:c7:3e:4d:c9:4c:19:b5:f5:a8:4a:98:ae:44:
         94:78:ec:68:cb:1e:43:e0:ae:ee:0d:91:87:7c:a0:2f:2c:d5:
         eb:a5:82:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:08:09 2025 by rpki-client