Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
File:                     cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft (raw, json)
Hash identifier:          Jp2bXzs7GGuPvhyEFcC2e5GBQI9MB5Gof5zMRrRfewU=
Subject key identifier:   6E:59:9F:3B:76:AA:11:55:3A:D8:CC:4C:E9:4F:8B:15:D4:43:D2:75
Authority key identifier: 72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
Certificate issuer:       /CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Certificate serial:       01969DBED087F51BD630B64DB6BDF9605620
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
Manifest number:          14B6
Signing time:             Mon 05 May 2025 00:00:50 +0000
Manifest this update:     Mon 05 May 2025 00:00:50 +0000
Manifest next update:     Tue 06 May 2025 00:00:50 +0000
Files and hashes:         1: cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl (hash: //2VTBH7fJ9y90WYls2nTqr8+cTkSocuNyo6vJciEYs=)
                          2: daRkFVsWIwe8tAsklauoDwt6UpA.roa (hash: a6fXOEYxSdy4VfRiyyu63eijEDfNFxmj7t/XlgH/vhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:be:d0:87:f5:1b:d6:30:b6:4d:b6:bd:f9:60:56:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
        Validity
            Not Before: May  5 00:00:50 2025 GMT
            Not After : May  6 00:00:50 2025 GMT
        Subject: CN=6e599f3b76aa11553ad8cc4ce94f8b15d443d275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2f:e5:00:4d:53:fa:07:6d:ea:b1:82:b1:0a:
                    a8:49:85:69:ab:d9:2e:aa:a4:f3:8f:9f:d0:ae:c7:
                    36:c2:96:63:b4:b1:c2:88:ff:df:91:47:70:bc:cf:
                    10:8d:3c:95:c4:4f:a5:4b:16:50:6d:7f:f0:4b:9e:
                    68:9e:33:c2:b5:e0:9e:7b:43:7a:22:66:c8:40:9c:
                    bc:1b:ef:82:32:e7:e8:c8:5f:b3:b8:46:16:ff:3f:
                    0e:83:fb:4b:1e:23:6a:08:9d:25:22:37:60:f2:a6:
                    2c:10:09:80:d8:4a:e2:eb:12:05:62:66:56:3d:be:
                    a1:8b:e7:62:24:b8:07:63:2c:08:e7:96:d8:62:96:
                    d1:aa:b6:5a:2d:0e:1c:a4:d3:bc:08:cd:01:4f:0a:
                    7f:14:f6:5d:7a:61:cc:c1:8c:27:20:84:56:74:a4:
                    b4:48:d9:7b:47:3e:2c:85:d7:40:95:45:9b:a7:b9:
                    d3:29:c9:6b:ad:ba:30:cd:2e:19:73:ee:6a:27:1a:
                    f4:7e:c8:48:59:9c:c8:92:42:09:50:5f:66:68:0e:
                    db:ee:37:fd:28:fa:3c:fd:ba:3e:41:60:6a:e0:36:
                    60:3b:d4:98:48:02:f6:6c:b7:c1:86:22:fa:1f:67:
                    5f:0b:a3:94:32:f8:c4:a8:84:75:e2:9b:63:32:77:
                    3e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:59:9F:3B:76:AA:11:55:3A:D8:CC:4C:E9:4F:8B:15:D4:43:D2:75
            X509v3 Authority Key Identifier:
                keyid:72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:7d:90:15:6b:5e:f4:15:87:c3:dc:47:b4:83:7e:01:a0:d3:
         0e:7c:05:84:9a:67:a5:1e:c3:61:70:65:d2:7d:08:97:f2:e0:
         79:60:54:fd:6b:4e:19:b7:65:d0:17:24:56:be:61:f6:98:c9:
         bd:7e:8b:9c:a9:69:02:90:fd:80:03:ee:dc:4f:f7:e9:d4:29:
         18:c8:56:81:27:5d:43:20:29:e1:0b:51:ee:44:52:84:19:b3:
         41:de:56:ea:62:cf:3d:7f:c8:55:9c:bb:a0:d1:4f:f4:fc:3b:
         22:4e:4c:54:33:db:a8:01:87:e4:f3:83:58:52:9a:f0:4e:71:
         b1:9b:4f:bd:6c:46:df:4f:7d:1f:4f:44:31:c5:c4:b6:07:b1:
         83:aa:91:07:58:62:10:ef:84:f2:f4:a6:54:69:1c:37:01:47:
         6e:53:68:22:5f:47:9c:d8:4e:37:de:e1:51:b5:43:21:b1:b3:
         b0:5d:99:1e:96:d8:41:34:dc:5d:33:6f:d3:6c:3f:2e:34:f4:
         bf:b7:73:41:9b:44:11:c4:cd:f1:4b:a9:1a:4a:97:36:a5:1a:
         72:2d:9b:5c:74:5c:17:b7:87:ad:4d:f0:42:8a:f9:0d:d4:eb:
         09:e7:c4:65:c5:f7:b9:2f:f4:11:ab:a2:c9:fa:b3:28:91:25:
         22:41:81:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:39:34 2025 by rpki-client