Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
File:                     g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft (raw, json)
Hash identifier:          YxxPN2lFR/uBoVFIKEyIX/Gn/WKr5XronkJwaMyDV3g=
Subject key identifier:   70:24:4A:34:DC:5F:A3:0E:4F:04:FF:D1:CE:92:10:0F:CF:E3:91:1F
Authority key identifier: 83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04
Certificate issuer:       /CN=83646ab7062148edb8fa9b60a831c8240dcab804
Certificate serial:       0196CFF4CB2D334FA08171D998A648F98EE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
Manifest number:          0C13
Signing time:             Wed 14 May 2025 18:00:48 +0000
Manifest this update:     Wed 14 May 2025 18:00:48 +0000
Manifest next update:     Thu 15 May 2025 18:00:48 +0000
Files and hashes:         1: 20epV1j0HCMZ-uCYpk_kUZek4Go.roa (hash: 0IJbxaBTBJrWj2eiqCnd7zV+Z0NBZxwRizr0fkaGu8A=)
                          2: g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl (hash: R8oME9Zq0MnmOfR+U2OZrASd5iFD6d7iDFAHJwT39Wk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 17:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cf:f4:cb:2d:33:4f:a0:81:71:d9:98:a6:48:f9:8e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83646ab7062148edb8fa9b60a831c8240dcab804
        Validity
            Not Before: May 14 18:00:48 2025 GMT
            Not After : May 15 18:00:48 2025 GMT
        Subject: CN=70244a34dc5fa30e4f04ffd1ce92100fcfe3911f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:db:b5:ff:91:5d:dc:57:67:10:d6:e6:b6:46:
                    7a:79:b8:06:12:3f:58:18:33:8b:df:7f:60:c7:db:
                    b9:af:8b:47:83:8d:b9:a0:5f:12:6c:05:fe:be:0a:
                    42:80:0a:82:cf:af:b6:cb:6c:0f:81:fc:e0:cb:49:
                    df:aa:9f:2b:7f:cc:2d:d0:5b:c6:28:f7:b7:22:ad:
                    74:8f:31:ad:5c:5f:2e:c0:ea:9f:3b:fe:fa:ef:56:
                    e1:52:88:9e:7c:ae:80:42:66:f4:27:92:ea:f7:b6:
                    70:80:25:d6:24:82:8b:fa:64:8c:40:bd:78:dd:8f:
                    dc:87:34:0b:6f:52:72:fd:8b:2a:64:b2:61:f7:e5:
                    2f:9f:1c:a1:52:a4:d5:eb:8d:9f:01:88:3a:c3:12:
                    18:30:74:33:91:4e:b5:26:8c:b8:74:bd:42:ea:bf:
                    2a:83:d7:7c:c5:2c:b1:3e:4e:0b:2d:18:28:85:1c:
                    23:c5:47:0e:55:c0:b9:12:b3:c4:3c:81:c1:1d:1e:
                    36:f6:14:f4:33:80:98:c3:3b:eb:c8:85:98:08:15:
                    7c:af:06:a5:ad:cb:12:b5:69:00:0e:8c:7e:50:78:
                    b3:fd:45:24:08:8d:f9:89:2a:7f:65:48:de:31:cc:
                    28:76:ec:01:36:e0:0e:7e:56:4d:92:11:71:b4:ba:
                    fd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:24:4A:34:DC:5F:A3:0E:4F:04:FF:D1:CE:92:10:0F:CF:E3:91:1F
            X509v3 Authority Key Identifier:
                keyid:83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:5a:ae:3b:47:c6:a2:a4:33:9f:25:0b:94:9d:cd:c0:a1:7d:
         f0:f4:5a:7b:06:5a:b5:3c:56:cf:d5:e2:04:78:5a:bf:68:d3:
         37:f6:7f:39:78:7f:c8:c5:74:f6:f7:96:f4:ad:6b:12:37:f3:
         dd:96:21:8c:e2:be:df:75:e3:80:6d:28:1a:bb:a8:96:88:39:
         0b:fc:de:b8:9a:ce:cf:f7:2b:6c:d8:4e:b0:dd:f7:a7:52:e1:
         7d:9d:75:19:fa:92:3f:fd:ec:68:a7:b5:cb:e3:61:04:18:65:
         6a:a9:da:51:80:b9:d7:2f:c0:52:4e:90:b3:18:be:02:20:f9:
         1b:26:cd:0d:fd:05:2c:22:47:9a:9f:7a:68:d5:b1:e9:fd:39:
         b3:b6:ad:ed:44:de:05:81:8a:73:9c:0e:16:50:79:3c:68:51:
         fb:ab:5e:e0:dc:ec:ad:18:83:f2:2f:e2:c1:b5:d6:9f:62:c3:
         8a:4e:86:64:8a:e2:31:77:d3:2d:fe:82:7a:2d:00:80:82:87:
         78:31:fb:3e:80:50:57:d0:10:c5:d8:f4:8f:f2:95:3e:f4:40:
         1e:bf:08:f5:39:e1:d9:e2:4c:52:e0:46:d0:30:9c:3c:26:7e:
         3e:4d:b6:e1:d8:92:2d:a8:dc:c1:ff:e2:79:44:a8:71:16:c8:
         53:c2:e5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:21:09 2025 by rpki-client