Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
File:                     V0AEDht6Uy3SrsIuk6YisuGzve8.mft (raw, json)
Hash identifier:          1hEiOC1y+ienHh5cQo7NpD7uAYVXkTGz6br2Jd9AoeQ=
Subject key identifier:   27:A3:EE:30:77:1E:FB:A1:33:3E:3E:54:70:77:51:38:05:15:BB:E4
Authority key identifier: 57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF
Certificate issuer:       /CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef
Certificate serial:       0196C683763E64819D1B2772576DBFA35F9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
Manifest number:          14CA
Signing time:             Mon 12 May 2025 22:00:26 +0000
Manifest this update:     Mon 12 May 2025 22:00:26 +0000
Manifest next update:     Tue 13 May 2025 22:00:26 +0000
Files and hashes:         1: V0AEDht6Uy3SrsIuk6YisuGzve8.crl (hash: L06iCWN3Xt//k+co277w9qOgZl0imdytIA2BXTw1I5s=)
                          2: wjijn454ptb7YjSwbgYustwNzJI.roa (hash: q85TNLC9Fv889V7DCE+ssvZg83i29aUc5JCe0NjjzpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 20:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:83:76:3e:64:81:9d:1b:27:72:57:6d:bf:a3:5f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef
        Validity
            Not Before: May 12 22:00:26 2025 GMT
            Not After : May 13 22:00:26 2025 GMT
        Subject: CN=27a3ee30771efba1333e3e54707751380515bbe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c5:0a:1b:30:ff:c9:ed:30:db:2a:02:a5:ee:
                    24:2a:71:96:61:23:7e:33:ec:55:9d:81:8e:df:27:
                    5f:60:cb:0c:91:f8:ed:d1:51:c4:f4:c0:81:e8:09:
                    9b:8d:eb:99:ff:3b:91:31:f8:ac:09:b4:65:85:94:
                    44:68:e2:6b:4e:ef:8a:68:e4:ff:b5:a9:4b:81:1a:
                    68:a5:0d:1b:72:5f:95:86:ca:cd:6b:b2:38:9f:63:
                    9f:91:a4:d3:35:02:66:d6:6a:fa:19:1f:a5:c6:0e:
                    ef:2c:ff:61:03:7a:26:52:e2:f8:55:59:e5:0c:34:
                    52:fd:97:82:80:15:2a:cc:de:4c:74:68:32:9e:97:
                    2f:9a:8d:2e:14:57:aa:93:07:82:07:89:b9:2c:99:
                    a2:cc:a8:0a:95:93:69:88:b1:b5:ee:3e:19:d0:82:
                    b7:2f:cd:3e:15:2e:60:30:52:61:c0:6e:80:7c:59:
                    d1:84:b5:69:f7:35:99:db:e6:5e:db:b4:7b:c7:18:
                    57:9e:11:91:28:ee:b9:34:f6:17:07:8f:79:46:1e:
                    91:34:78:a7:5e:ad:c2:c2:33:98:1a:04:d6:71:27:
                    98:da:58:d5:77:42:02:7c:f7:3e:a4:5b:28:7c:09:
                    26:fc:a2:2c:53:d7:35:ca:26:a1:ab:fd:61:2a:00:
                    4b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A3:EE:30:77:1E:FB:A1:33:3E:3E:54:70:77:51:38:05:15:BB:E4
            X509v3 Authority Key Identifier:
                keyid:57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:bf:25:a0:58:04:06:32:a2:b9:25:88:97:1f:62:55:b7:8e:
         6d:ad:b1:e3:b7:ed:5e:90:b6:c8:ac:6b:3c:b4:b9:99:7f:84:
         d0:90:4f:7b:3f:a2:21:3c:1b:5f:5f:f2:e6:e7:a4:da:e2:95:
         5b:8a:b3:d2:64:f4:17:aa:85:6d:5b:e5:30:6d:f8:71:d2:3d:
         44:63:45:8a:2f:eb:62:71:ac:c6:31:65:66:34:8d:ee:c9:2d:
         0c:b3:a5:62:cf:0c:d4:bc:5e:94:a2:a0:71:6a:cb:61:94:84:
         b6:ed:4c:4b:d2:f2:05:76:40:cc:9a:f1:32:08:6f:b7:75:5a:
         9d:a2:59:55:3b:41:f0:f9:41:de:2f:ba:f9:80:46:70:d8:a7:
         c4:3b:07:6a:27:39:81:98:82:bf:e7:b1:93:29:15:e9:de:45:
         6c:2f:86:03:e1:46:64:79:38:0f:92:cb:ec:ed:21:1b:ef:ee:
         1a:56:63:91:21:71:89:a9:ce:10:ab:d0:41:88:c4:f7:01:d3:
         12:88:82:ef:b2:91:6e:88:51:28:7f:92:d4:67:88:b6:b2:4d:
         94:d7:af:7e:b6:4d:22:6b:80:be:2e:d0:bd:44:27:39:a7:4c:
         8e:dd:34:86:0d:09:b0:9e:0d:52:4b:6a:29:37:ca:9c:34:11:
         3c:7b:f5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:56:55 2025 by rpki-client