Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft
File:                     1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft (raw, json)
Hash identifier:          ZdyuYVJHBIEzz6aRBCPtAGuhSnsal9rGn9BQQDz+M9c=
Subject key identifier:   67:F9:A4:82:9C:CA:1A:2D:58:C8:49:4B:9B:2C:DC:63:D2:5B:D4:A0
Authority key identifier: FB:BE:33:C8:D1:8E:53:BF:D2:48:22:09:8D:C7:48:64:05:50:C5:04
Certificate issuer:       /CN=fbbe33c8d18e53bfd24822098dc748640550c504
Certificate serial:       0196B2C5C07B985294EC6F8E398750F1134F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft
Manifest number:          14DC
Signing time:             Fri 09 May 2025 02:00:26 +0000
Manifest this update:     Fri 09 May 2025 02:00:26 +0000
Manifest next update:     Sat 10 May 2025 02:00:26 +0000
Files and hashes:         1: 1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl (hash: 8KD8qjD3weUUbFHHUfS4Hfyh+WNpgvfh8Nkqg+nN2jo=)
                          2: 1LPXXVcn8YcrOhINi57GGnN80Vc.roa (hash: EuzggDd0CDcAYZ0FKfuRQi6JcLt5k3MGrLBckBR8HEg=)
                          3: Rxqhs05VJgswf5IagYYVduWK4dw.roa (hash: 9jWiYjM3BCeOeN51O2+mgMeypqqwXkFllajBFOOYBzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b2:c5:c0:7b:98:52:94:ec:6f:8e:39:87:50:f1:13:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbbe33c8d18e53bfd24822098dc748640550c504
        Validity
            Not Before: May  9 02:00:26 2025 GMT
            Not After : May 10 02:00:26 2025 GMT
        Subject: CN=67f9a4829cca1a2d58c8494b9b2cdc63d25bd4a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:19:e5:a0:c2:b6:94:eb:cb:8b:5e:5f:f6:70:
                    03:c1:a6:83:db:e7:88:a9:68:df:87:f5:49:64:79:
                    b7:0f:90:5f:6f:56:29:ea:c0:4a:ff:22:1f:88:a7:
                    9c:91:47:d7:c7:07:72:2d:c6:a2:ce:6b:8e:bd:60:
                    5b:03:8d:8b:8d:ba:ee:98:ec:44:bd:6e:1f:95:8a:
                    e2:fc:df:d3:03:d6:98:70:67:27:99:19:05:d8:6e:
                    26:e0:75:38:c5:58:2f:61:11:3d:e6:bc:9a:b3:ce:
                    08:53:cd:bb:69:c0:80:64:5d:c3:02:e0:3c:41:4d:
                    20:7c:01:ab:b9:ab:43:6a:9d:97:e6:59:1d:22:80:
                    9b:cf:ba:3e:03:8b:3f:89:46:36:79:5f:e4:37:21:
                    d8:e1:ab:75:d8:cb:c7:fa:45:21:24:de:6e:22:7c:
                    09:85:c1:55:53:c8:08:23:82:dc:a9:91:38:ac:25:
                    34:ff:0b:64:6d:2b:b7:1d:90:56:d4:47:f3:4e:da:
                    c9:bc:7f:75:3e:cd:58:6d:3a:1d:dd:79:0c:74:62:
                    90:82:82:af:0d:e2:dc:cb:d9:e2:da:3d:30:49:16:
                    ba:31:b9:10:a3:18:42:8a:68:4d:66:9e:e3:4f:96:
                    dc:e9:96:eb:de:c0:68:f0:f4:d1:aa:46:f7:2a:e2:
                    8a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F9:A4:82:9C:CA:1A:2D:58:C8:49:4B:9B:2C:DC:63:D2:5B:D4:A0
            X509v3 Authority Key Identifier:
                keyid:FB:BE:33:C8:D1:8E:53:BF:D2:48:22:09:8D:C7:48:64:05:50:C5:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ad:aa:e0:ce:56:b5:69:a2:63:c0:19:e2:c7:14:fe:3f:29:
         25:dd:d1:28:1f:d0:86:8f:95:f3:6b:33:dd:79:13:5d:84:04:
         ae:97:1b:81:e5:5e:cc:05:a4:20:f2:e9:70:44:b2:a5:5c:04:
         6d:a0:f2:4a:50:60:73:9f:9e:ee:8f:c2:ed:c0:84:fd:28:0e:
         d9:03:d0:63:20:07:10:49:3d:42:9f:14:db:85:05:9f:a1:b8:
         a9:f2:e7:1a:dc:39:09:ba:96:3b:5e:b6:cb:42:b8:1c:94:e3:
         f4:bc:32:aa:eb:14:3b:da:f9:bf:4d:83:c2:e3:a4:25:48:9f:
         ca:41:29:85:ae:b2:8d:91:4f:ee:aa:4e:20:72:65:d6:41:4f:
         2f:40:c1:e6:ed:41:7d:d2:b9:65:9f:56:76:bf:58:70:4b:16:
         8b:d7:47:af:30:df:e2:1e:17:2f:5f:21:21:ef:58:71:65:75:
         eb:2f:83:41:c7:9c:03:69:98:7c:c0:38:b1:d7:86:38:9f:85:
         94:25:31:0a:29:f0:78:b6:8d:80:b0:2a:63:65:fc:06:69:a1:
         36:20:8d:18:ae:e8:93:5f:af:37:4e:1a:9a:2e:c6:2e:5c:12:
         08:bd:88:83:8a:10:f2:1d:ad:39:a0:8c:94:5d:82:3e:57:1f:
         5e:81:47:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:56:12 2025 by rpki-client