Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
File:                     NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json)
Hash identifier:          8Gq4OMatho09YCCcmxOCMTP+O656nkcwdmIvqkWE9Ns=
Subject key identifier:   61:5D:2B:83:C8:8B:AA:2D:8E:5B:EE:96:E8:DD:2E:48:1E:BE:F5:58
Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
Certificate issuer:       /CN=344718d135a09bb524706b4259cabcc626e514ef
Certificate serial:       0196DCD4CD56F7A715B630393479609291FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
Manifest number:          14D7
Signing time:             Sat 17 May 2025 06:00:55 +0000
Manifest this update:     Sat 17 May 2025 06:00:55 +0000
Manifest next update:     Sun 18 May 2025 06:00:55 +0000
Files and hashes:         1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: tg6rWWfSDL9oqgKNkQNyHuSavjiZg/bPcqZgH4fhb3s=)
                          2: sO-QyC1vz5w60dvkaCQsXtLi8YA.roa (hash: wtWXsxxZV53+P/qICncBE0LIXN7QWpyRCdTXr4pbwmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 May 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:dc:d4:cd:56:f7:a7:15:b6:30:39:34:79:60:92:91:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef
        Validity
            Not Before: May 17 06:00:55 2025 GMT
            Not After : May 18 06:00:55 2025 GMT
        Subject: CN=615d2b83c88baa2d8e5bee96e8dd2e481ebef558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:ee:2d:ca:b5:f0:2e:2b:18:87:e7:e3:18:
                    eb:0e:1e:cc:c5:48:ad:a3:b9:9c:28:e2:76:f2:e6:
                    5f:f0:46:b4:e9:32:10:bd:a3:63:38:44:9b:7a:fe:
                    76:e2:fb:5a:ac:24:be:b4:03:38:19:78:a6:b7:a1:
                    2c:3f:14:20:1e:a8:44:46:df:fa:b1:67:fd:17:db:
                    0a:4a:e3:4d:35:4c:bb:f6:c6:aa:c7:8e:bb:72:60:
                    70:78:b9:fd:1f:01:8f:b5:08:e1:7b:48:09:b5:2a:
                    cd:a9:58:15:ec:9d:d3:58:4c:4c:7b:54:91:94:bd:
                    e7:55:4a:a9:bb:f0:9c:9c:33:67:d8:68:68:03:b3:
                    30:94:5c:38:6c:5f:78:6a:db:30:3b:75:64:e9:95:
                    12:f6:d0:c5:fb:01:a3:af:a0:e3:59:e5:9a:e8:b7:
                    81:8c:8a:b9:36:2a:e2:e0:4f:70:e9:73:82:c9:a1:
                    7e:e6:38:35:b6:d9:43:d1:26:ff:7d:4c:be:59:98:
                    16:3f:fa:82:12:28:3d:ed:d7:b6:fe:69:09:a3:12:
                    e4:75:2c:31:47:64:15:c0:8f:95:bc:77:5b:14:7f:
                    9c:8a:6f:61:72:cc:fe:04:d4:13:03:e1:1f:20:5a:
                    48:78:4e:d1:da:97:46:45:bd:4e:7f:83:aa:93:e2:
                    8a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5D:2B:83:C8:8B:AA:2D:8E:5B:EE:96:E8:DD:2E:48:1E:BE:F5:58
            X509v3 Authority Key Identifier:
                keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:0d:9d:93:02:62:2e:72:3c:6c:ab:fb:a3:f8:09:df:e4:5f:
         1d:89:eb:db:14:72:92:b9:ed:7c:06:7f:e2:a4:19:60:b6:88:
         7c:0d:fa:d3:a3:9c:65:27:48:74:14:56:81:fc:02:f8:b5:82:
         87:cd:66:ee:8c:d5:82:14:cc:7f:3c:dc:06:80:0a:17:c5:69:
         19:72:d8:eb:48:a5:ed:b7:b2:e2:2d:36:59:5a:1b:6a:31:1d:
         cf:09:5d:68:2b:bd:aa:c1:39:5f:6b:a4:89:e8:67:37:df:5a:
         d2:93:ec:d6:d5:9f:8a:66:f8:c5:24:94:27:46:1c:43:c0:8c:
         37:e4:33:f2:33:44:43:27:d5:dc:2a:cc:73:9b:77:7b:64:57:
         7b:4b:6f:5b:ff:62:96:55:b3:db:21:ac:e4:3c:39:35:24:72:
         53:08:78:c3:b5:7e:b1:93:07:6c:3f:21:e1:29:78:3e:df:c5:
         5f:55:e3:6e:df:ea:32:a7:84:75:68:69:10:70:2c:d8:f7:21:
         0d:a3:f4:3f:86:22:ba:15:2d:d5:a5:c9:8a:0c:50:0a:78:67:
         1a:c4:7a:e6:dd:28:d5:30:5e:4c:a5:bf:dc:68:dc:2d:86:ce:
         3e:e8:90:3d:db:05:3b:4f:10:84:f9:6e:41:96:db:1e:92:c4:
         c8:64:d2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:14:08 2025 by rpki-client