Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
File:                     fciRFoK8XKcc7OHv46wTW_21ndY.mft (raw, json)
Hash identifier:          X+na7yd8K8AOHxVsp/ReAC7dj+4igA9X/59dCJR4cYg=
Subject key identifier:   8D:DF:C5:3F:0F:D5:19:9F:C1:8D:2E:8B:4A:8B:AA:5A:5E:39:D0:E9
Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
Certificate issuer:       /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Certificate serial:       01961DA4C3FE5BA59204CD4AD95DECD76C29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
Manifest number:          0FE5
Signing time:             Thu 10 Apr 2025 03:00:59 +0000
Manifest this update:     Thu 10 Apr 2025 03:00:59 +0000
Manifest next update:     Fri 11 Apr 2025 03:00:59 +0000
Files and hashes:         1: 1C7VKc2u55exTPgbJjVVBkVOjI0.roa (hash: KRmVo74m9sWKSF23ay7PgVm1woGp8Zi9hAMJIltDmzQ=)
                          2: 89VDXzZ_2U543z47EHsX9vI7wvM.roa (hash: n04qxgmbLydbIkFMhKcNu86o1ZcGuCf69Uot3/FJo18=)
                          3: NFCSs01oWicTZXFure0N-PnCCWU.roa (hash: IkEQYNHCh8tUXj0EFqiGDLC3qEKoo3Zp0TKOGNH6Vmc=)
                          4: StBmHSx-w-_okioInyoONk2sjLg.roa (hash: knizJ5Gckrod+kfPvKDkALhiu4VWJTPtSPrk3JWpWfY=)
                          5: fciRFoK8XKcc7OHv46wTW_21ndY.crl (hash: x0u2wBf0rveY/pZkY5+dhqeTrCdmXWuiYCaMCBY6yH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Apr 2025 03:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1d:a4:c3:fe:5b:a5:92:04:cd:4a:d9:5d:ec:d7:6c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
        Validity
            Not Before: Apr 10 03:00:59 2025 GMT
            Not After : Apr 11 03:00:59 2025 GMT
        Subject: CN=8ddfc53f0fd5199fc18d2e8b4a8baa5a5e39d0e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3c:49:31:be:6f:fa:db:4c:28:5e:23:93:cc:
                    df:a0:90:b7:e5:e7:49:7b:26:e6:fa:e5:1f:39:9c:
                    bc:93:76:cb:02:f6:b7:4f:38:e8:bf:8b:1a:fc:3f:
                    9a:b8:e6:53:e1:35:79:e0:1f:66:47:c4:97:cb:0a:
                    b1:0a:70:b2:fd:d9:1d:ef:a1:0d:46:f6:98:ee:9b:
                    69:df:f4:8c:89:66:52:c2:f8:02:02:64:26:e4:b0:
                    d1:71:71:e7:15:fb:3b:de:73:75:49:7d:2c:40:36:
                    e5:9c:68:ff:2a:b9:3b:73:6a:5f:eb:b4:9d:5e:90:
                    a9:fd:5b:31:e7:37:c8:85:9d:3b:e0:21:ac:8b:44:
                    6c:41:cf:16:62:23:28:ce:02:c8:fb:d3:4e:22:33:
                    0c:a6:2f:f3:4d:4c:1f:e7:ae:43:63:3e:f8:1a:bf:
                    45:b2:d8:85:f3:99:93:82:32:e4:f5:08:d0:a5:68:
                    53:27:9b:21:fb:9d:50:c0:2a:82:bc:da:e1:14:58:
                    72:77:cf:55:a4:e8:34:32:f8:01:56:4c:c7:a8:56:
                    be:59:6e:4c:82:67:1b:36:a0:c8:35:76:5d:11:af:
                    69:69:8a:1a:b2:21:ef:4e:e0:a9:16:32:f7:01:48:
                    ff:2d:05:04:9f:9e:be:9e:c9:c8:cd:73:7f:fc:42:
                    f3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DF:C5:3F:0F:D5:19:9F:C1:8D:2E:8B:4A:8B:AA:5A:5E:39:D0:E9
            X509v3 Authority Key Identifier:
                keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:22:cb:18:5e:38:66:be:77:3e:1e:f2:50:fb:d0:f8:ac:f3:
         b6:2f:06:14:c6:7c:a4:20:0e:2a:cd:c6:3b:d3:35:11:59:c8:
         38:fa:79:a6:59:11:55:19:19:44:a5:72:ad:d1:90:bc:36:eb:
         78:db:a2:77:6d:fe:a7:a8:a4:4c:2b:6c:a9:33:96:84:24:7d:
         67:34:0e:5b:50:ab:47:7b:f9:7f:61:81:4b:55:97:e6:ec:9d:
         f0:1a:a5:d8:15:e8:c7:4e:af:66:96:72:c5:24:79:dd:77:33:
         00:9a:6a:c1:7c:ec:a7:91:79:b5:ae:27:24:32:5d:c6:2d:33:
         c9:3d:58:0f:66:07:77:c7:03:0c:b5:1d:d8:e6:70:4e:34:62:
         ca:46:f8:68:89:e9:38:54:bb:94:0b:43:42:be:16:ea:49:99:
         00:3a:fb:f7:2f:c4:19:3c:af:04:42:68:ae:bc:fe:ea:3c:82:
         a1:1f:a2:87:ef:91:e6:14:26:c8:d3:d7:c3:e0:13:17:6d:db:
         c3:0d:8d:96:8e:ce:db:f4:a1:ba:f1:90:b4:1a:90:fa:42:68:
         8e:2f:bc:6e:bb:96:ce:98:d3:c4:66:ed:d1:25:50:06:0f:fd:
         6b:5d:9a:1c:87:52:ae:cc:84:7a:21:7f:54:cc:8a:e0:27:a8:
         a9:de:6a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:24:24 2025 by rpki-client