Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
File:                     AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft (raw, json)
Hash identifier:          y/hHrR1toLYRg3OroDcGXdd1hrk2mym3iAkvVsvkBKk=
Subject key identifier:   96:73:88:3E:D1:47:81:36:E6:05:05:4D:43:6D:20:79:D2:6C:85:63
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Certificate issuer:       /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial:       01964A467E36A2BF64BCD24138D07F26AF61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
Manifest number:          1517
Signing time:             Fri 18 Apr 2025 19:00:55 +0000
Manifest this update:     Fri 18 Apr 2025 19:00:55 +0000
Manifest next update:     Sat 19 Apr 2025 19:00:55 +0000
Files and hashes:         1: 42hpqWqY72USafsvfiD_518D4aY.roa (hash: XyqSHkNb93lXjMdBQV3tT6d41VyHCZFCyukyVX/G7/A=)
                          2: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl (hash: cm+vUeUjs6JqUiLWLqVZ65rPqVSK90qCz7XawQnSsPI=)
                          3: B_3pca4XmmEyoD7_YWQ5xsaTGlA.roa (hash: n5M6+Js+wLuWN3HaqVwvyZeizy4tawLMu5EBkNvd9Nw=)
                          4: GNcGFP48VRO_QOUxz3CvJSh90oA.roa (hash: 9T1HgBLEzXKt2GaC2y8FBctN+punw/ln3V52HLktRUQ=)
                          5: IC2VX1jV_Dwi9TgKflm59IYMQeg.roa (hash: 4Tq4DinpdRGqkwFnGKnQe2ovlPCcyDT8nlsjtJqn5tw=)
                          6: g9Hs1uIFeelsIxcu9-JFATbg5r0.roa (hash: i1uLdd6dy3tsCAr6HgKPaDpJNpr4x+g5kpnEdrNnrzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:46:7e:36:a2:bf:64:bc:d2:41:38:d0:7f:26:af:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
        Validity
            Not Before: Apr 18 19:00:55 2025 GMT
            Not After : Apr 19 19:00:55 2025 GMT
        Subject: CN=9673883ed1478136e605054d436d2079d26c8563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:45:ea:59:1e:cd:22:aa:65:ce:0f:a1:2f:8e:
                    5b:f6:00:0d:93:37:3d:e0:60:0c:fe:dd:e6:5c:55:
                    99:b9:74:1d:92:32:55:29:10:cb:f1:66:c8:5d:f7:
                    9e:f2:ab:1a:dc:8e:f5:25:8a:c0:a9:0c:32:95:16:
                    29:0b:6c:85:7e:7e:33:fb:ed:38:21:b9:1d:9e:fd:
                    5b:e6:1b:a4:1f:d3:1c:2f:56:98:42:d8:27:9f:84:
                    61:6f:f8:08:01:6e:2d:51:1f:bc:fe:52:ed:dc:17:
                    81:ca:96:10:45:c6:a5:98:58:b5:61:c4:7d:d7:00:
                    f4:6b:3f:73:56:fb:ec:0e:20:b5:c4:c8:1e:3a:c4:
                    46:63:02:ed:ec:78:90:bc:7e:92:27:3c:cb:fb:31:
                    75:db:50:d4:f0:9c:66:c4:43:b2:34:b9:81:1d:0c:
                    ba:67:b1:71:75:3c:b6:39:25:64:21:f9:1c:7d:80:
                    1c:dd:c1:d2:84:08:de:66:92:53:ac:dd:96:ab:cb:
                    fa:72:c4:bf:57:4e:f8:f1:9f:08:18:8e:3f:7b:1e:
                    c9:4a:9f:0a:25:b2:fb:a7:00:ce:95:73:ea:0e:5d:
                    eb:ac:92:8b:c7:bd:c5:48:fb:8e:bd:52:15:47:86:
                    2a:61:74:77:64:c0:64:30:17:37:69:57:65:51:42:
                    23:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:73:88:3E:D1:47:81:36:E6:05:05:4D:43:6D:20:79:D2:6C:85:63
            X509v3 Authority Key Identifier:
                keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:08:7e:01:c4:00:f7:58:7c:08:23:0d:ab:41:3a:de:ba:b2:
         f8:20:ed:e5:f3:d6:dd:0d:67:df:fd:a4:a6:eb:fd:fc:62:20:
         f5:62:aa:d3:f0:dd:3f:50:f4:3c:79:d0:56:e7:9e:ac:b1:72:
         c1:f2:93:af:b2:ef:34:6e:94:33:04:ee:7a:b0:fb:90:e8:6f:
         68:a6:db:5b:cd:00:f5:f4:cc:43:9e:dc:86:93:b5:7a:fe:25:
         8a:cc:77:44:94:a4:53:b8:ba:6a:d2:98:9a:23:f5:50:45:64:
         c1:2b:0d:77:df:2b:fc:9c:01:45:be:94:2b:18:bc:c7:af:5c:
         fe:29:f6:a3:3a:cc:24:2f:6e:b9:30:1b:da:74:53:39:93:b4:
         f7:40:5e:78:d8:fb:cd:25:23:f1:62:4e:34:df:67:ab:72:5b:
         8e:86:92:ce:60:b9:7f:23:79:f9:0c:79:9d:86:48:96:b6:ee:
         ef:3b:db:79:96:df:f6:0c:ed:3d:84:ea:fe:4a:b9:db:26:8b:
         80:b3:f7:64:18:16:fc:7d:63:5e:b2:84:fc:f3:3e:f7:7f:87:
         ac:0f:c5:87:ed:7a:cd:32:87:b1:75:4d:5b:44:a2:3b:e7:e2:
         f3:83:cf:97:0a:95:b1:26:9c:14:9b:8b:50:62:b8:12:b2:8b:
         4a:7e:51:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:15:38 2025 by rpki-client