Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
File:                     BFxfO7gRkXIMDd-LPPNNkdq04dM.mft (raw, json)
Hash identifier:          1JxsKAF86eiSnUdIIrAmnHPujL2c3Rph41UfutncwSY=
Subject key identifier:   57:C7:0C:B3:E6:79:C2:68:16:F0:2C:5B:A5:B6:1A:7C:3D:F2:FE:CB
Authority key identifier: 04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
Certificate issuer:       /CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Certificate serial:       01964D106C6D09AF61822C2F5DD66686975D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
Manifest number:          14F9
Signing time:             Sat 19 Apr 2025 08:00:43 +0000
Manifest this update:     Sat 19 Apr 2025 08:00:43 +0000
Manifest next update:     Sun 20 Apr 2025 08:00:43 +0000
Files and hashes:         1: A_nsrTfQ71u0UrzEQ6SNUm_3G2U.roa (hash: SR5+osvS+osGxE2DJ2TfgoITwWWe9DsyWc/ATbIOEEM=)
                          2: BFxfO7gRkXIMDd-LPPNNkdq04dM.crl (hash: S1wCs/5ZMu8g9asuR7gQSjMaFwRT3Q6aGDAscWA4EJ4=)
                          3: IDbbddFc14SqQa3mZmElYtVTmQY.roa (hash: 27Hv+jULUbGOWBtj+jEisHYpbRo4f4IxlnI8y0WtgFs=)
                          4: rk3ppAboxW06rE2L20ZKn9egqD8.roa (hash: 0BLnKXlmHhtn6//IbmeMPsDs46xu8jcRpBXK8EK9HJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:10:6c:6d:09:af:61:82:2c:2f:5d:d6:66:86:97:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
        Validity
            Not Before: Apr 19 08:00:43 2025 GMT
            Not After : Apr 20 08:00:43 2025 GMT
        Subject: CN=57c70cb3e679c26816f02c5ba5b61a7c3df2fecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3f:06:4c:69:02:cf:17:b1:1a:16:68:ee:7a:
                    de:20:cf:46:9d:1b:18:07:58:cf:1a:4a:5a:f5:ef:
                    1e:71:7a:fe:78:d9:cb:42:dc:7d:11:e6:89:d9:dd:
                    f0:e2:6f:1d:19:0c:a0:49:df:a5:bb:f1:be:7f:b1:
                    9e:ea:1c:3b:61:a4:02:b1:72:db:ea:30:ed:de:a4:
                    db:1d:db:38:b8:34:97:e1:37:94:75:08:0b:17:95:
                    16:4a:95:39:8f:c6:38:a8:fa:8a:65:9f:cd:5e:2f:
                    ee:56:33:10:f0:91:c4:9e:f9:de:73:60:0a:51:e9:
                    30:fe:6a:84:d1:34:da:14:c2:64:80:a6:c7:ab:db:
                    90:80:36:4a:df:17:63:b9:01:55:e6:05:8d:cd:c9:
                    44:e7:b6:d9:fb:a8:81:f7:13:7f:28:8a:3a:67:49:
                    6b:7c:a7:be:74:5b:6c:6c:0e:66:1c:58:9c:86:c5:
                    3b:43:9f:e1:da:43:65:43:71:bd:47:91:a1:d6:85:
                    ad:8f:f5:d2:77:69:a6:77:ab:47:b4:91:44:7b:9d:
                    75:06:d0:f8:4c:f0:50:30:8d:a2:7a:89:30:50:0c:
                    55:f2:39:00:96:af:c4:a1:d9:6f:a3:b5:e9:3c:c3:
                    ec:6a:9a:c8:76:bf:66:5e:5e:4b:6f:1b:b9:33:58:
                    7f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C7:0C:B3:E6:79:C2:68:16:F0:2C:5B:A5:B6:1A:7C:3D:F2:FE:CB
            X509v3 Authority Key Identifier:
                keyid:04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:44:b6:01:93:91:e1:19:9d:5a:11:c5:be:e6:57:10:af:3e:
         48:b7:2f:4d:6b:96:16:e4:bc:04:07:7e:84:cc:d6:dd:aa:0b:
         36:c9:be:82:31:ae:dd:c3:3c:64:d5:4e:69:07:b4:85:d4:f0:
         a8:39:f3:95:4d:ff:52:88:9d:82:82:70:5c:54:bd:29:a0:b6:
         20:b1:31:a2:66:4d:a7:a3:66:6e:15:64:fb:c9:cf:18:86:d3:
         fa:60:be:8e:bf:6d:1e:49:17:a1:5b:51:29:38:f0:8c:3a:36:
         02:e3:f3:28:3f:6a:be:8f:c8:77:94:8b:cf:58:65:98:ea:10:
         22:24:53:44:47:24:e4:10:33:4d:82:59:a6:7a:34:21:ac:a6:
         f6:8d:94:d8:a1:cd:f5:49:3a:4f:ab:e4:1b:6d:24:e8:80:51:
         99:f9:a3:9c:17:a2:18:de:e6:d6:94:43:32:18:60:5d:99:70:
         21:7a:e0:4b:eb:d5:b6:2a:67:fd:16:8c:38:22:ff:03:6e:73:
         85:fc:6b:a1:84:aa:ed:22:66:d1:ad:87:a2:4e:28:10:bf:0c:
         e3:cd:68:e9:81:6d:8e:0b:41:91:dd:20:02:d5:93:81:46:0c:
         75:6b:4a:43:69:0f:02:94:de:f3:4e:1a:cf:b6:45:fc:f3:3e:
         a1:34:d5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:13:15 2025 by rpki-client