Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
File:                     F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft (raw, json)
Hash identifier:          DPtQWYeXVaQfPnlB6cIQBi2bYRd0AGjM+bmexDwxnQU=
Subject key identifier:   CA:7C:EF:AA:D7:87:91:86:9D:2E:4D:1C:D9:A0:37:9A:93:14:C1:A9
Authority key identifier: 17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F
Certificate issuer:       /CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
Certificate serial:       019653EE1BC54230419A525D5574DB95055D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
Manifest number:          13CF
Signing time:             Sun 20 Apr 2025 16:00:35 +0000
Manifest this update:     Sun 20 Apr 2025 16:00:35 +0000
Manifest next update:     Mon 21 Apr 2025 16:00:35 +0000
Files and hashes:         1: 1-JQsoXrJF1cL02AU4m3DYLwbUEg.roa (hash: 79cS9UiptLRApHw1SGPwVnRtKo+MdI4f+PG1mm8Q0Oo=)
                          2: F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl (hash: yW+aH17i5UsvRkH1UYA1ZbXpk5CA8fe/memFRwvJS3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:ee:1b:c5:42:30:41:9a:52:5d:55:74:db:95:05:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
        Validity
            Not Before: Apr 20 16:00:35 2025 GMT
            Not After : Apr 21 16:00:35 2025 GMT
        Subject: CN=ca7cefaad78791869d2e4d1cd9a0379a9314c1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7c:d4:13:7d:ea:52:75:d4:1b:b0:10:02:95:
                    ec:f6:6f:ec:4e:2b:da:95:cd:0e:dc:a7:c3:ea:36:
                    13:5e:93:10:42:06:79:4e:b1:7e:b7:d1:3d:df:a8:
                    f4:fa:22:0e:8a:be:ae:54:01:11:0d:ba:31:e3:ae:
                    f5:2c:7c:e0:73:ac:1e:b4:e5:e4:37:93:ce:5f:fa:
                    cd:34:8f:b8:61:c4:e6:92:dc:33:d3:b9:40:5f:04:
                    cb:8b:f9:34:2b:d7:87:92:10:fa:23:cf:7b:4c:92:
                    b0:3e:ac:9d:8e:93:5a:22:09:43:9d:dc:52:76:ce:
                    68:55:78:21:68:8e:71:36:c0:f1:bd:51:35:24:3f:
                    95:35:06:c9:a6:a5:6f:97:05:7c:34:8a:81:9c:4a:
                    39:39:66:53:36:f4:8a:ff:d0:66:75:36:3c:b3:04:
                    12:6b:2e:86:e6:60:78:1f:8e:fb:c5:2e:e1:0a:03:
                    47:52:7a:43:28:59:04:7a:23:52:74:ee:f6:b9:a1:
                    17:32:89:57:d7:3e:85:e1:40:b1:02:84:2b:82:f2:
                    ba:06:08:e0:80:83:a1:6f:31:22:53:3f:58:46:b5:
                    33:2e:70:13:a9:34:18:2a:b7:d8:bb:4f:47:e0:ad:
                    ad:f4:95:b5:c6:29:c9:9b:03:f5:0b:6c:8f:f2:0b:
                    85:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7C:EF:AA:D7:87:91:86:9D:2E:4D:1C:D9:A0:37:9A:93:14:C1:A9
            X509v3 Authority Key Identifier:
                keyid:17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ea:fd:be:db:9b:a7:71:8d:ec:7e:f5:37:1f:b7:cb:3e:9d:
         1b:11:c7:8b:f9:5a:6d:5b:39:e1:f8:ae:e9:8f:64:9a:99:39:
         58:f3:6d:78:e0:95:06:9a:24:1a:ea:c3:77:fe:4e:ac:38:d4:
         7c:09:06:28:d6:00:af:89:b9:45:a2:89:e0:e7:98:76:b2:dd:
         a7:3e:5a:80:cd:4d:ec:89:9b:fe:37:e5:bb:cd:bb:2b:09:e4:
         e4:6d:9d:11:66:7e:7d:df:63:0b:66:41:55:0d:11:68:90:16:
         f2:2f:16:8a:93:f0:f5:18:5e:6e:d5:0c:48:d9:92:27:be:12:
         6e:54:02:3b:aa:15:de:7e:fa:f8:16:33:42:c6:27:9a:6a:b1:
         95:fb:43:7c:80:02:80:41:b1:23:35:47:10:09:03:ba:0e:a7:
         f4:b3:bc:de:14:86:ad:0f:24:75:3e:dd:e1:e3:db:f9:a3:e1:
         23:8f:ec:1b:a4:12:06:a1:a3:3a:8f:55:90:0e:53:61:ed:0b:
         d1:ac:55:4e:cb:0d:24:bc:88:30:6f:2a:fd:4f:18:ea:3e:97:
         34:79:8d:4b:fd:0f:03:57:5c:65:1b:62:50:4a:bf:bb:74:c5:
         a1:ba:87:e3:fa:1c:b3:7e:d9:15:5b:57:8e:83:4e:32:3d:ec:
         5a:2e:51:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:04 2025 by rpki-client